Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
File: k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft (raw, json)
Hash identifier: zMh2udSqgWQ1f8o8skjmZ86Wdo78WHlZAP9BCdaOqoY=
Subject key identifier: F7:94:73:3C:C1:DF:8A:6D:C2:19:7B:B7:17:AB:2C:7F:1D:49:77:99
Authority key identifier: 93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
Certificate issuer: /CN=935c42857e302feb14017301e43c39fe45e7f629
Certificate serial: 019658387C53FB7E8AE4D6A82DB14FEBA7DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 12:00:18 +0000
Manifest this update: Mon 21 Apr 2025 12:00:18 +0000
Manifest next update: Tue 22 Apr 2025 12:00:18 +0000
Files and hashes: 1: 9w7Z5uUGAiM-_Df1voiT4N-AIgQ.roa (hash: MPq4XPIwVMd5VTIFEn8awNds0lwWw2BnIcp13WOQH2k=)
2: BDePhfa6XjPm6GJ2nhEOB22J0Cc.roa (hash: +yLTNZd1DxNd/w4/Tt21tkQYSV5rMNl3vDHxAq0lK+o=)
3: k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl (hash: gSm9xLaB1VLtsN6d42tS8lENvpftxdd737v2IdzbYpc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:7c:53:fb:7e:8a:e4:d6:a8:2d:b1:4f:eb:a7:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935c42857e302feb14017301e43c39fe45e7f629
Validity
Not Before: Apr 21 12:00:18 2025 GMT
Not After : Apr 22 12:00:18 2025 GMT
Subject: CN=f794733cc1df8a6dc2197bb717ab2c7f1d497799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0b:37:c3:eb:2c:e6:e0:75:bb:5e:7d:9d:5e:
33:41:e7:66:f0:25:c0:0d:83:91:fc:cf:24:58:27:
c4:7f:f1:a5:f4:cd:6b:28:9d:44:75:4b:26:95:5e:
e0:54:de:48:dd:2b:1d:69:6d:33:19:22:22:51:27:
f5:c6:1f:89:65:39:31:be:ea:12:72:02:3c:d3:4a:
96:ee:cd:ab:52:a4:82:d4:48:f1:12:fb:e1:95:b4:
c8:28:82:11:33:16:7a:51:8a:8c:ea:35:75:84:ff:
38:e6:49:eb:7a:d7:70:17:d4:71:b8:9f:e1:0d:9e:
59:a7:54:02:c0:fb:2e:b7:1e:4a:80:61:d8:f5:f2:
53:4d:6f:f8:63:c7:22:6a:63:71:5a:3f:f9:5c:f1:
f0:14:10:cc:29:52:28:15:58:98:79:d2:18:8d:40:
db:fc:94:01:ce:7a:c8:89:4b:a9:05:58:3b:91:e6:
9c:e4:3c:c1:5b:a8:a4:d8:d1:c0:12:5d:22:45:21:
20:cb:53:4e:d8:ee:5c:cf:52:92:95:c8:c0:dc:73:
5d:1c:13:89:c7:bd:18:af:91:38:44:20:49:bf:08:
2f:a0:bc:8f:7a:68:62:ea:c5:ea:98:3b:28:ac:3f:
29:81:60:04:16:53:15:25:4d:a2:d4:1d:8a:50:0d:
70:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:94:73:3C:C1:DF:8A:6D:C2:19:7B:B7:17:AB:2C:7F:1D:49:77:99
X509v3 Authority Key Identifier:
keyid:93:5C:42:85:7E:30:2F:EB:14:01:73:01:E4:3C:39:FE:45:E7:F6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1xChX4wL-sUAXMB5Dw5_kXn9ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/55e529-b839-444f-872d-1bfd10a8845a/1/k1xChX4wL-sUAXMB5Dw5_kXn9ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:3e:0c:8b:32:e3:7d:0a:14:d8:b1:76:41:ef:d1:34:f7:0b:
f0:c7:6f:ba:fc:ba:49:4d:1c:92:71:62:10:c6:c7:9c:c2:37:
7b:29:1b:d3:66:e9:d1:b6:e6:40:e0:fc:9c:87:21:2a:e4:32:
f7:aa:98:cb:64:87:18:80:55:cb:82:c4:e5:e1:6d:0c:3d:68:
66:c3:c4:13:8c:25:cd:72:b1:7c:fd:d9:48:06:08:a4:4e:d3:
19:ae:4b:90:bc:4d:c0:95:23:57:53:45:2d:b4:5b:1f:32:03:
a2:18:a4:34:c4:b3:44:1c:be:70:b7:23:35:b3:10:c3:a4:dd:
8b:4c:45:c6:f5:66:07:af:04:00:7f:d1:30:f3:89:17:1d:ee:
f1:91:28:51:1b:a0:fa:ab:c8:95:fe:7c:0b:ed:03:0b:2d:d3:
64:09:24:fb:b9:6b:af:0f:1b:74:70:74:32:2e:6e:2d:4c:53:
49:65:23:cf:2d:21:ae:11:e7:b6:da:28:30:7d:49:f5:ea:60:
35:00:1c:3a:8e:04:3c:5d:58:12:b9:5c:9f:2d:53:d0:d8:c3:
a4:26:ea:a7:a3:91:33:7a:2d:8e:a3:a0:66:c5:a0:c3:a3:9f:
2e:f5:10:58:09:2e:a8:97:f4:0c:38:ad:fa:e3:ba:18:f1:18:
03:04:de:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:03:09 2025 by rpki-client