Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
File: k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft (raw, json)
Hash identifier: goKFNhuPaUBJVtt329lktdBLfYix9CsJsuUhRaeDeJs=
Subject key identifier: 11:CF:4A:77:29:E8:2A:CB:F9:9E:AB:6D:8D:85:CA:E9:28:47:A2:88
Authority key identifier: 93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
Certificate issuer: /CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Certificate serial: 019659F0104535D4F6F8CF9D2E1AD6886E4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 20:00:26 +0000
Manifest this update: Mon 21 Apr 2025 20:00:26 +0000
Manifest next update: Tue 22 Apr 2025 20:00:26 +0000
Files and hashes: 1: k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl (hash: QF+MRmQm/NZ35BnfeJQFKuWWaFetLHnDjWTk8yJwzoc=)
2: yTJkU5c9_WyRyTlvE419PqU0IjM.roa (hash: ut55SdaCNgLg+kxFsJJtdQQgrsFKbAJo6+C/kBalZ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:f0:10:45:35:d4:f6:f8:cf:9d:2e:1a:d6:88:6e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e079d7349891d2b4024895fa67e41c18f56fd4
Validity
Not Before: Apr 21 20:00:26 2025 GMT
Not After : Apr 22 20:00:26 2025 GMT
Subject: CN=11cf4a7729e82acbf99eab6d8d85cae92847a288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e1:10:59:3f:04:db:66:34:0b:34:c3:27:23:
ca:db:e8:ff:c6:c9:69:81:06:e1:1a:27:09:c9:f9:
f9:d9:7f:92:82:42:1d:9c:85:3c:b8:f9:c5:ac:b9:
12:a5:a8:5c:ce:27:bd:93:41:ab:0f:92:18:58:c0:
6b:5e:23:dd:80:ff:d6:2d:42:1a:c6:23:f7:a2:b0:
9c:f1:c3:5b:87:63:ad:ee:4d:c3:03:44:86:c1:d4:
b8:3a:e2:16:06:8f:4b:e4:e5:36:0f:6e:0f:0e:48:
13:6f:af:e9:d7:e2:05:3a:85:7a:c9:9b:e0:c6:ed:
57:1d:68:de:5e:24:49:ce:91:da:a0:95:a7:70:c5:
d1:78:46:d0:60:df:61:36:59:a4:5a:03:71:39:3d:
78:07:7c:01:30:eb:be:7d:a6:6d:f6:7d:2a:72:8d:
66:fa:f6:50:60:a4:2d:73:95:77:e6:b1:d0:68:34:
17:80:6d:58:03:6d:73:a2:3a:e9:cd:9c:1b:7c:35:
dc:74:bb:8a:ed:0e:3f:4b:09:ed:23:24:43:ae:b9:
9f:ae:44:36:cf:88:2f:57:ea:63:8c:49:be:73:fb:
3d:82:15:91:05:3e:9e:05:02:2e:ef:cf:32:10:e9:
93:57:87:03:61:80:65:38:54:50:35:23:7c:80:5e:
4f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:4A:77:29:E8:2A:CB:F9:9E:AB:6D:8D:85:CA:E9:28:47:A2:88
X509v3 Authority Key Identifier:
keyid:93:E0:79:D7:34:98:91:D2:B4:02:48:95:FA:67:E4:1C:18:F5:6F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-B51zSYkdK0AkiV-mfkHBj1b9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e36b6-d5af-410a-9fb9-8a92df77a07f/1/k-B51zSYkdK0AkiV-mfkHBj1b9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:cb:f4:de:86:d9:54:c1:f2:ae:6a:cf:ee:23:2a:86:e1:f8:
22:97:41:74:e5:a9:14:43:57:e4:b8:82:cf:a3:50:13:c2:30:
70:2d:92:1d:34:a3:d8:e8:71:d0:e7:71:ee:d3:ff:88:eb:91:
de:68:30:b9:d7:05:ac:2b:01:5f:4c:f5:e9:1f:ee:b2:bc:b3:
ea:88:0b:d8:95:7b:4e:db:00:ac:76:82:2f:89:bb:30:01:24:
16:a8:8d:ef:c3:1b:dc:0c:e7:b2:a7:55:c7:40:12:76:d7:d3:
70:7d:83:82:c1:30:1c:23:cc:4b:77:ea:17:e9:42:bc:97:3f:
ad:9b:fa:80:83:74:70:00:ab:d0:74:51:0a:29:70:77:06:be:
5e:cf:80:19:fe:30:f5:bb:49:04:52:32:9b:12:6b:b1:de:3f:
b3:7f:bb:65:ac:59:8f:d0:66:bc:c2:08:af:ae:44:71:5c:f2:
af:53:03:fe:68:56:9a:60:b3:b2:b9:46:93:70:aa:36:e4:66:
56:23:fa:a0:66:9e:5b:c6:00:64:0d:a5:20:bf:3b:3a:29:e8:
42:28:40:d5:85:50:a6:a4:16:4a:ae:20:4e:ef:95:65:74:3c:
77:3b:5e:31:03:cb:ff:ed:47:c6:63:65:97:49:87:8f:fc:29:
40:f0:cb:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:01:35 2025 by rpki-client