Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: OG94NMk1xnvvtjHX0Ap8UV4hYyVXESVxyE4/JWYKe40=
Subject key identifier: C8:FF:22:3A:AD:03:4A:4C:06:89:20:41:D6:49:C9:AF:4B:61:AD:25
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 019643D67088E540D8C1620D0E29952CF4B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 14F5
Signing time: Thu 17 Apr 2025 13:00:48 +0000
Manifest this update: Thu 17 Apr 2025 13:00:48 +0000
Manifest next update: Fri 18 Apr 2025 13:00:48 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: LEoZFCg4/XCpvrikpIwI/O62j8WWG3rR1iXGyinMcHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d6:70:88:e5:40:d8:c1:62:0d:0e:29:95:2c:f4:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Apr 17 13:00:48 2025 GMT
Not After : Apr 18 13:00:48 2025 GMT
Subject: CN=c8ff223aad034a4c06892041d649c9af4b61ad25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:67:ba:f8:ce:40:a6:cf:d7:c4:27:28:22:
88:4b:84:c8:f3:5d:0a:29:72:3b:02:f7:6a:c5:b4:
fb:c0:fe:bd:34:a3:93:2f:ba:4e:fd:a4:d5:35:93:
71:bc:f8:af:ad:38:ba:57:c4:9d:47:66:fa:12:cb:
35:44:dc:f3:15:df:d5:68:f5:ae:e8:5d:4d:43:2b:
1c:53:2a:f9:2b:c6:15:b7:53:ce:36:fd:a3:7b:d3:
33:20:45:5d:ab:b6:aa:b7:53:eb:ab:08:b1:4a:f9:
db:da:2f:c8:28:ef:82:80:24:f0:75:a0:e7:91:52:
b6:87:f3:ba:82:4e:e1:d6:e4:e9:ba:1e:6b:f2:cd:
2d:d1:c0:a9:13:76:90:a6:d9:2a:ac:f4:f3:71:37:
b3:71:9e:a4:57:fd:cd:c8:06:58:03:26:93:84:23:
6f:6a:f3:4a:31:dd:0d:5c:48:6d:b9:7c:04:ba:f9:
ed:7f:14:b4:b8:a4:4c:8a:85:f6:4d:a9:b3:75:68:
44:7b:03:55:ab:91:91:e8:99:a2:bf:88:ca:48:21:
75:f5:4e:10:14:a7:6c:38:88:6e:22:08:97:1b:e1:
eb:3f:41:e4:dc:39:ac:5b:6d:07:bf:a7:71:93:2b:
e8:26:61:fa:21:3b:a3:86:6a:81:02:f0:7a:bd:5d:
8d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:22:3A:AD:03:4A:4C:06:89:20:41:D6:49:C9:AF:4B:61:AD:25
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:4a:2d:b5:df:5c:05:b2:9b:f7:8e:6b:0f:55:51:14:b7:54:
07:78:74:b0:d6:e5:d7:89:6b:b4:db:ce:2f:38:89:69:39:e4:
de:d3:63:df:95:2d:eb:49:65:cc:13:7f:5c:dc:71:f1:7a:15:
0c:ed:da:7e:6e:f9:e9:ce:29:2d:34:a5:df:91:8a:ad:c1:68:
71:4a:85:a7:14:11:94:45:b4:08:5f:17:3d:02:d5:13:77:ba:
f0:72:60:47:bd:f3:11:60:a2:7d:12:0e:3e:6c:7c:60:44:9f:
e1:a1:57:37:86:ee:df:39:14:99:75:8a:10:55:92:f6:47:24:
45:86:48:15:8a:74:6e:5c:fb:fa:e0:6c:3e:38:22:e2:64:55:
2a:d5:2e:09:2b:46:f8:ee:e5:52:56:17:28:1b:70:67:6a:c0:
bc:f6:a2:9f:c4:a8:c8:5a:8f:bd:c9:4e:53:61:78:6c:d7:f1:
b5:8d:cc:6f:bd:04:54:19:fe:ec:8e:bc:71:9e:40:af:c8:8e:
70:10:5e:71:67:c3:c7:f7:06:49:46:8b:55:64:35:23:c1:13:
ce:38:ba:6a:b4:d8:93:fb:fd:55:d2:a1:a0:fb:f9:78:3b:c4:
93:97:2e:78:a7:4d:8e:6b:04:a8:e4:fd:78:b5:97:e6:01:b0:
6a:44:41:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:23:34 2025 by rpki-client