Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
File: sK_tekcdesOF47k2Wk6WASoBwJU.mft (raw, json)
Hash identifier: a93uoFlK9n3dHmyLxI2g+X79XBLEzsjgdiF8/6RDQDk=
Subject key identifier: 6C:AC:A6:C5:EB:0C:69:B3:51:25:65:BD:9A:9E:DA:7E:7D:EF:84:A1
Authority key identifier: B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
Certificate issuer: /CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Certificate serial: 01965047FFD5982D4BA6AC2119859FF48933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
Manifest number: 0C5C
Signing time: Sat 19 Apr 2025 23:00:17 +0000
Manifest this update: Sat 19 Apr 2025 23:00:17 +0000
Manifest next update: Sun 20 Apr 2025 23:00:17 +0000
Files and hashes: 1: C3xtGxxSgp_Plz4Lpk-Ue-Bhuno.roa (hash: so9nDoVUdg/Us7gUe7/dKOyUe77DOJSLVO4IrdFOjZ8=)
2: sK_tekcdesOF47k2Wk6WASoBwJU.crl (hash: Hhj1QkvZbDlvdhipVMQ2LkiNZ/CP+PWu6awYvjjE0SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:47:ff:d5:98:2d:4b:a6:ac:21:19:85:9f:f4:89:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0afed7a471d7ac385e3b9365a4e96012a01c095
Validity
Not Before: Apr 19 23:00:17 2025 GMT
Not After : Apr 20 23:00:17 2025 GMT
Subject: CN=6caca6c5eb0c69b3512565bd9a9eda7e7def84a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:69:b4:c1:ac:f9:08:b4:1e:d2:73:93:53:
4d:0c:2d:12:ba:6a:68:06:37:8e:60:0d:8b:36:4a:
dd:24:e0:e1:fa:19:47:bf:9a:9d:15:22:99:8e:3e:
2b:fa:26:78:aa:c4:d5:06:28:26:64:98:1c:dc:fd:
af:03:c2:d7:f0:bb:31:ac:fc:4c:1f:d7:c0:fc:25:
e8:89:62:bb:dd:39:2d:d8:2e:e9:ea:3f:f8:a6:28:
f7:34:16:fb:99:f2:7d:7d:72:dc:70:af:65:67:0f:
e1:c1:5e:81:e6:ec:9a:11:9f:b8:72:a2:48:b1:0b:
35:4f:a9:d1:c2:d5:dc:f5:10:c3:a4:34:13:03:70:
72:53:44:58:d1:36:06:ff:06:aa:e6:1c:9a:4b:6a:
d5:7d:29:43:03:12:11:32:af:d2:2c:ab:d3:26:f9:
28:0e:5c:99:49:94:4f:89:b3:13:be:7a:a2:37:de:
8a:a7:bf:ef:98:3c:68:22:02:21:ea:a7:d4:c1:eb:
4d:30:ac:d1:0d:ff:d0:33:d3:e6:2b:6c:dd:c3:80:
2f:dc:6b:a9:7f:03:9a:72:8a:fa:31:c4:a9:ef:be:
34:39:ee:90:90:df:8d:0e:2a:3f:b2:9e:e1:1e:58:
d0:6b:d5:77:0a:0e:0a:c8:50:72:9a:2d:89:ee:82:
7d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AC:A6:C5:EB:0C:69:B3:51:25:65:BD:9A:9E:DA:7E:7D:EF:84:A1
X509v3 Authority Key Identifier:
keyid:B0:AF:ED:7A:47:1D:7A:C3:85:E3:B9:36:5A:4E:96:01:2A:01:C0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sK_tekcdesOF47k2Wk6WASoBwJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6f6613-e798-47f4-b313-304a54e8c264/1/sK_tekcdesOF47k2Wk6WASoBwJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:15:c1:28:97:bf:94:20:4d:f7:eb:ed:d3:7f:94:74:a2:00:
43:6f:0a:0f:ee:8e:96:a6:f8:4a:28:4f:ec:c1:5c:08:a3:93:
b3:26:f2:26:f0:8d:38:0f:b6:eb:c1:dc:58:03:db:55:7a:44:
b9:0b:0f:5f:57:12:93:7d:66:d7:94:01:cb:d1:dd:70:f9:4a:
f1:d9:81:84:76:32:b8:5a:b7:72:09:29:41:9d:25:5b:39:55:
ab:ea:47:be:3d:ed:4f:c3:6b:f1:fb:5e:5a:05:b3:5a:58:3f:
74:ac:32:6c:19:f9:f4:d9:a1:8f:95:ce:a1:62:71:da:5d:44:
bd:82:d1:12:16:c0:2f:98:f1:2a:84:d1:bd:85:14:0b:de:38:
e0:7b:0d:10:30:8c:0f:93:0a:e2:5a:97:fa:44:a7:81:1a:86:
88:70:e2:e7:d0:7b:d0:07:1b:04:1c:9d:e1:58:71:14:20:fe:
a6:07:09:7c:33:98:4d:b0:1d:6a:89:40:20:b2:71:d2:42:e4:
fc:05:a2:e4:9c:78:79:f9:07:20:5f:b3:94:c3:b1:5a:80:75:
40:c5:f9:3b:5a:25:a1:07:26:68:48:39:e5:60:ea:ef:ee:ee:
1c:5a:36:c0:43:16:33:35:01:f0:8b:2d:0a:c4:17:91:92:6a:
80:61:70:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:25:12 2025 by rpki-client