Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
File: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft (raw, json)
Hash identifier: nvmLrUoQZqK0ae4+NmlRaHkA/WPZsbgvZhAygP2628I=
Subject key identifier: 55:3B:06:92:5A:FD:62:05:F5:A5:03:44:F9:2C:4C:0A:1A:D6:83:66
Authority key identifier: 93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
Certificate issuer: /CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Certificate serial: 0196561345242432DE5581AD270DA1D85C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
Manifest number: 06BE
Signing time: Mon 21 Apr 2025 02:00:25 +0000
Manifest this update: Mon 21 Apr 2025 02:00:25 +0000
Manifest next update: Tue 22 Apr 2025 02:00:25 +0000
Files and hashes: 1: 72kD6ayiwmeGoKhRrPZ__Tt9XCE.roa (hash: NSNmGWvd47OdXbtIhhCClOKph/GtDH8ixZuXdVjE5+w=)
2: k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl (hash: vOwiXT0tQWchyp7ecPoUUpMKnC9eLGBxaidMYh6ntCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:45:24:24:32:de:55:81:ad:27:0d:a1:d8:5c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93656fb5860c9d3cfcb35658540c7230a0ba1e8d
Validity
Not Before: Apr 21 02:00:25 2025 GMT
Not After : Apr 22 02:00:25 2025 GMT
Subject: CN=553b06925afd6205f5a50344f92c4c0a1ad68366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7e:4c:a5:af:ef:40:31:88:81:1d:ce:4e:66:
54:b0:cc:4a:a2:fb:dc:07:89:42:dc:7c:e9:ba:6f:
e9:1f:8b:75:f7:14:93:19:c3:da:4d:b0:ca:72:0b:
0b:ad:21:fc:ce:fd:3f:ef:53:e2:c6:5d:66:a9:44:
7b:c3:d9:03:15:28:27:25:a7:fa:79:92:b5:e1:04:
1c:ed:a0:15:c1:39:83:32:87:1c:c0:5a:4b:1c:c8:
ed:02:4e:65:28:c8:2b:0f:e5:0b:40:b7:7b:9e:0f:
5b:23:5e:1b:15:3d:e4:7c:fa:1e:a0:c0:40:86:9f:
88:cb:9c:c4:94:fa:4a:80:4b:a7:64:05:a0:c3:0c:
c3:94:f8:84:90:e6:38:bd:2d:12:59:41:28:2f:a9:
47:c2:32:43:cb:c3:77:4a:e7:86:5a:68:67:4e:27:
01:96:85:18:d0:4c:08:1b:74:9e:9d:36:20:d0:dc:
42:66:be:80:42:02:58:a6:2e:33:a0:3c:5b:91:cc:
a4:ab:16:95:94:41:9d:f4:d5:e1:f8:1b:a3:f9:65:
7c:ae:18:90:12:9c:ac:c1:30:bf:ee:a6:0e:01:4c:
55:a3:84:4c:b3:49:aa:ad:e4:72:c1:f4:94:ae:d0:
dc:e9:0f:d4:21:b1:9b:42:2c:18:b5:23:eb:88:32:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3B:06:92:5A:FD:62:05:F5:A5:03:44:F9:2C:4C:0A:1A:D6:83:66
X509v3 Authority Key Identifier:
keyid:93:65:6F:B5:86:0C:9D:3C:FC:B3:56:58:54:0C:72:30:A0:BA:1E:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/97914b-eb62-46d1-a9d4-05bf81b4298b/1/k2VvtYYMnTz8s1ZYVAxyMKC6Ho0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c1:77:b9:11:80:7d:4a:b7:88:62:04:e1:55:a4:02:05:7d:
9d:ca:17:c4:d6:14:e4:42:52:7c:21:0f:29:3d:53:23:87:cb:
28:4e:c9:88:a1:4e:a2:c8:b6:32:10:00:b4:83:32:5a:dc:49:
a3:97:b1:0f:16:40:a0:47:a1:4d:ef:d6:dc:79:80:fe:07:06:
44:e3:a4:41:a7:53:a1:fe:b1:14:a8:43:38:5e:13:23:ff:36:
8a:de:b7:80:12:56:d0:95:d6:2e:f7:a7:3c:ea:36:07:9e:f5:
93:d1:34:13:72:9f:60:0d:e6:48:da:8e:03:12:d2:95:14:c6:
29:9b:90:0e:8f:4e:50:0e:a5:f7:75:ab:3f:8c:be:75:4c:64:
d3:9d:13:f8:45:35:8c:d7:87:d0:68:03:35:7e:55:bc:59:c6:
e6:c6:9e:e9:f0:39:bf:c6:76:58:02:01:95:59:30:05:d3:f7:
26:4d:0c:f2:9c:b4:6e:15:9e:c0:b9:18:15:af:9c:b5:99:ff:
c7:fc:d2:0d:75:02:da:d0:73:f6:6b:a1:f5:a0:2b:1a:d5:26:
5b:90:9f:37:9f:00:c8:48:25:c7:c0:4a:25:b4:0b:fe:90:78:
74:1b:c9:60:5d:0f:1b:40:f2:86:f8:b8:86:b7:11:68:ea:fb:
98:ae:bb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:33 2025 by rpki-client