Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: hjlIBClPM2Q/aKce5DkRUmcUd+EZSKdwZz/hIuJ0/9I=
Subject key identifier: CB:5D:A4:4A:E9:81:AD:65:D4:07:B4:0E:BC:7D:14:62:35:81:F5:4A
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 0196556E4C6E5B522C7F6B8342BDAAA7C202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 02AD
Signing time: Sun 20 Apr 2025 23:00:13 +0000
Manifest this update: Sun 20 Apr 2025 23:00:13 +0000
Manifest next update: Mon 21 Apr 2025 23:00:13 +0000
Files and hashes: 1: Oo15GTcnGxdams7W8SOqY2Tu3KQ.roa (hash: SPZrYYn8eR1ANpkKzJitLECRyTeQovVBfhYuL5RMBfU=)
2: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: uNzPEP1TIFbR19TWR7OYxD83RZ6QP1wqs4niLC6YNno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:6e:4c:6e:5b:52:2c:7f:6b:83:42:bd:aa:a7:c2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Apr 20 23:00:13 2025 GMT
Not After : Apr 21 23:00:13 2025 GMT
Subject: CN=cb5da44ae981ad65d407b40ebc7d14623581f54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:18:6f:3e:4c:97:29:a2:4b:88:64:c3:1d:
a7:2f:99:36:83:35:69:99:c5:c0:b4:b6:94:7b:da:
a3:0b:bd:40:fb:1f:97:d1:17:3b:1d:40:56:36:53:
6e:86:3e:2f:1f:59:16:b1:89:32:3f:39:8d:16:ef:
ec:78:ee:96:f8:11:66:98:23:3d:70:32:ae:16:2c:
9e:0d:f0:88:24:6e:92:a0:4d:ec:fc:23:eb:76:90:
a0:80:04:f7:85:5e:76:5c:4a:a8:20:52:93:6d:ac:
ba:ff:4f:21:1a:03:36:aa:2d:01:e2:b0:61:79:fb:
b3:61:41:cc:2f:c6:0c:06:c2:e6:fd:70:1e:91:a4:
d5:51:c2:4b:94:3a:b9:86:59:65:d6:91:b1:ed:99:
3e:a6:65:3f:d2:18:22:d2:ec:64:65:c1:00:d0:53:
56:88:36:64:a8:cf:8f:c9:11:f4:92:15:33:24:f5:
dc:01:47:a7:48:39:d5:8a:4d:43:be:9a:26:e2:47:
b4:d2:f9:ee:96:56:67:81:3b:a9:22:21:91:0b:e7:
c2:68:94:e6:31:31:5e:d2:28:c0:4c:6b:1f:d9:b5:
40:a5:c7:54:1f:1b:85:f2:32:a1:9a:3a:d4:03:ba:
3d:dd:05:6f:3c:ec:57:97:84:70:37:49:5b:57:2c:
ba:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:5D:A4:4A:E9:81:AD:65:D4:07:B4:0E:BC:7D:14:62:35:81:F5:4A
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:46:1d:bd:50:af:2d:28:f1:10:c6:bc:06:7e:81:df:89:a1:
5c:ef:9e:5f:c7:00:99:63:ba:71:cc:ae:0f:3c:f7:1e:4c:4e:
eb:99:2a:40:4b:c9:1f:75:93:f2:23:d5:d7:6e:10:27:1b:df:
63:99:f0:56:c7:e3:37:02:19:9a:b3:0f:c9:70:5a:54:51:e5:
63:77:1f:b9:ac:77:43:a6:7a:8c:72:a1:db:46:8e:7f:7c:bd:
a0:a5:10:ee:e7:11:66:f3:fe:6e:fc:5a:b4:91:fa:8f:60:e4:
50:7c:e0:8f:f4:9d:dc:b1:9b:58:fb:32:03:b6:f9:b8:4e:36:
b7:1e:9f:74:d9:d9:27:f9:35:97:9c:6a:fc:50:1e:76:c8:38:
20:56:0c:8a:96:d9:e2:e5:77:71:8b:22:87:9b:51:32:83:1c:
b8:ec:b4:bb:53:a8:d8:eb:07:fb:57:0b:8b:82:97:9d:19:0b:
38:5a:3f:fd:6c:6c:7e:0c:ca:9d:71:a2:8c:22:c2:e7:d5:b5:
a2:f9:b1:7b:48:ca:66:8f:2d:24:fa:43:a3:f6:c0:16:e6:62:
88:cd:51:01:a6:01:0b:83:a8:22:d8:8d:32:5e:d6:2c:f2:68:
aa:b4:37:f8:07:77:46:e4:d0:1f:1d:7e:ae:ff:80:1c:f1:b4:
82:ec:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:01 2025 by rpki-client