Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: YHh0f1uV5HT8XPHyVcOelolMgkxmM9EMGij+Ub37pDw=
Subject key identifier: D5:FC:D8:7A:02:50:39:D3:C3:9F:C5:6B:2E:9B:4D:EB:01:A7:F5:C7
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 01963EB02A9255A679D2EE8B8853AC6B885D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 1234
Signing time: Wed 16 Apr 2025 13:00:54 +0000
Manifest this update: Wed 16 Apr 2025 13:00:54 +0000
Manifest next update: Thu 17 Apr 2025 13:00:54 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: 179jtuLbDu6xiNijRPqnKKWqNdHCt9vlQbDegNJWT1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:b0:2a:92:55:a6:79:d2:ee:8b:88:53:ac:6b:88:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: Apr 16 13:00:54 2025 GMT
Not After : Apr 17 13:00:54 2025 GMT
Subject: CN=d5fcd87a025039d3c39fc56b2e9b4deb01a7f5c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:48:4e:17:50:eb:e8:43:f7:4e:db:6e:df:
33:30:55:91:63:36:9d:c8:a3:5c:4a:05:16:a4:18:
df:ea:54:5e:dc:11:28:81:88:e9:6c:3c:53:3f:3d:
c3:2a:28:59:5a:d0:3c:1a:88:ef:db:a5:5e:e8:38:
92:92:61:48:57:8b:df:4e:1c:e9:16:78:9a:dc:4c:
6d:9c:1d:71:6e:12:a8:05:bd:af:6c:63:a1:70:ab:
db:69:12:50:0a:6f:b1:f2:fa:80:fb:2d:58:cd:6a:
93:99:7e:20:f1:fe:ee:0e:54:28:c6:a1:c9:e3:6e:
ec:be:12:a6:1f:8b:df:e6:96:2d:32:39:7a:79:01:
c5:08:b2:db:55:9b:b3:1f:5a:9c:d0:75:57:69:66:
dc:49:ac:ed:28:fa:93:e9:0d:b4:7a:2a:48:26:b1:
08:5a:eb:e4:2d:18:68:9f:6b:66:93:7d:3c:14:44:
32:93:c3:3b:7e:05:43:69:83:ff:07:ab:98:2d:7a:
bc:d3:75:d3:23:2e:ab:47:0e:2b:23:4f:6f:83:5f:
de:5f:f4:ec:cb:30:5a:f1:d8:31:e8:0f:40:7b:81:
68:25:e9:05:b1:6f:c1:34:9f:96:66:8e:e5:8e:5b:
b8:3f:73:d3:79:06:de:57:0a:a9:7d:6c:52:f3:0f:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:FC:D8:7A:02:50:39:D3:C3:9F:C5:6B:2E:9B:4D:EB:01:A7:F5:C7
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:3f:89:24:7a:cc:33:06:94:83:7c:13:ff:8e:30:3a:45:05:
42:ed:c6:f7:bc:24:ee:60:94:b9:1f:9b:b5:18:df:f7:66:4a:
51:3c:27:65:39:5a:90:a4:7a:57:f5:dd:e4:7b:c8:de:a9:f7:
fa:28:2d:c0:28:53:7e:37:73:3c:c8:97:cd:c1:bd:b3:e2:64:
14:fa:5b:ba:b0:8a:26:b5:ee:2a:12:1e:93:bb:77:19:83:09:
df:22:bc:f4:97:49:59:57:8f:f6:9f:ac:1b:f4:40:8f:ff:0e:
45:79:a2:09:60:a0:09:9f:04:36:a2:e9:95:7f:db:f1:77:d9:
83:db:b4:40:94:0e:03:6d:1e:41:a5:04:93:41:38:d5:9d:23:
4b:a6:1f:fb:d4:63:41:ae:a9:03:29:89:8e:42:57:d3:67:02:
24:f8:56:81:81:ac:3f:ef:0e:4a:64:02:01:8e:3b:98:fb:ac:
2a:1c:25:aa:8a:18:f2:81:e1:ac:2d:96:99:f2:b8:36:fe:1a:
26:06:2d:78:56:e4:65:5d:90:14:7d:f9:a1:22:fd:65:0d:c0:
70:9d:cd:16:f6:1f:1f:d3:db:87:a8:47:d0:5b:8b:8e:19:02:
96:8c:81:cf:c8:8f:4f:fb:5e:2d:2f:3f:fb:46:20:f3:80:f4:
a4:cd:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:11:48 2025 by rpki-client