Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: YX9OW81JWPOHxzZjLGOHnpLkgjRAEhAtbIXYL2cSdtk=
Subject key identifier: 1E:C1:9A:16:F8:A9:C8:34:94:98:A9:CF:20:11:93:0E:94:C3:19:57
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 019659EFED6641265CA8162FA0A21D7857B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 0923
Signing time: Mon 21 Apr 2025 20:00:18 +0000
Manifest this update: Mon 21 Apr 2025 20:00:18 +0000
Manifest next update: Tue 22 Apr 2025 20:00:18 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: JiLxpfnEME5booF78VXuOVuJTKPt/mRF0H8bCieHsPc=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:ef:ed:66:41:26:5c:a8:16:2f:a0:a2:1d:78:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Apr 21 20:00:18 2025 GMT
Not After : Apr 22 20:00:18 2025 GMT
Subject: CN=1ec19a16f8a9c8349498a9cf2011930e94c31957
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:02:27:26:ce:17:9d:31:f6:c3:fe:02:29:
de:ba:95:3e:d0:e7:93:bf:48:33:2f:78:f6:df:aa:
42:e8:8f:85:98:02:ed:dd:36:23:ee:29:3a:78:57:
bb:ea:7d:81:4d:87:59:dc:ac:ba:0d:6f:b4:1d:1c:
9d:b7:5b:40:16:58:da:84:5a:36:22:08:5b:fc:d9:
56:3d:4e:2a:64:6b:4d:af:2b:7d:76:ef:ed:97:9f:
a4:0a:e3:2a:96:62:3f:23:47:dc:16:12:34:40:c3:
8e:af:e8:fa:85:7b:73:9c:12:6f:4c:9d:ef:0a:a8:
c0:56:3f:fb:e3:d7:54:ba:09:ab:22:af:40:27:8e:
5a:8b:72:6d:11:97:3a:34:8a:e0:7f:08:a2:e0:8b:
f5:1f:60:98:d9:8b:3f:e9:e1:51:b5:83:c1:27:4c:
3e:27:4e:41:49:c3:da:50:33:68:67:49:0e:20:11:
a6:88:dd:7c:e3:7a:e4:5b:22:25:be:62:54:7f:19:
46:90:a4:9c:1b:16:54:2a:45:a4:d3:fa:25:97:b8:
d7:46:ee:28:0c:22:4a:bd:76:2e:a6:a0:ea:ed:1f:
1c:d1:e6:4b:e5:a7:40:a2:37:1e:15:67:94:8e:98:
3b:1c:f0:f9:e3:ca:83:0b:e5:8a:bd:af:91:e6:5a:
29:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C1:9A:16:F8:A9:C8:34:94:98:A9:CF:20:11:93:0E:94:C3:19:57
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:af:f9:14:aa:52:cf:20:98:c7:23:8f:3d:12:39:21:b1:99:
76:b7:e2:72:dc:ec:76:90:6d:07:fa:05:0c:61:f4:95:28:85:
16:a4:41:41:b8:e4:33:93:2f:57:c3:05:41:2d:da:ee:83:7a:
dd:6b:98:48:87:46:d5:51:7e:20:ce:83:9f:f2:c3:96:21:14:
db:e5:4c:0e:f5:71:2c:d5:01:3e:c6:19:c8:ff:07:4f:2b:b0:
20:ff:ae:42:ae:3a:e3:b4:6c:66:98:8e:14:b2:f8:65:46:5b:
26:12:df:22:1c:2d:52:2c:60:50:13:94:ed:a1:cb:f0:c0:2d:
a9:69:be:5d:1e:9a:8c:d9:42:82:95:b2:22:ff:5c:35:37:24:
c3:b6:6d:f4:e2:95:e9:bb:01:c7:b4:9e:15:99:68:c5:3e:25:
08:fb:f2:49:36:95:a1:a9:a2:96:98:ce:ab:eb:2c:72:88:3e:
c6:d6:04:7f:fa:1a:56:af:09:68:7e:f6:6a:0d:f1:f5:5e:f5:
e2:d8:4e:c8:00:3f:2a:b9:59:c4:f8:64:3a:73:df:28:76:fa:
65:7d:e4:d6:ce:60:c9:ea:01:de:f8:1e:83:67:06:72:ff:2b:
e2:44:e3:40:b6:91:1d:18:cd:53:ef:9b:a1:55:ec:32:ee:f8:
37:af:16:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:04:43 2025 by rpki-client