Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
File: mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft (raw, json)
Hash identifier: CgWjNNsdww1YOoqRVd/2QQJapbOgyMCxM9XDX4tELhw=
Subject key identifier: DA:1A:0B:3E:07:26:FB:D4:B9:A8:5E:6D:EA:11:95:16:64:03:5C:F6
Authority key identifier: 98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
Certificate issuer: /CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Certificate serial: 01965B0344180751FEF7A65DD824303E99CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
Manifest number: 1095
Signing time: Tue 22 Apr 2025 01:01:02 +0000
Manifest this update: Tue 22 Apr 2025 01:01:02 +0000
Manifest next update: Wed 23 Apr 2025 01:01:02 +0000
Files and hashes: 1: KkXU6YkVywPte3FQKPTwmXq43Jw.roa (hash: +grv15uxretevWYIDb50yFoisYnL85l43pH++WpX3xI=)
2: mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl (hash: ijwV/nenEQFfenRWP5BL2fdYE5QkUgEgUfcJK9qlBGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:03:44:18:07:51:fe:f7:a6:5d:d8:24:30:3e:99:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98a987c6cd0a36f94dbef10ef2a2c66020a95611
Validity
Not Before: Apr 22 01:01:02 2025 GMT
Not After : Apr 23 01:01:02 2025 GMT
Subject: CN=da1a0b3e0726fbd4b9a85e6dea11951664035cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ef:34:ad:3b:00:ec:5a:ff:d9:a6:fe:4a:79:
7d:da:f2:13:6e:0a:fb:42:15:62:4f:77:a1:8a:a6:
03:af:11:67:ca:f6:83:59:c9:7c:5a:c3:1b:23:a4:
fc:b6:18:ef:6a:10:aa:88:ae:13:65:88:e2:0d:51:
da:58:f1:f5:01:2e:f9:a8:35:41:fc:92:0e:4b:89:
85:40:72:55:a1:a7:40:83:76:7f:65:b8:7f:30:cd:
c7:5b:33:58:9c:0f:d0:ca:9a:c5:4c:dc:26:4a:0d:
c7:74:1d:ec:43:48:f0:1e:8b:73:86:0e:25:e1:4c:
ea:c1:6d:44:14:40:ef:a7:d4:ce:f8:3d:e7:66:7d:
8c:bd:4c:7a:66:d5:c3:ac:68:0b:4e:cd:4a:43:71:
1e:11:dd:1d:0c:b1:e6:36:d6:86:f5:81:d8:04:8c:
30:6f:4b:b7:d6:62:c1:ab:18:e6:00:03:cc:b5:b1:
c9:38:86:a0:f6:90:ed:9a:f2:8d:d7:0d:00:72:87:
48:b2:8c:b1:52:07:be:b1:db:7b:d7:ac:31:9f:70:
4b:5a:a2:66:2d:0e:5d:29:f8:53:05:38:0a:2a:92:
ff:01:f3:94:c6:8e:1d:eb:00:25:c6:f7:4e:63:cd:
ce:6a:70:35:06:c7:78:5e:c6:8b:71:4e:aa:96:82:
67:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1A:0B:3E:07:26:FB:D4:B9:A8:5E:6D:EA:11:95:16:64:03:5C:F6
X509v3 Authority Key Identifier:
keyid:98:A9:87:C6:CD:0A:36:F9:4D:BE:F1:0E:F2:A2:C6:60:20:A9:56:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKmHxs0KNvlNvvEO8qLGYCCpVhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ab8307-5f9c-49c6-8a0b-f3b45819f2b0/1/mKmHxs0KNvlNvvEO8qLGYCCpVhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f5:23:71:94:88:9c:4a:36:88:5e:41:7e:94:17:23:80:43:
79:35:0e:a8:dc:c7:3e:d4:6e:89:ba:1d:d8:67:df:24:bf:50:
84:c2:c2:fc:a2:b0:ea:8a:b7:6f:99:c4:3f:c6:69:f3:6b:aa:
43:6f:77:76:83:a0:46:0d:c9:4f:9e:24:7f:c8:b5:70:0e:ce:
2d:85:fa:4e:1e:7b:74:d4:55:d2:38:e7:e1:98:6e:81:68:8e:
f0:f7:ba:eb:bd:47:c3:d4:a7:ff:07:3b:af:e2:6c:83:0b:05:
5e:36:7e:1a:de:e9:2f:ca:13:7d:73:66:b2:49:30:ff:48:6b:
e4:09:72:aa:e4:f6:93:fe:80:c5:88:86:d9:f2:37:07:aa:b9:
06:6e:aa:49:24:aa:9a:8e:bb:37:37:df:e4:86:dd:d9:68:bb:
a2:f2:0f:c5:23:2c:a1:ac:fa:c6:01:51:8f:cd:55:e7:1d:27:
0f:15:33:6a:a0:42:aa:d9:1e:79:d2:cd:a2:0a:9f:7d:3c:a4:
79:b4:ed:7c:a7:f5:35:d7:42:94:52:27:09:57:d6:e5:e2:8b:
03:19:9b:67:84:ab:f8:eb:d1:9e:35:a0:0a:33:b3:c5:e0:17:
3d:e1:30:36:59:99:d9:e4:41:f2:65:e7:de:99:1e:87:b6:46:
49:3c:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 10:27:07 2025 by rpki-client