Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
File: khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft (raw, json)
Hash identifier: MwMTMNCn8WYFQu6jNkEhrYOBueiyFNwPc0PJwkPFA/0=
Subject key identifier: 16:D9:71:86:10:AA:9C:88:E1:25:DE:E7:80:7D:F8:E1:24:5A:77:1B
Authority key identifier: 92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
Certificate issuer: /CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Certificate serial: 01960E6925CC471453A6740EFF3D7EFAD29B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
Manifest number: 0307
Signing time: Mon 07 Apr 2025 04:01:34 +0000
Manifest this update: Mon 07 Apr 2025 04:01:34 +0000
Manifest next update: Tue 08 Apr 2025 04:01:34 +0000
Files and hashes: 1: WVIwWkHHRVsyE849KIs6dtAKS5w.roa (hash: q1o5hXghtzsQxdwG9DCka1tT8MljckbYQzr00THvBZw=)
2: khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl (hash: SKeyIEsMp+GKGdIS6BeuGmXSeRu8jK/3ByUsdP8qTyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 04:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:69:25:cc:47:14:53:a6:74:0e:ff:3d:7e:fa:d2:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9213f90aa4d8e47eabb348590157f4878bf746f8
Validity
Not Before: Apr 7 04:01:34 2025 GMT
Not After : Apr 8 04:01:34 2025 GMT
Subject: CN=16d9718610aa9c88e125dee7807df8e1245a771b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:05:07:65:f9:9a:7b:86:92:34:99:e1:77:
15:f4:6f:29:70:ca:2d:93:81:ce:b5:21:12:c6:82:
ab:a3:de:87:8d:af:c6:46:0f:f9:80:c6:fb:fd:e4:
5d:9f:0b:6e:bb:71:63:76:eb:a1:ea:87:a3:f4:35:
8f:73:0b:ec:e3:70:f3:f0:c3:f9:79:13:1e:3c:2b:
6a:c3:7b:5b:0f:4d:1e:4e:02:f0:0f:77:e5:81:29:
8f:1c:9a:a8:16:b3:b9:cc:f1:05:5a:d8:4a:21:ef:
61:a3:30:7f:7d:6f:d6:62:a8:fb:03:19:46:49:0e:
5f:e1:b2:a7:68:46:9d:96:7e:71:ed:da:d4:65:25:
97:b7:6b:b3:6e:87:1f:c9:ca:54:bf:7a:98:b5:73:
28:a7:07:37:15:9b:07:71:9b:ad:86:89:c8:51:31:
1e:2f:a9:4a:c8:f7:91:3e:fb:d1:61:39:d7:50:53:
1f:6c:00:48:64:8f:ae:bb:d2:72:10:90:ec:a3:1b:
4f:c2:4e:9b:36:5b:b3:55:2c:29:98:71:6b:58:3c:
1d:4e:95:b3:1c:75:dc:49:08:89:f1:7d:32:5f:6b:
b5:48:87:cc:cd:86:8f:ee:a7:94:1e:29:d9:77:a3:
9b:dd:8d:fd:9b:88:39:e3:00:7c:f6:83:4c:7f:c7:
13:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:71:86:10:AA:9C:88:E1:25:DE:E7:80:7D:F8:E1:24:5A:77:1B
X509v3 Authority Key Identifier:
keyid:92:13:F9:0A:A4:D8:E4:7E:AB:B3:48:59:01:57:F4:87:8B:F7:46:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khP5CqTY5H6rs0hZAVf0h4v3Rvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/bdface-193c-49c8-b45d-db3fccfb7db1/1/khP5CqTY5H6rs0hZAVf0h4v3Rvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3d:77:44:4d:69:6e:fc:cb:5e:ee:c3:51:90:50:68:5e:af:
f7:39:c1:bc:69:4a:7a:b2:7d:ad:26:15:c6:e2:bc:c3:d9:4d:
15:45:06:b4:b7:77:4e:be:1c:cb:f2:0a:63:e0:9f:46:cd:00:
31:97:f5:fd:7f:d0:4a:c3:7d:57:66:3c:8f:70:96:da:7c:90:
a1:32:f6:7b:33:a8:51:61:e1:26:bc:3c:aa:79:54:66:53:00:
54:8b:aa:b6:fa:26:76:e1:1d:db:a8:90:68:0e:2f:0c:2e:70:
4c:b7:77:66:02:2f:d8:81:39:61:7d:78:37:e2:12:3e:58:ca:
79:96:d3:0f:7e:a6:3d:ea:b4:6b:cc:9b:8b:6b:5c:7b:95:41:
4d:e4:83:b0:e2:1d:cb:ff:ed:f1:0d:95:9f:65:27:fe:ce:3e:
9f:b6:61:c1:e6:d0:81:59:26:d2:4d:77:12:68:08:8a:db:0d:
1a:02:4b:4d:f8:c9:7a:c2:32:f0:d0:6c:32:a3:24:18:9c:ee:
b8:ba:a8:fc:8d:1b:df:e2:3e:d7:09:6d:ab:1c:a9:1a:52:bd:
35:7b:66:97:55:b4:ee:54:98:1c:4b:f2:4c:3f:df:02:32:55:
af:1a:9c:07:40:b4:c4:48:29:8d:b0:e1:01:d9:cc:bb:e9:c0:
9d:68:78:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:03:01 2025 by rpki-client