Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: pNpe9BMWg1nw0oxIWMzdbz6SXewxZADgPak0s240Ifc=
Subject key identifier: C8:5C:ED:39:B0:D3:3D:9E:35:FE:F2:DF:BD:03:8C:5E:6E:11:0D:FE
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 01963F1DE5C17A2D3A7326791A2FEF399794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 14F5
Signing time: Wed 16 Apr 2025 15:00:46 +0000
Manifest this update: Wed 16 Apr 2025 15:00:46 +0000
Manifest next update: Thu 17 Apr 2025 15:00:46 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: HmW2Bg7f/hAjNh/mHpod5vX9vw/aqNG+3upY0SQsyqo=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:1d:e5:c1:7a:2d:3a:73:26:79:1a:2f:ef:39:97:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Apr 16 15:00:46 2025 GMT
Not After : Apr 17 15:00:46 2025 GMT
Subject: CN=c85ced39b0d33d9e35fef2dfbd038c5e6e110dfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e0:0b:65:7c:05:f0:b5:98:7c:4a:0e:9f:67:
5e:25:21:81:b1:29:77:fc:bc:31:2a:14:7e:a8:4c:
63:33:56:7a:7c:31:b3:cd:cb:28:ad:9d:b4:16:37:
de:fc:45:dc:a0:d5:88:7e:a7:f4:84:a1:06:ff:9f:
92:05:f7:3e:e6:51:ce:25:de:59:88:14:52:c7:bf:
d8:db:22:34:d0:cc:9a:42:ef:74:d2:82:62:c6:c1:
42:52:9c:03:12:d0:a2:e9:a6:00:f4:a4:a0:cf:7e:
22:64:65:39:6c:b2:a9:67:99:a0:41:40:67:f9:d0:
c5:46:e5:2e:07:05:cd:44:66:06:67:d1:56:19:3f:
be:30:f2:1b:10:a0:ce:9d:d2:ca:b4:e5:71:12:05:
7c:62:f1:b2:16:a3:59:1f:90:ce:88:70:0a:35:7a:
de:bd:4c:3d:8a:73:7c:0c:b5:c8:df:b1:b0:03:68:
b1:96:69:ce:18:41:bb:e7:b7:22:2f:d0:be:c1:58:
18:0b:d6:c8:9c:47:f9:ff:08:51:ed:c1:96:8e:50:
bd:f0:43:73:e9:73:52:cb:c5:e9:8a:9c:f5:8f:36:
32:8c:41:95:c4:ef:66:dc:af:78:72:a9:d6:4f:85:
88:09:47:51:bb:46:18:2a:4d:94:1b:55:4e:81:36:
11:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5C:ED:39:B0:D3:3D:9E:35:FE:F2:DF:BD:03:8C:5E:6E:11:0D:FE
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:29:5f:47:02:e7:6b:f6:e0:ef:ba:6c:86:59:34:02:1d:0e:
6d:47:fd:3b:31:98:8d:34:93:10:4f:f7:ec:ed:54:8c:55:ab:
71:c1:7b:c2:04:f9:d0:a4:15:31:2c:31:a9:5b:e5:d9:3f:bf:
ae:ef:7e:38:cb:f0:93:89:8b:ef:75:46:b6:14:f3:7c:a2:97:
34:22:a3:b1:f7:d6:f5:02:e6:05:cf:7d:1e:0b:7a:dd:27:71:
1c:13:b3:71:2e:05:7a:04:f5:67:8a:2b:a1:05:af:07:f7:d1:
4b:9e:e5:69:c5:d7:4e:64:6a:77:f8:94:0e:1f:3d:09:63:3b:
ce:19:98:a5:5c:ab:96:2d:cc:e5:a5:f8:d5:5c:03:92:07:29:
48:1e:75:1c:f3:c4:f7:58:85:ea:af:f3:14:21:4b:d9:6b:2d:
01:0e:e7:42:b7:df:e1:30:c5:fb:73:f7:a9:f9:f6:ba:19:d5:
b4:29:54:13:28:46:99:ca:fe:9d:41:cd:3d:db:eb:0a:38:0b:
b5:8b:fb:a8:10:f5:5f:b6:81:95:63:20:89:42:e4:24:30:db:
95:38:2b:47:c7:2b:65:7e:0f:dc:97:85:e8:37:a8:b8:38:13:
b0:e8:3a:1d:a6:c3:33:d2:60:ec:bb:bb:c3:66:9d:0d:14:09:
f4:a4:40:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:07:04 2025 by rpki-client