Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
File: K_sNVIxJtqVhik07PB2kw9FEv0Y.mft (raw, json)
Hash identifier: H+eK5xZO9Odi05KoY5jYKVWYx1Sh+tA5ePTVPAfIKRY=
Subject key identifier: 38:7E:82:24:EB:B3:3F:46:1B:5E:06:A7:16:C5:47:D3:09:11:08:80
Authority key identifier: 2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
Certificate issuer: /CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Certificate serial: 0196AD31BCEEF63ADE735EE84B4C0972DA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
Manifest number: 0ACD
Signing time: Thu 08 May 2025 00:00:40 +0000
Manifest this update: Thu 08 May 2025 00:00:40 +0000
Manifest next update: Fri 09 May 2025 00:00:40 +0000
Files and hashes: 1: BZKsmbKkOgpiNQItA4ToED7-XVE.roa (hash: +K+xyT8SZ5ycbey8u6qvz7hsOUxVuM3hMuLKIog812k=)
2: K_sNVIxJtqVhik07PB2kw9FEv0Y.crl (hash: V9+lHTipNyMVVkAKjgK05CM0cZ0UC9xSzeqAUpaljr0=)
3: igZag3cgyJRdv01vkp4DRY6VvTk.roa (hash: JpGBcXUxW150Ej7SxtVldKg4tZ/GU0LkZvopH1/QgMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:31:bc:ee:f6:3a:de:73:5e:e8:4b:4c:09:72:da:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bfb0d548c49b6a5618a4d3b3c1da4c3d144bf46
Validity
Not Before: May 8 00:00:40 2025 GMT
Not After : May 9 00:00:40 2025 GMT
Subject: CN=387e8224ebb33f461b5e06a716c547d309110880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f5:1f:ee:e0:5f:c4:d1:ec:e2:43:c2:09:4d:
f4:b3:36:14:f5:d9:54:0b:03:7c:74:d7:5e:d2:9a:
42:92:8e:e1:a2:e4:dc:eb:78:9e:5e:6d:3c:47:88:
02:29:ae:18:36:e2:5a:53:95:70:3e:27:32:d9:98:
75:e5:d0:2c:6d:dc:aa:e4:47:38:e0:31:83:95:ee:
05:71:be:b3:b8:61:e2:a3:78:9f:d9:e1:10:c9:08:
1e:d8:80:d5:32:35:7c:1c:83:8c:24:00:fe:c8:3c:
79:13:11:46:a2:e2:8b:b6:ff:4e:9d:f1:10:c0:35:
95:04:b6:cc:99:76:2b:85:3f:22:6a:01:a1:37:df:
e4:eb:2d:ba:bf:5e:e3:2e:ee:84:b6:ea:be:9d:53:
bc:af:df:82:d7:58:56:f7:ec:2a:ec:05:10:e1:09:
39:fc:11:53:7a:2c:46:66:b6:70:09:7c:c5:a3:55:
d7:a9:33:0a:d8:72:e9:c0:b5:ba:97:f1:9f:a3:4a:
cd:79:60:0e:04:25:30:30:cc:cd:3f:09:bb:90:cb:
88:07:e2:32:83:01:e0:1c:db:d1:2d:e6:18:5f:6c:
7d:f2:19:9e:2a:79:e2:6c:49:e5:c0:9a:aa:28:c5:
6b:a3:80:d1:93:73:68:ab:03:56:f2:10:21:77:b2:
d6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:7E:82:24:EB:B3:3F:46:1B:5E:06:A7:16:C5:47:D3:09:11:08:80
X509v3 Authority Key Identifier:
keyid:2B:FB:0D:54:8C:49:B6:A5:61:8A:4D:3B:3C:1D:A4:C3:D1:44:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_sNVIxJtqVhik07PB2kw9FEv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f5d0f9-ca2f-4b6e-917c-137109369621/1/K_sNVIxJtqVhik07PB2kw9FEv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d7:ae:0a:31:3c:f6:2a:2b:5e:28:84:5c:5a:76:bc:43:3c:
8b:0a:79:58:a2:a3:00:a3:e5:2e:21:bb:5a:fa:0e:cd:9c:47:
e3:f7:04:67:9a:0c:7e:b5:32:0f:9f:a9:9c:9b:40:0d:94:1e:
24:ca:b4:8d:e7:58:2a:b6:5e:cb:a1:39:8a:6d:fc:8e:ec:57:
00:2c:27:92:27:30:38:5a:66:62:24:e6:7f:75:6c:1b:4b:87:
09:b0:ba:55:0c:1b:cd:01:38:5e:da:be:a7:22:fb:42:1f:89:
fc:2f:43:ed:81:e9:fe:94:e5:d7:2f:fc:2d:f0:9c:e9:5d:7f:
68:2f:69:a0:59:b4:69:27:91:42:1b:03:e2:3a:32:bc:d5:87:
56:e4:59:0d:7f:14:2a:5b:33:8a:76:28:ea:d0:71:93:f4:3a:
b2:3b:ab:3e:dd:78:a7:a2:a6:33:6b:ee:1c:c5:6e:80:d6:68:
1a:85:a6:84:95:65:ff:46:98:07:cb:17:7c:65:80:cb:1d:9a:
a3:d9:da:f7:e7:0e:7e:45:1c:5e:bd:74:03:72:89:60:d1:a9:
2e:ec:ef:b5:1f:89:42:99:63:7c:0a:54:00:f5:c3:39:42:0f:
59:af:ed:d9:e9:14:6a:fb:95:d9:4a:37:a7:79:ee:f6:5d:6d:
1c:de:1f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 06:38:01 2025 by rpki-client