
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
File: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft (raw, json)
Hash identifier: wq667CgEe8/y0uFGbDYoCU2HSPjcAZNA9eeQSgPigso=
Subject key identifier: 06:46:89:4B:EB:C8:E9:19:9A:16:4A:27:03:84:BB:E1:B2:6F:34:E4
Authority key identifier: FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
Certificate issuer: /CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Certificate serial: 01964A0F8CD8525EE0933812CC51E62499B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
Manifest number: 1100
Signing time: Fri 18 Apr 2025 18:00:55 +0000
Manifest this update: Fri 18 Apr 2025 18:00:55 +0000
Manifest next update: Sat 19 Apr 2025 18:00:55 +0000
Files and hashes: 1: 1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl (hash: DyL8yEP30MZCfHl9YnkYx5hocHiooJGqrFuFz8uxoP4=)
2: torroLihTDOA3iF3dz35198q-Ig.roa (hash: vvwQ1xlARrMA7/miZ5paV8AjRUiaiipi3ehp/RAKIwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:0f:8c:d8:52:5e:e0:93:38:12:cc:51:e6:24:99:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa692fda019687d58d71bf32c0908d12e46b4ca5
Validity
Not Before: Apr 18 18:00:55 2025 GMT
Not After : Apr 19 18:00:55 2025 GMT
Subject: CN=0646894bebc8e9199a164a270384bbe1b26f34e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b6:53:23:21:73:ee:83:20:54:71:4d:89:ed:
10:40:4b:d5:66:77:d5:a7:3d:fe:68:71:4a:de:93:
f3:6a:f8:c7:2b:30:95:45:75:bb:9c:20:52:d3:17:
ba:2b:50:42:31:a5:eb:cc:5f:1e:6c:6f:a1:72:7e:
89:92:6c:12:d9:a6:be:07:cd:85:21:a9:a8:bc:ab:
42:61:11:8d:bf:b9:ec:9d:9f:81:9c:6c:e9:7a:05:
74:80:4a:57:f0:ae:b0:72:a7:a0:a3:c8:b9:a1:8a:
11:37:fd:b8:f7:18:81:ad:1a:b7:e3:d6:f4:1b:23:
a6:31:ae:7a:7b:f8:d4:8d:75:00:4b:5f:bd:84:ee:
e0:55:c5:0a:bc:01:a0:81:c7:07:da:6e:16:a3:01:
fe:d4:40:c8:b5:50:2e:26:25:56:bc:14:8a:f8:a7:
73:76:a8:39:65:e1:fe:ed:df:1a:93:f4:d3:eb:39:
7f:39:e2:78:72:12:4f:ae:e2:9a:ae:55:ae:6b:e8:
ed:62:2a:c3:cc:40:6b:38:44:12:12:42:ed:0f:e4:
2c:b6:2f:69:e9:c0:15:46:24:36:5c:6a:05:bd:fa:
e4:06:f8:17:d6:d9:3a:0b:cc:25:dc:56:85:7f:24:
1f:8a:f8:f0:6b:37:dd:a5:a5:64:17:18:7f:17:fc:
5f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:46:89:4B:EB:C8:E9:19:9A:16:4A:27:03:84:BB:E1:B2:6F:34:E4
X509v3 Authority Key Identifier:
keyid:FA:69:2F:DA:01:96:87:D5:8D:71:BF:32:C0:90:8D:12:E4:6B:4C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8bfec4-bd6f-4650-a4d8-ad1c30c11e5a/1/1-mkv2gGWh9WNcb8ywJCNEuRrTKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a3:12:18:2a:b7:7f:b8:4f:08:3b:5c:b0:e2:ca:7d:0b:56:
30:08:67:5f:f5:16:90:03:b3:3a:76:e1:84:80:dd:44:ba:d2:
b6:56:16:5f:a9:ce:fd:97:33:4c:5f:52:fc:fd:93:e3:6e:29:
dc:1f:0a:6b:ee:40:e1:a2:85:d2:8f:31:4d:30:c2:5f:5f:da:
90:66:26:31:25:7c:0e:40:73:3b:e2:3b:db:d9:bc:9d:35:6a:
87:24:3d:5c:44:ef:eb:ac:dd:aa:44:b4:43:18:89:fb:a6:a4:
64:1e:ad:13:23:fd:34:57:20:b0:49:8c:8a:15:e7:46:4d:34:
62:5b:d0:b7:85:cf:b3:1c:b1:e2:dc:24:62:8f:e3:71:c0:69:
62:75:51:ba:2e:95:e7:bc:25:5f:b5:76:2d:f9:be:6c:2c:fe:
ee:a0:23:dd:ee:1f:44:79:cc:29:f6:7e:55:6b:36:c1:d7:89:
c9:bb:a2:17:78:51:41:45:63:8a:1e:79:eb:87:43:c9:8b:a2:
3d:41:37:dd:85:63:ad:a5:81:0b:d4:72:17:0f:d6:07:ac:d7:
3d:fa:bb:0c:c8:66:5b:a0:5e:1f:fd:5a:c7:43:5b:cf:20:c3:
15:a6:67:83:4e:ca:e8:48:c2:48:6e:5c:4f:ba:9c:84:57:3d:
3d:f7:39:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:34:04 2025 by rpki-client