Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: CvNuwkK9NNL9DMvAXrVlzWWTAAGkQHhx2Sg+d5u/FD8=
Subject key identifier: DA:49:B1:E0:CA:AD:4B:BE:67:4D:DB:EF:1B:53:7F:D9:4B:F8:0C:D1
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 0195797E8DDB9861BBC4B7CE616C2FD6F13A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 0EC3
Signing time: Sun 09 Mar 2025 06:01:31 +0000
Manifest this update: Sun 09 Mar 2025 06:01:31 +0000
Manifest next update: Mon 10 Mar 2025 06:01:31 +0000
Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: BuM8b0V8/Z4zzM1cYy+SbDbzO9T1yEFJZSPInPK53MQ=)
2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:7e:8d:db:98:61:bb:c4:b7:ce:61:6c:2f:d6:f1:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Mar 9 06:01:31 2025 GMT
Not After : Mar 10 06:01:31 2025 GMT
Subject: CN=da49b1e0caad4bbe674ddbef1b537fd94bf80cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:8d:38:17:fa:b0:0a:1c:f8:83:57:86:f6:
c0:5e:14:d7:fd:fc:f6:24:31:11:fa:15:51:84:cf:
32:71:f2:0c:53:45:25:ff:10:f9:b4:ad:94:be:e4:
77:d2:34:03:23:d4:51:97:d6:78:48:08:30:e6:f4:
1b:df:62:56:b4:1e:11:a2:b0:1f:f3:26:19:42:8f:
6b:3d:15:b7:98:a9:8e:28:17:bb:38:d7:ca:74:ea:
50:d0:75:82:e6:26:81:73:e6:de:26:63:ea:49:4c:
15:15:44:ab:ec:a7:41:db:85:3d:d6:61:6e:aa:ef:
f0:b7:f1:50:b1:52:6c:1c:b8:ac:75:72:9b:58:39:
c5:20:63:fd:b3:9a:3d:59:31:e9:f5:d8:69:39:3f:
55:3d:7a:95:b6:20:53:08:a6:35:dd:81:f8:67:10:
4b:d0:1a:60:06:ab:e9:47:d5:62:a4:43:3d:45:2b:
7f:eb:59:e9:b0:be:30:09:05:e1:db:6f:98:76:61:
21:f0:d1:06:ef:f4:72:d8:4a:d5:02:d8:f0:41:01:
3a:4e:8c:c6:71:6a:22:a5:a8:0f:ec:1b:cb:09:69:
55:61:2e:69:d5:4d:d4:08:e4:b9:c9:cd:fe:c4:16:
80:0f:b1:16:d1:bd:2a:73:32:ce:fa:a8:73:2b:5a:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:49:B1:E0:CA:AD:4B:BE:67:4D:DB:EF:1B:53:7F:D9:4B:F8:0C:D1
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2b:62:61:d0:da:20:d5:54:92:33:08:f8:f2:8e:f9:39:f1:
9c:93:05:bf:28:e3:34:43:d3:7e:9b:bb:80:b7:ea:2a:52:6c:
11:90:b3:a3:eb:28:90:38:99:9a:22:df:3b:5d:32:fb:84:f8:
b4:83:37:85:2a:a1:84:06:a0:ca:71:59:e7:97:f0:a9:9e:bf:
d0:d8:92:f8:74:b8:ee:82:b9:aa:dc:3c:71:a3:43:5f:4b:c4:
06:90:cc:7a:67:b5:75:f5:0e:7e:6a:c1:c5:76:54:3d:96:b2:
59:73:a2:7b:9e:18:b4:00:d7:f9:3b:75:a9:3e:a3:94:c2:1c:
fc:f2:48:ca:30:c6:fe:2e:44:da:80:07:99:4e:c8:b5:9a:2a:
f5:1e:ae:04:1e:52:b4:e1:e3:ca:db:ac:e9:32:13:1a:b2:58:
9d:13:42:63:62:b0:af:38:63:0c:b6:91:26:d4:74:c2:e7:27:
2d:30:78:3f:83:65:a4:44:d6:8a:d8:9b:86:00:b9:46:1a:60:
24:46:27:a4:af:1e:34:af:18:f9:d2:32:17:2d:35:3a:f3:4d:
ee:1c:b3:90:eb:e8:2c:63:81:d8:dd:1e:fc:44:cf:ca:b7:60:
fc:77:7f:cf:4e:dd:bd:cc:d3:eb:c9:c6:cf:15:66:4e:8f:fc:
df:ea:b6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:39:52 2025 by rpki-client