Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: HhQT6qnLsg9VxgmBvuVmnEfMDQD4dQDJamMmxGcmBEQ=
Subject key identifier: 2A:DE:86:D0:68:25:59:3F:69:74:49:2E:55:45:BF:B1:73:B5:78:5C
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0196BCA4F444D6B7B5F29A26CBAC4F1351CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1534
Signing time: Sun 11 May 2025 00:00:49 +0000
Manifest this update: Sun 11 May 2025 00:00:49 +0000
Manifest next update: Mon 12 May 2025 00:00:49 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: D/AixObVEVomVTWAnbYgnWE76zqwi93R6oW4+os9lxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:a4:f4:44:d6:b7:b5:f2:9a:26:cb:ac:4f:13:51:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: May 11 00:00:49 2025 GMT
Not After : May 12 00:00:49 2025 GMT
Subject: CN=2ade86d06825593f6974492e5545bfb173b5785c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:18:64:0c:73:9f:e1:f8:2d:55:b3:63:e5:
b5:28:6f:2f:34:40:36:22:b4:95:2b:fe:8e:84:ad:
9d:29:1f:73:17:c7:54:d1:ed:96:02:86:38:c1:be:
21:e1:6d:17:c2:31:01:61:85:c4:de:57:06:ec:87:
41:2d:e8:58:ba:eb:a0:42:7d:27:d8:ec:dd:17:de:
99:41:ee:c7:1f:5d:5d:68:c0:95:e6:bd:39:0c:10:
90:55:58:a9:37:71:85:af:3a:c4:37:e1:fc:ae:37:
da:02:07:fa:69:29:35:bd:c9:2d:f7:df:99:bd:45:
5e:4f:c4:ed:21:ef:05:ee:ce:dc:5b:d9:74:d9:44:
89:a8:34:b0:cd:16:2d:92:75:39:b6:50:06:08:df:
8f:42:49:1d:08:75:2c:e8:a4:53:0a:43:a3:64:67:
8a:7c:43:30:b1:95:d4:e7:25:62:7c:3e:03:53:ce:
f8:8e:fa:53:76:18:75:48:2a:64:1f:b8:7d:5a:53:
68:5b:5c:d1:d8:1b:74:08:ed:2f:36:cf:cd:be:c4:
fd:7e:45:66:a6:eb:10:98:ed:33:24:7f:99:fd:e5:
62:84:29:51:4b:bf:8b:c8:56:68:45:73:9a:05:57:
ad:10:39:ec:41:dc:f5:b8:4e:87:77:2d:0a:16:47:
40:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:DE:86:D0:68:25:59:3F:69:74:49:2E:55:45:BF:B1:73:B5:78:5C
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:45:6c:b6:9f:e4:a4:05:2c:9e:d7:e2:6c:70:d2:80:f1:33:
7e:bf:67:02:1a:76:f9:33:14:c4:c9:96:29:d3:e2:6a:65:e3:
f4:6b:b2:d0:b1:73:1e:dd:f7:f3:54:26:8a:8c:80:51:86:e3:
27:51:70:88:0f:2b:bf:7f:e2:27:9a:c7:4b:1e:f4:c5:e0:3a:
a3:da:80:7d:91:71:fb:2e:75:f6:31:08:73:fe:80:80:f6:8c:
78:d0:a1:80:f3:89:d3:c3:93:a5:2c:59:4e:16:88:fa:4b:14:
8b:d2:91:65:64:ad:c0:8f:33:c2:d1:dc:d9:1d:ec:3b:04:0b:
0a:aa:5c:1e:fc:0a:bf:91:25:9d:b7:98:08:ea:ba:91:36:ae:
d7:c4:d1:2d:e7:6d:cc:42:19:85:70:76:67:89:10:6f:42:04:
cc:e0:4b:e6:a5:f9:5c:9a:ed:ed:d1:90:f7:ae:3e:48:fa:91:
17:da:6d:d3:f5:ba:67:49:8a:d5:af:d9:52:8e:8f:e2:a0:43:
33:17:f3:4a:e3:c6:64:86:15:ff:71:23:b0:df:94:88:cf:72:
90:6a:d3:a9:54:2c:4a:cc:63:f8:44:8b:dd:59:2d:79:17:ff:
ab:c1:2d:19:84:2b:a0:4b:af:b7:a4:07:50:38:e4:1e:9f:fe:
14:ca:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:34:01 2025 by rpki-client