Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
File: k9TErXMeRe0yCi84q3C3p7_36nk.mft (raw, json)
Hash identifier: zeRRJeVSxPh1WrpVGJupAeGSxHpmpZSZqWV2ONtEXGQ=
Subject key identifier: 01:04:71:A5:87:A8:BC:28:E7:34:D7:3C:07:4F:30:92:7C:4F:D2:41
Authority key identifier: 93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
Certificate issuer: /CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Certificate serial: 019650B6279A51884EFC512B004DE7FB4373
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
Manifest number: 0DBE
Signing time: Sun 20 Apr 2025 01:00:37 +0000
Manifest this update: Sun 20 Apr 2025 01:00:37 +0000
Manifest next update: Mon 21 Apr 2025 01:00:37 +0000
Files and hashes: 1: QcUww1gBut5P9LED1fX9vTB1tFI.roa (hash: L8MG8T6h4oWceQxYV3j9aYR1Fk9m/+E+nrLcLpw/ZNc=)
2: Sb2fgxISW-k8wA_jVXd4LPL4sOw.roa (hash: LphNHUTsgnKV2YEr+uySGx/2aJwsuve38PTMVdLOS6w=)
3: k9TErXMeRe0yCi84q3C3p7_36nk.crl (hash: OzhTrWhOh52f8XMS1puSg2qt/M/VVRqHK+EyfyvVg8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:b6:27:9a:51:88:4e:fc:51:2b:00:4d:e7:fb:43:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93d4c4ad731e45ed320a2f38ab70b7a7bff7ea79
Validity
Not Before: Apr 20 01:00:37 2025 GMT
Not After : Apr 21 01:00:37 2025 GMT
Subject: CN=010471a587a8bc28e734d73c074f30927c4fd241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:30:e0:9c:30:d7:36:f8:4e:1f:a5:b3:fb:c8:
5e:7c:51:b8:2d:17:8c:4a:cf:cb:51:85:d4:a3:1f:
84:36:d5:ce:8d:e9:e6:93:d6:97:c6:41:bc:72:3e:
f4:d3:65:52:97:ec:63:ca:41:99:4a:54:ca:86:62:
65:d5:2e:c5:10:10:af:af:98:69:af:e7:5e:be:49:
0d:86:1a:3e:4c:96:7c:b7:e0:51:cb:7f:03:30:63:
b6:d7:8a:2b:47:2e:7e:f5:be:5c:34:96:bb:be:c7:
ff:55:59:e2:2a:43:9c:bb:36:27:25:d5:b0:bd:ae:
99:04:92:a2:5d:96:d4:06:28:3c:77:27:6d:6f:bd:
65:85:b0:22:fd:83:b7:18:46:fb:72:62:21:b2:f3:
aa:cf:96:3d:2f:76:af:e1:47:dd:95:7f:6d:1a:de:
ad:6d:17:d9:e1:33:59:5e:6c:b9:c0:ad:db:a2:89:
37:2d:c6:72:9f:d1:9b:2c:ec:a3:1d:70:47:29:2b:
08:d6:89:23:a2:56:35:7e:41:d8:99:9c:6e:3f:12:
1c:a5:98:d7:33:7e:8f:ad:8d:30:82:12:f2:da:ec:
bb:84:de:78:8e:fa:a7:6a:55:2d:db:1c:2e:f4:7f:
b7:98:66:e2:ae:83:61:77:1b:0e:ef:1e:03:08:db:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:04:71:A5:87:A8:BC:28:E7:34:D7:3C:07:4F:30:92:7C:4F:D2:41
X509v3 Authority Key Identifier:
keyid:93:D4:C4:AD:73:1E:45:ED:32:0A:2F:38:AB:70:B7:A7:BF:F7:EA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k9TErXMeRe0yCi84q3C3p7_36nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/ee0538-39c9-4450-9647-aba55e2424d2/1/k9TErXMeRe0yCi84q3C3p7_36nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:27:66:cc:05:c7:a1:a0:18:88:45:8a:1e:7e:90:cf:98:e6:
9d:98:14:25:b9:d3:69:11:60:c4:7a:fc:fe:5d:28:35:15:49:
34:ac:fa:ef:a3:92:f1:7f:88:a9:e4:4c:ec:6b:ba:d3:25:6e:
ab:a7:80:4f:fb:99:52:bb:8b:b2:05:b4:71:39:3f:55:a1:1c:
0d:5c:04:4a:80:77:df:d6:dc:41:03:1a:70:c5:a7:08:b4:d9:
96:fd:22:c9:d9:f8:bd:20:3a:b1:a3:6f:db:cb:4c:0e:5a:5a:
7e:9d:94:10:89:76:08:70:51:f9:ee:02:93:8f:4c:57:c0:ee:
3d:00:43:38:d2:f6:c1:ff:05:15:2c:95:66:0f:36:e0:d1:61:
00:3c:54:1b:d3:57:8a:7b:44:8d:46:53:49:2c:25:b2:0a:fb:
fb:ec:9b:ac:0a:ec:fa:e1:57:54:3d:aa:3d:61:8f:1f:1a:d9:
56:f9:08:1b:09:68:9e:64:2d:6a:d8:28:f6:50:d2:28:e4:f2:
be:03:d6:9d:3b:5f:87:b8:d2:6f:12:25:25:fa:9b:3d:0e:f8:
15:e0:2f:a3:5c:6a:c0:18:fb:97:3c:98:c3:bf:db:1c:43:75:
ae:83:05:f4:93:c1:8a:03:ca:0a:63:d6:7a:e4:c5:f2:09:99:
b3:da:41:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:29 2025 by rpki-client