Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
File: K8J94IFvfguHpzPdMZkInlN_Jhw.mft (raw, json)
Hash identifier: m4pg58EDq/ss8w9iXG1TXNTaeYPM/Tk6IsG+NaQ4mcg=
Subject key identifier: 16:5B:FE:7A:7E:28:28:36:24:1D:B9:C8:24:F0:99:67:B1:5C:D7:47
Authority key identifier: 2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
Certificate issuer: /CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Certificate serial: 01965613E7C4BD7F6F40BCD05698D3B50593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
Manifest number: 0AEF
Signing time: Mon 21 Apr 2025 02:01:07 +0000
Manifest this update: Mon 21 Apr 2025 02:01:07 +0000
Manifest next update: Tue 22 Apr 2025 02:01:07 +0000
Files and hashes: 1: 37DCbHhm2sTXZoKnRAO3SOggtQQ.roa (hash: +uLJpv1JAEXe6w9bK9Js8rFmAHbw+aILnxdKvgw5Rzc=)
2: K8J94IFvfguHpzPdMZkInlN_Jhw.crl (hash: Gx6OvmunqNqWcRUaKBKKDh0l+nUxgU0TzkdeMcJFJk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:e7:c4:bd:7f:6f:40:bc:d0:56:98:d3:b5:05:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bc27de0816f7e0b87a733dd3199089e537f261c
Validity
Not Before: Apr 21 02:01:07 2025 GMT
Not After : Apr 22 02:01:07 2025 GMT
Subject: CN=165bfe7a7e282836241db9c824f09967b15cd747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:53:9e:ae:31:9c:11:94:2b:84:d9:25:06:
42:e7:ff:fd:95:5d:2f:c3:ea:75:2e:98:fe:10:40:
cd:67:e0:6e:d4:f0:d3:56:05:c7:a1:39:21:a2:21:
23:13:1a:04:30:b6:ea:71:03:3b:03:4b:75:b2:0f:
51:4d:69:e6:de:b5:50:e6:69:87:2d:9b:21:a2:ad:
9f:e8:ae:9a:c4:eb:f0:8e:c3:f1:2a:ff:55:6f:b8:
2e:62:8e:c5:89:2a:86:98:24:aa:68:64:ff:fc:10:
fd:0b:ef:89:db:38:2a:20:b8:08:99:65:4f:91:36:
e9:95:0b:e5:d1:b0:8a:aa:7b:28:1b:98:ca:db:74:
19:82:c2:de:9d:d8:5d:32:69:c0:47:a9:e6:5a:57:
89:fb:19:ba:36:50:f1:bb:80:85:53:04:b3:80:0f:
bd:f5:6d:ba:72:3d:92:5c:af:1c:52:af:69:b9:fb:
14:64:fb:a2:50:73:ed:1f:00:ac:12:48:d5:c2:bf:
e7:e4:4c:5f:18:35:6b:74:de:fb:c5:a2:99:8c:7b:
fe:a5:e0:2e:7a:d3:76:66:66:bb:7a:97:b6:4c:12:
f0:e6:6a:6b:3f:fe:34:f2:ee:0f:a5:f5:ee:01:55:
79:24:a9:be:ed:e5:6b:4d:3a:f2:32:33:94:9b:6d:
75:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:5B:FE:7A:7E:28:28:36:24:1D:B9:C8:24:F0:99:67:B1:5C:D7:47
X509v3 Authority Key Identifier:
keyid:2B:C2:7D:E0:81:6F:7E:0B:87:A7:33:DD:31:99:08:9E:53:7F:26:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8J94IFvfguHpzPdMZkInlN_Jhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/6d854c-c513-4290-95d4-93f9aefeeb12/1/K8J94IFvfguHpzPdMZkInlN_Jhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a5:78:28:b2:b8:ec:56:b5:5f:ed:c0:9d:cd:f5:1a:1b:43:
1a:af:49:02:74:37:71:6b:0a:c5:b1:55:67:be:e8:b8:cc:34:
61:11:86:fc:1b:4f:72:cf:5a:5d:89:c7:ed:bc:8b:a7:ac:20:
23:31:08:15:9a:60:ac:da:b0:a3:b4:1d:d5:e9:d3:a0:5b:5c:
83:c3:ea:c9:7d:38:5a:2c:58:ea:7b:b9:b6:e1:3c:41:7f:8a:
f1:00:09:26:0e:28:73:6f:86:32:a6:7d:8f:b7:3b:b6:0b:7a:
bc:4a:2b:1b:e2:ae:41:ce:6c:40:2c:48:d6:1a:75:78:9c:89:
4f:bb:d5:6c:39:91:26:83:c9:3e:5c:7c:85:41:05:b7:5e:4a:
dc:11:88:48:d3:3a:aa:02:c2:4f:6f:39:88:2f:34:f0:1c:1f:
fb:6b:ea:04:13:a6:5e:00:11:ab:c9:8e:15:22:b8:1c:8b:5d:
58:ca:d0:ce:96:fe:9b:5b:4c:da:6a:4d:ba:e8:c8:62:54:fb:
2e:a2:fb:2f:36:fb:74:a2:d5:fb:5e:35:40:7c:19:74:f8:d1:
53:ec:e8:37:9c:eb:37:13:d2:b6:cf:de:15:e8:81:a6:79:6c:
bf:47:46:50:9b:eb:ff:68:9b:56:13:bf:3e:50:ec:c8:87:c9:
91:b5:1d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:27 2025 by rpki-client