Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: 7DkT+HermN2/iKEpsczCD3lYnYX3SdpVLxVa+wOZDPI=
Subject key identifier: 1A:20:98:6E:7E:DF:44:0A:A0:00:12:B0:87:62:95:B5:61:9C:0F:98
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 019650ECDED0EADD144A19E28699E4F28809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0D56
Signing time: Sun 20 Apr 2025 02:00:22 +0000
Manifest this update: Sun 20 Apr 2025 02:00:22 +0000
Manifest next update: Mon 21 Apr 2025 02:00:22 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: u9I4q4AuSBBgUSQvGseQZP5c4QYHZ5IZPfAL5TxZOnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:ec:de:d0:ea:dd:14:4a:19:e2:86:99:e4:f2:88:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Apr 20 02:00:22 2025 GMT
Not After : Apr 21 02:00:22 2025 GMT
Subject: CN=1a20986e7edf440aa00012b0876295b5619c0f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e3:3a:f0:48:af:36:f9:b5:aa:c2:21:49:21:
34:14:98:80:cc:04:7c:18:c4:a9:6c:bb:d6:3f:2b:
26:65:1c:7e:27:c7:03:d4:cd:dc:f0:56:36:a9:f1:
4e:91:20:2d:51:a9:1a:8c:c2:f7:61:7a:d0:b7:9d:
1c:57:6a:f1:9e:bb:93:81:8d:d7:1d:d0:68:6f:78:
7a:26:55:4f:eb:e1:5f:87:ff:e6:4b:70:66:56:ff:
b9:7c:c6:54:9f:36:c7:3d:63:5a:1e:ca:4d:ba:f5:
92:05:72:b5:a4:29:cf:66:0c:5e:c6:c8:63:77:00:
2f:87:9b:9a:a6:b5:f5:79:89:f2:ac:89:25:d2:da:
02:f0:7b:06:94:bb:59:f0:5f:92:c0:78:55:e2:60:
28:2e:20:fd:4f:28:b5:17:f6:37:df:2a:a0:77:0f:
42:de:36:19:7f:9b:61:80:db:5a:36:4e:06:97:51:
87:b9:f3:33:62:c7:5b:e6:2d:f0:0e:5a:f4:0a:9f:
15:e9:e7:f2:07:c9:1b:45:4c:43:09:75:50:80:7e:
d5:ac:47:73:79:1b:02:1e:a2:21:0e:a2:8c:cd:cb:
2b:43:0c:03:cc:6f:45:62:af:db:56:25:25:92:ac:
44:82:e0:b6:ba:33:b7:3f:0a:8a:3e:79:3a:bd:d1:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:20:98:6E:7E:DF:44:0A:A0:00:12:B0:87:62:95:B5:61:9C:0F:98
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:bb:db:e8:02:ec:86:5f:9c:47:1d:81:49:aa:26:af:a7:83:
49:e1:ad:a8:a9:6b:3b:14:15:39:9c:c7:b2:ec:10:3a:e0:ea:
d5:c0:a5:83:59:86:93:cd:c3:0e:18:30:76:72:a5:b6:78:ad:
4a:d1:24:1d:1f:a1:01:a1:f2:e3:bd:ba:a0:b5:07:06:45:41:
45:80:d6:18:94:31:f0:52:7e:38:9c:bc:e9:12:f8:69:3c:49:
d6:04:29:86:15:a5:72:33:4c:cd:b6:b1:58:d3:c3:ce:56:59:
ed:11:e9:18:07:26:42:2c:a9:31:15:69:f3:cd:97:2e:c8:f4:
07:79:ef:c9:c9:20:84:23:0d:8c:5b:4c:39:9c:4e:f5:3e:cb:
d5:46:44:bb:62:71:2f:11:ea:81:4d:44:af:a1:62:f9:0c:40:
92:18:2f:cd:e4:2e:3e:5e:56:ef:37:b8:0a:bd:63:c6:c2:e9:
10:3e:cd:e2:92:63:ab:56:de:b1:71:12:2a:24:bb:81:9e:fe:
38:35:cf:79:64:6b:ce:e0:11:95:b1:6e:d0:2a:e6:f5:c7:9f:
02:e3:f3:df:a4:a9:4f:44:40:b0:5d:31:87:82:2c:c3:f1:19:
25:09:b8:e8:f7:eb:ba:06:9a:c1:f3:51:b6:a6:fb:67:8b:52:
f3:04:90:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:09:48 2025 by rpki-client