Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
File: k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft (raw, json)
Hash identifier: WEiYKUbmdnia0bvjXgOHhf9VUHquuo5olwB8fDolvIE=
Subject key identifier: 7C:BC:FC:B7:39:D3:C2:56:29:92:EA:19:83:AF:86:3C:72:B3:A6:69
Authority key identifier: 93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
Certificate issuer: /CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Certificate serial: 0196410BFDC6A916FA168A68FA6B3A6B673A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
Manifest number: 02FF
Signing time: Thu 17 Apr 2025 00:00:26 +0000
Manifest this update: Thu 17 Apr 2025 00:00:26 +0000
Manifest next update: Fri 18 Apr 2025 00:00:26 +0000
Files and hashes: 1: AiPidDvOS911eIE_Bv4bCPvMQdA.roa (hash: WEUUip36TmyOm0WESjcrGu5QU6NeWV4wR3cZMEyQYFA=)
2: k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl (hash: LZbYjmlSGjNvB9eSLoviy2S+nvyYtriKgUaCsL3+RLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:0b:fd:c6:a9:16:fa:16:8a:68:fa:6b:3a:6b:67:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e9f4bddf4b2df110ac308346f46d9450f13b3a
Validity
Not Before: Apr 17 00:00:26 2025 GMT
Not After : Apr 18 00:00:26 2025 GMT
Subject: CN=7cbcfcb739d3c2562992ea1983af863c72b3a669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:4f:78:ce:8b:6c:5b:ef:38:19:b7:bb:ea:
32:fd:5e:f5:a2:a8:f7:de:da:72:fc:a4:32:e5:7c:
6c:2d:16:12:6d:4a:57:2f:db:7c:f2:a9:e7:3e:97:
42:a7:86:c3:f1:fb:db:53:92:fd:21:12:c1:6e:33:
84:d9:c7:71:b9:51:b0:df:a0:09:fb:cd:7b:49:1a:
97:19:6b:7a:2b:c9:4b:d1:d6:93:d5:f5:c3:7d:23:
04:c1:06:b5:60:f6:02:fd:5d:ef:54:41:2b:9c:77:
bf:44:54:f8:b4:2e:e6:91:fa:a6:ac:25:e4:fd:bf:
f7:61:12:2e:1d:00:9b:0e:eb:33:ea:bf:72:b6:e5:
39:1a:89:11:e2:d7:14:06:f8:af:17:ad:4a:32:49:
30:ac:b5:dc:44:72:9b:ec:56:db:f3:e1:42:a2:3b:
51:7f:49:29:b4:77:bd:d7:e7:d0:53:39:92:80:6a:
97:94:d4:27:e1:93:44:e1:36:57:b9:f9:3e:86:b6:
95:f0:28:77:af:bd:71:7e:a0:b6:c6:f5:fe:f8:47:
52:3e:41:a3:37:fc:25:88:fd:e9:66:57:aa:39:6e:
e1:db:dc:4b:23:c2:9f:d4:51:4b:83:3d:0e:20:9c:
81:38:59:58:c3:f8:79:4f:6c:a1:54:56:a0:8c:ae:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BC:FC:B7:39:D3:C2:56:29:92:EA:19:83:AF:86:3C:72:B3:A6:69
X509v3 Authority Key Identifier:
keyid:93:E9:F4:BD:DF:4B:2D:F1:10:AC:30:83:46:F4:6D:94:50:F1:3B:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-n0vd9LLfEQrDCDRvRtlFDxOzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2a2b1-8657-4cf2-a1a8-c2b61f86b0aa/1/k-n0vd9LLfEQrDCDRvRtlFDxOzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:27:d7:bb:76:58:57:93:f3:8b:73:88:93:eb:5c:3c:f6:d2:
33:94:c9:7a:ff:ec:fa:c4:f1:ad:c8:40:7e:f4:6d:88:02:cf:
1e:5b:4a:b5:f1:cc:c1:5f:82:6a:09:4e:f4:ed:7d:7c:8d:8b:
b1:11:50:64:fb:31:a7:66:af:97:96:b3:5a:c3:77:d4:2e:78:
59:3e:c1:05:cf:46:26:41:62:51:cc:23:97:e3:1e:95:5d:79:
6b:82:9b:b1:a0:bc:39:f7:80:92:8c:57:af:aa:ea:ba:0b:13:
74:52:e1:e0:8b:6b:3d:1a:f0:82:a2:e6:4c:05:0e:36:c6:1c:
9a:e2:46:8d:10:b9:f8:98:65:ec:fb:34:1c:3e:54:8b:28:cd:
d6:f5:8b:e4:a2:1f:d9:c5:1f:cf:3c:3a:b3:6e:37:b0:b4:a6:
f5:d9:bf:5f:67:d3:55:b6:c4:a7:f4:e7:ff:d7:69:01:d5:f9:
02:af:10:5f:17:63:fb:2d:55:ed:79:c6:9a:82:d2:59:bd:9c:
c2:91:77:d7:da:29:3b:40:57:30:f9:b7:f5:73:a6:70:90:5d:
d8:3c:6d:df:e5:50:7d:1d:a8:22:e9:47:8a:52:20:79:5d:46:
07:10:b2:33:ee:11:00:53:4a:d9:1b:e0:aa:da:5d:22:c8:37:
5f:91:58:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:54:50 2025 by rpki-client