Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
File: rkopxhOOLZPVSjYyi5TLH4o4Kms.mft (raw, json)
Hash identifier: lWx9z0UWrx5wfVwCn1QTfpPXBcaQm7gkH+pp9lCryfg=
Subject key identifier: 1E:E4:85:04:BA:DF:15:96:7B:23:9F:9C:79:E7:0C:9B:71:34:03:23
Authority key identifier: AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
Certificate issuer: /CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Certificate serial: 01965538714191750DD5CE741A5BCD1A36E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
Manifest number: 09BC
Signing time: Sun 20 Apr 2025 22:01:24 +0000
Manifest this update: Sun 20 Apr 2025 22:01:24 +0000
Manifest next update: Mon 21 Apr 2025 22:01:24 +0000
Files and hashes: 1: BrYhHrEUiC6KPPt0z5zIenofLis.roa (hash: DE5/RvrYo8fEFuVG34PaeU1d6iLiNdb+LH6pRfnNAg0=)
2: rkopxhOOLZPVSjYyi5TLH4o4Kms.crl (hash: v0pUtM1dv/MNUhVvwXA8BocfrzvLmsV4E0FwmmLtDMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:71:41:91:75:0d:d5:ce:74:1a:5b:cd:1a:36:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4a29c6138e2d93d54a36328b94cb1f8a382a6b
Validity
Not Before: Apr 20 22:01:24 2025 GMT
Not After : Apr 21 22:01:24 2025 GMT
Subject: CN=1ee48504badf15967b239f9c79e70c9b71340323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:06:59:6a:c5:6c:85:c4:22:64:fa:ac:6f:
5b:2b:d1:ad:ff:43:ff:e8:30:f6:54:aa:b2:e1:d3:
d1:75:98:75:27:b9:02:36:52:7c:3b:cc:55:9c:05:
e4:a6:69:0d:0f:ca:57:b2:60:fc:78:2f:c7:a6:e7:
76:4c:51:15:a4:21:ff:d2:5b:47:1b:72:55:2e:c3:
bd:9e:2a:3f:79:7c:cf:09:7c:d9:ec:dd:f4:04:82:
fa:4b:d3:fb:80:24:f7:6d:11:b1:8a:95:9b:1a:49:
b0:90:7b:94:28:e0:3d:63:0d:ad:a7:4b:d5:bf:a1:
69:48:98:c7:b6:43:57:ec:bc:b9:93:74:3c:83:ec:
35:1f:95:ee:df:17:83:40:01:ac:3f:b5:28:fb:70:
f5:5a:a5:a2:6b:b1:cd:e2:70:7a:80:1d:f3:f5:9c:
2a:25:ae:01:33:81:81:93:6f:01:c1:4b:c3:f9:71:
72:cf:80:9e:28:6b:07:ce:f5:cf:65:88:39:d4:68:
cf:f7:37:f7:9d:76:15:22:6b:14:d6:81:bd:37:58:
c5:1f:19:1e:1f:12:58:8d:bc:6d:e0:14:df:3f:bf:
29:8a:47:95:89:b6:b2:30:d9:ea:16:3b:49:1c:aa:
ce:0b:6e:b1:8c:38:d3:3f:c5:b7:9a:47:72:a5:b2:
57:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E4:85:04:BA:DF:15:96:7B:23:9F:9C:79:E7:0C:9B:71:34:03:23
X509v3 Authority Key Identifier:
keyid:AE:4A:29:C6:13:8E:2D:93:D5:4A:36:32:8B:94:CB:1F:8A:38:2A:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkopxhOOLZPVSjYyi5TLH4o4Kms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/35be04-d5b7-44aa-ade4-13401d1f22d2/1/rkopxhOOLZPVSjYyi5TLH4o4Kms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:39:d7:40:65:3c:14:3b:e5:73:0b:65:1e:5c:45:16:0f:65:
a1:2e:41:a6:d4:3a:18:9b:1b:ee:23:a4:ae:4a:3c:c1:4a:95:
7c:c2:12:a0:c6:c3:46:77:84:ca:a1:b0:8a:3d:82:ef:94:84:
23:21:10:c1:7f:92:e2:96:b9:77:90:6a:49:0b:9a:81:4a:9b:
0a:d6:77:d9:71:01:3c:bf:ec:f9:24:fb:8c:c5:f2:b4:a8:53:
dd:c9:10:bc:08:be:eb:c2:48:da:03:61:c8:d7:bf:5a:94:d3:
04:c9:c0:4f:1c:7c:50:30:48:58:20:b8:23:49:bb:00:70:fd:
fd:e1:e5:9a:ff:a3:ac:d2:fc:cc:81:e0:23:a0:2c:96:74:e7:
1b:8f:b4:f4:6d:1f:24:79:f2:8e:82:a8:4f:c4:b1:a6:cb:7b:
12:bd:ae:b3:65:73:ae:56:8b:8b:c8:47:5f:35:8c:a8:8e:d0:
0a:e4:e9:7e:00:f2:c1:06:64:c8:ca:65:f6:c4:4a:73:6b:bc:
4c:aa:f3:b5:9f:d1:29:f2:c0:21:ba:d8:3a:a5:af:4d:d8:2c:
35:48:0b:a8:99:ed:51:47:cc:68:b5:3f:4f:d8:4f:a1:df:62:
c1:75:5f:b2:37:68:cb:d1:e8:c5:ab:d9:4f:96:da:48:f0:ba:
51:b8:8c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:18:49 2025 by rpki-client