Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
File: k7yN24Ay4YTJK_4gbjKPLAXXjks.mft (raw, json)
Hash identifier: IXtp7LU0gCx0vnn4/L72dY2w/XzlVsLurZxZP3DiVTU=
Subject key identifier: 63:C9:71:13:73:1D:71:3B:D4:64:4E:6E:E1:F1:96:8F:FE:42:A5:B2
Authority key identifier: 93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
Certificate issuer: /CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Certificate serial: 019659B94955BBC287A9532C159E5D2264D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
Manifest number: 12C6
Signing time: Mon 21 Apr 2025 19:00:37 +0000
Manifest this update: Mon 21 Apr 2025 19:00:37 +0000
Manifest next update: Tue 22 Apr 2025 19:00:37 +0000
Files and hashes: 1: FwydALoErM6-8yE8TcsoXe9fkyI.roa (hash: S5UsOTTZ1j9ByeHOH+4PHSRQbib1Nk4JqrfciZPb4Cc=)
2: k7yN24Ay4YTJK_4gbjKPLAXXjks.crl (hash: TxDUbfrHrA7xxemQolvJaY2+HPXN/tYfneJnld2JgiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:b9:49:55:bb:c2:87:a9:53:2c:15:9e:5d:22:64:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93bc8ddb8032e184c92bfe206e328f2c05d78e4b
Validity
Not Before: Apr 21 19:00:37 2025 GMT
Not After : Apr 22 19:00:37 2025 GMT
Subject: CN=63c97113731d713bd4644e6ee1f1968ffe42a5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:3b:c8:1c:3b:6c:93:7d:74:30:a4:7e:63:
af:cd:54:c7:b0:29:2d:cc:06:68:d3:ab:a2:fe:cf:
6d:37:ec:de:fb:10:d3:91:6a:20:bf:f1:73:77:e4:
88:c3:dc:4e:24:29:93:54:7e:12:d3:dd:33:b4:9b:
36:ab:14:ca:af:3b:b7:e2:72:98:98:be:da:5a:2c:
70:dc:6f:b2:7e:2c:44:fe:5a:f0:cd:29:9f:fa:40:
40:a8:39:a2:b3:b6:c0:05:8a:0c:d7:50:7d:1b:6e:
ed:17:9b:c2:fa:c4:42:ed:fb:58:ea:50:10:16:d3:
3c:0e:aa:a3:9e:f8:ca:b7:96:37:d7:a9:b5:68:44:
af:92:86:ee:6c:56:36:0e:a6:75:75:38:a9:20:71:
a8:08:4f:36:3a:a5:1a:eb:04:dc:01:e4:e5:be:83:
15:ac:be:f4:e8:5c:89:1c:72:90:be:55:3b:de:b4:
15:e2:b3:51:15:41:ac:de:c1:c6:4c:aa:8a:41:91:
a8:41:f1:2b:e2:3f:f4:e6:07:2b:21:c2:d8:71:b6:
71:d5:df:35:a5:08:f4:dd:b4:33:63:6c:81:a1:e6:
a6:2b:e7:bf:44:b0:d4:ea:20:77:8f:c9:da:35:30:
ce:bb:54:a2:b3:bf:cf:1c:3d:ae:5c:e4:0d:47:a6:
be:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:71:13:73:1D:71:3B:D4:64:4E:6E:E1:F1:96:8F:FE:42:A5:B2
X509v3 Authority Key Identifier:
keyid:93:BC:8D:DB:80:32:E1:84:C9:2B:FE:20:6E:32:8F:2C:05:D7:8E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7yN24Ay4YTJK_4gbjKPLAXXjks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f813cf-0d6a-4798-98f1-b9167748a8a3/1/k7yN24Ay4YTJK_4gbjKPLAXXjks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7c:0c:3a:51:2d:56:ad:de:e6:5f:80:37:1b:ae:4e:12:1b:
1b:3f:c2:31:3e:69:79:78:0b:fc:7c:6b:3b:69:57:e4:41:3f:
63:50:c4:37:e5:de:fb:24:77:55:12:90:b2:2f:3d:fd:fe:d2:
d0:49:cb:8c:ab:16:03:f6:78:d0:f2:a9:94:41:8f:9d:a4:49:
83:1c:b6:eb:4e:d3:87:2e:94:72:83:d8:bc:9b:1e:c2:5e:39:
6c:66:2d:fd:22:6c:40:61:2c:17:12:6c:59:8c:a8:1c:ec:f3:
f2:d2:9d:56:17:22:94:8e:c8:56:b4:c8:8f:4a:fa:d3:d2:c9:
32:dc:b4:14:bc:71:35:74:bb:d4:cd:6c:54:71:7f:1c:ef:26:
b4:59:47:8e:b2:db:b0:24:d7:5a:34:98:df:47:60:a9:8e:e2:
4a:a4:24:49:85:17:b6:4a:d8:5f:af:8e:1d:e7:97:76:40:0e:
4f:ac:17:72:d7:37:67:95:2c:5f:99:4a:ba:76:53:15:89:ba:
d0:9f:26:06:93:da:75:22:d8:4a:68:a4:c2:ce:a2:99:47:31:
a7:0e:bb:23:c6:f7:e0:91:f2:f7:d2:46:07:cf:1d:2a:96:77:
55:a4:56:82:cc:ed:89:d0:3f:7a:8b:f2:c8:e0:c4:10:d3:c3:
38:ab:44:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:28:54 2025 by rpki-client