Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
File: k9x15h5IPw1HkiHzynX8ciCWp-0.mft (raw, json)
Hash identifier: iN+pAF7mKSHlkn252vJV2ruOD7UcRCqRa8M096GjBC4=
Subject key identifier: 77:5B:70:D9:99:CC:0C:AB:DF:A5:0B:54:58:76:15:05:83:95:75:78
Authority key identifier: 93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
Certificate issuer: /CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Certificate serial: 019654251D526D84FCE552AB14D19A3BC984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
Manifest number: 03DB
Signing time: Sun 20 Apr 2025 17:00:40 +0000
Manifest this update: Sun 20 Apr 2025 17:00:40 +0000
Manifest next update: Mon 21 Apr 2025 17:00:40 +0000
Files and hashes: 1: ITvafiNBv4ylSij6nbuKyZmdE8k.roa (hash: eQlQlT15GdOmzPkZPFcmwxbiVSUvzPGQ2MQSNNK3BEo=)
2: k9x15h5IPw1HkiHzynX8ciCWp-0.crl (hash: 8iEK4h1+cBnfXzOussEKyuOTdH6BKUittcvSIQg5c4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:1d:52:6d:84:fc:e5:52:ab:14:d1:9a:3b:c9:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93dc75e61e483f0d479221f3ca75fc722096a7ed
Validity
Not Before: Apr 20 17:00:40 2025 GMT
Not After : Apr 21 17:00:40 2025 GMT
Subject: CN=775b70d999cc0cabdfa50b545876150583957578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:31:ec:08:aa:43:30:21:5f:8c:73:4c:2c:89:
b8:a1:17:f1:af:ec:aa:95:9f:42:4b:e6:59:d5:68:
35:90:d8:2c:9b:95:9f:a4:51:24:56:d2:a1:3d:0d:
97:c3:00:9c:af:c6:82:79:e9:a5:39:c9:a6:73:44:
45:12:6e:61:10:40:e0:ed:cc:de:23:37:3a:cd:0d:
03:29:82:c2:e9:93:e6:76:0c:ce:09:7a:67:5e:f8:
39:c8:2b:8e:01:de:ed:3b:82:7c:70:ea:3b:73:06:
1c:52:a5:fd:ef:b7:11:55:1f:57:61:91:65:d3:30:
04:1e:7d:55:0d:3a:61:38:64:e7:82:87:c7:60:12:
69:59:e2:80:3b:b2:f5:3b:c1:66:3e:d1:64:9b:ba:
ed:55:65:be:f8:89:0f:f8:21:c8:00:0a:6d:20:e5:
e7:dc:6f:f5:a0:b4:47:d6:f8:4c:be:02:e1:e5:b1:
cb:41:c2:34:78:3d:d1:b4:bc:cd:4c:82:d4:c5:ca:
e9:10:bd:2e:49:e4:a6:4f:69:0a:d7:21:78:70:d2:
50:ad:be:1f:76:32:0d:6a:1b:50:2a:85:7d:33:fb:
18:66:ad:09:29:f8:bc:0b:3e:9f:e9:82:2e:86:45:
91:75:f0:77:7a:f6:50:cb:b9:d0:1a:c8:b5:0e:ea:
99:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5B:70:D9:99:CC:0C:AB:DF:A5:0B:54:58:76:15:05:83:95:75:78
X509v3 Authority Key Identifier:
keyid:93:DC:75:E6:1E:48:3F:0D:47:92:21:F3:CA:75:FC:72:20:96:A7:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9x15h5IPw1HkiHzynX8ciCWp-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/768241-7adf-4c25-97ce-338975829e8b/1/k9x15h5IPw1HkiHzynX8ciCWp-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:f3:12:6c:d3:f3:65:d9:31:17:06:8a:d4:87:6d:91:0b:ca:
97:ce:d5:e3:0d:d8:74:75:b4:34:34:f8:59:a3:0a:ed:84:b9:
f2:1e:0f:e1:8d:0f:97:90:1e:13:a5:57:b0:8f:48:62:4b:49:
16:eb:83:10:c0:8e:79:c0:1f:c0:5a:29:08:7a:40:ea:f9:92:
67:3d:9a:f8:15:49:38:dd:13:e0:5a:f6:32:5f:57:9c:66:41:
3a:bb:71:dd:67:e7:26:0f:25:85:23:1c:47:58:5d:95:1e:16:
ec:ed:4e:86:c4:06:ff:c0:42:5f:88:49:be:34:7c:3c:6f:7d:
e5:a5:9e:06:25:f5:d4:d9:d3:b6:10:6f:2f:2f:c5:af:c8:ad:
6d:b6:36:c4:53:64:3e:42:4b:6c:cd:75:b0:fb:48:cf:10:9c:
61:18:59:22:fc:c7:6e:ad:29:ad:a0:d0:9c:71:6d:b5:ea:fa:
49:c2:13:64:54:6c:3a:72:f0:1e:93:69:6c:4f:9a:1c:da:b6:
b3:ac:1c:e0:97:c4:80:10:8a:a1:03:ea:4d:3a:55:2e:81:a7:
5a:4a:b7:4d:f1:b5:e9:85:47:33:54:22:21:a9:de:6d:ed:5b:
60:9b:6d:41:1b:96:0d:99:66:b7:a9:2e:e4:be:eb:61:11:99:
a4:2e:6e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:10:50 2025 by rpki-client