Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
File: k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft (raw, json)
Hash identifier: 6cDif5yU2Pg8vi5Jaq9ziH0zde9O4Q+edo1aHyythy0=
Subject key identifier: 86:03:82:B6:53:3D:E0:5A:C6:05:D9:EF:83:38:BB:6D:0B:9F:47:05
Authority key identifier: 93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
Certificate issuer: /CN=93ef2e433d00a253c99a45048507944385457cf0
Certificate serial: 01974DB2BEF14723640E6556ECE4BFF9C586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
Manifest number: 09BC
Signing time: Sun 08 Jun 2025 04:00:49 +0000
Manifest this update: Sun 08 Jun 2025 04:00:49 +0000
Manifest next update: Mon 09 Jun 2025 04:00:49 +0000
Files and hashes: 1: 1-s_qFSQKBRG1ihqBmhzdBKCiJNM.roa (hash: LshraZqBwrj50k+MVV5n8/UzMU3Sq3fCYs5NyUMMWNA=)
2: k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl (hash: T02dblaSLYly0HD8e+Io+NskGEpdt9soE8PPHIN62XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:be:f1:47:23:64:0e:65:56:ec:e4:bf:f9:c5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93ef2e433d00a253c99a45048507944385457cf0
Validity
Not Before: Jun 8 04:00:49 2025 GMT
Not After : Jun 9 04:00:49 2025 GMT
Subject: CN=860382b6533de05ac605d9ef8338bb6d0b9f4705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:60:04:95:ea:83:8b:2e:ae:78:87:fb:96:fd:
08:96:42:05:82:7d:24:61:ac:ff:ff:1f:3e:3d:5d:
7d:96:59:3a:87:33:67:08:0f:88:ad:b1:5d:75:c1:
01:97:e1:01:e2:05:ff:5e:f2:8d:99:9b:55:13:bd:
85:23:c2:5d:98:f7:16:c8:b5:6b:02:af:10:d1:e7:
f0:5d:ca:33:2a:94:b3:4a:86:1d:4d:e7:0b:78:c4:
91:bb:14:ff:cb:40:86:5f:88:7f:95:ab:d7:ab:99:
f4:10:bb:1c:9f:46:c3:16:56:8a:fa:37:0b:71:f3:
3d:d0:8b:44:0d:3c:a0:9a:74:10:5a:8d:57:b4:3c:
e2:8c:12:24:52:ff:f7:89:79:c5:06:f5:58:00:b0:
c6:4e:9c:3d:a7:8a:a8:b3:5f:74:a6:e9:4c:f1:33:
1a:65:3b:61:3a:63:8a:f0:93:54:e8:3b:d2:04:79:
16:27:60:93:fd:7b:66:b3:36:4e:7b:75:99:3c:1c:
b4:b0:73:83:2d:d5:f0:f6:59:75:dd:34:00:33:4e:
8f:4e:9c:a0:86:8f:ff:e4:95:9d:ee:b0:86:f1:72:
32:1d:0d:85:7e:32:17:9f:31:4a:17:e6:81:a4:94:
1d:62:40:d3:33:01:f0:44:dc:8e:f7:41:bf:9c:6a:
62:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:03:82:B6:53:3D:E0:5A:C6:05:D9:EF:83:38:BB:6D:0B:9F:47:05
X509v3 Authority Key Identifier:
keyid:93:EF:2E:43:3D:00:A2:53:C9:9A:45:04:85:07:94:43:85:45:7C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-8uQz0AolPJmkUEhQeUQ4VFfPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0cb06b-1518-4de0-a699-ffbd4c6c1112/1/k-8uQz0AolPJmkUEhQeUQ4VFfPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:51:47:a2:9a:15:fd:d1:a6:12:f6:8a:84:f8:d7:0f:97:70:
3f:e7:f0:d8:d4:62:79:05:e2:83:06:db:03:f4:ee:f1:93:60:
f6:9e:11:78:98:d3:f4:d5:e7:63:18:1a:11:49:eb:4b:41:b7:
92:cb:fb:c3:87:9b:11:14:16:cf:8f:ae:3b:a5:ef:a2:41:73:
05:e4:c2:f7:c6:e6:4f:5c:a3:3e:5f:fe:3b:49:26:a1:78:48:
32:27:7d:29:cc:ee:b2:73:ff:a0:6b:90:d9:1e:83:1a:28:10:
16:98:cb:1f:53:b7:71:9e:6c:61:3e:66:2f:fa:ba:d7:f3:0d:
61:12:24:20:d2:c1:00:b6:b5:e8:cd:8f:8e:58:f0:4c:76:41:
76:d3:14:49:4e:a7:46:e0:f2:aa:a9:bf:ec:d5:48:59:c3:91:
dd:89:7b:62:36:f4:c2:ba:8e:8d:99:03:2c:b1:65:49:bc:6b:
0d:a1:87:82:01:9e:bd:2f:a9:37:ad:a2:29:51:10:4d:da:07:
a4:cf:7b:e2:f8:95:4a:a9:e6:f0:2a:fe:11:c1:61:a6:08:d1:
f1:b5:a8:e4:ee:1a:e8:8c:9d:4a:bc:b4:13:0e:58:0f:d4:b5:
d7:54:65:36:45:84:b0:9a:20:94:0f:44:94:7a:6a:52:aa:d7:
f5:76:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:15:45 2025 by rpki-client