Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
File: kGQm9IPDaqzahzIySriK1YAMmi0.mft (raw, json)
Hash identifier: CUx2WQ36Ed5RA6Mj5R8XV18RYjqNP3iUbMb9JRqfXdY=
Subject key identifier: 9E:5C:28:60:B3:82:0F:DE:96:5B:FC:41:C4:E6:C0:50:C9:40:2A:5F
Authority key identifier: 90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
Certificate issuer: /CN=906426f483c36aacda8732324ab88ad5800c9a2d
Certificate serial: 019683FFB8DA57FC6D00B152E02FCAB02D16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
Manifest number: 0A39
Signing time: Wed 30 Apr 2025 00:01:36 +0000
Manifest this update: Wed 30 Apr 2025 00:01:36 +0000
Manifest next update: Thu 01 May 2025 00:01:36 +0000
Files and hashes: 1: gLZLrbhpO6mWtu79cX_I9beQtfY.roa (hash: FKC1b4NqDGusVuG1PsHV/OorcR6VfmcWdy6GLsbONNI=)
2: kGQm9IPDaqzahzIySriK1YAMmi0.crl (hash: z4NGC+QeafOYTYvKA+dKo9tFh7DK7GwTJfQYFykUYfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:b8:da:57:fc:6d:00:b1:52:e0:2f:ca:b0:2d:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=906426f483c36aacda8732324ab88ad5800c9a2d
Validity
Not Before: Apr 30 00:01:36 2025 GMT
Not After : May 1 00:01:36 2025 GMT
Subject: CN=9e5c2860b3820fde965bfc41c4e6c050c9402a5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:98:2e:f4:bf:cf:26:17:9d:71:b4:a0:22:91:
cd:ec:de:f9:02:a2:a2:2a:b1:e0:bc:4a:3a:e5:17:
fd:83:ed:b9:f6:0b:6f:a7:59:69:f6:2c:b0:0d:eb:
66:0c:9a:dc:ce:52:0b:84:aa:b7:df:81:e7:62:7d:
32:29:04:da:db:7d:9a:2f:39:61:52:a3:ff:e5:5f:
2a:27:0c:f7:03:59:74:8d:2e:6e:e7:f1:78:65:89:
0c:e8:21:63:0f:21:c0:e7:6a:52:92:2b:ee:6b:51:
23:7a:26:a7:e2:65:1a:e4:01:e2:28:f9:94:47:48:
eb:11:16:48:c1:8d:3e:41:ce:da:b6:86:b2:87:42:
ee:92:ab:e8:33:59:2b:80:4f:55:19:05:e2:f4:9c:
3b:ff:85:66:cc:d1:ba:ae:68:94:2c:3f:65:d1:6c:
5d:35:6d:10:86:12:9f:a3:c0:6b:f9:2d:88:a5:42:
bd:d7:e1:7f:22:60:fa:73:45:31:e1:39:bf:a4:3a:
32:40:42:40:33:55:4c:bf:22:8b:32:fe:56:f5:0c:
3f:67:5c:59:a3:c5:69:ab:82:65:a5:80:c8:fe:4a:
3e:4e:b8:76:a8:e4:52:a6:39:07:1d:95:21:a5:8a:
ae:6b:81:33:01:f9:83:4b:6b:38:18:7c:15:5f:c1:
83:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:28:60:B3:82:0F:DE:96:5B:FC:41:C4:E6:C0:50:C9:40:2A:5F
X509v3 Authority Key Identifier:
keyid:90:64:26:F4:83:C3:6A:AC:DA:87:32:32:4A:B8:8A:D5:80:0C:9A:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGQm9IPDaqzahzIySriK1YAMmi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/94d441-d987-4062-89c1-94c5ad17a7a0/1/kGQm9IPDaqzahzIySriK1YAMmi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:fb:38:fd:2a:5e:fd:50:9c:bc:15:ba:9b:ff:b7:e0:bf:8f:
02:9c:09:f5:03:5c:dd:dd:14:d8:32:60:d2:48:bc:71:05:5d:
5a:5c:78:86:c0:e8:9f:c6:c2:a9:35:39:71:7f:e0:46:f4:37:
e4:b4:d2:86:7c:96:d7:78:15:6c:69:5e:ae:e1:a3:33:cc:74:
44:0b:79:97:27:b5:03:c2:ff:5b:af:e2:03:5d:3a:be:38:4b:
78:5b:65:12:4e:65:f7:02:be:ce:e7:00:7b:70:5a:ae:e6:9d:
bb:d7:c2:0c:e5:b2:fb:e4:db:0d:47:d3:1c:fd:3b:56:cc:1d:
c2:7f:6f:22:03:4d:ae:69:de:2b:15:61:4b:2d:29:b1:88:98:
52:4c:1e:31:7c:6c:ab:06:dd:f5:03:41:6e:61:82:85:cb:dc:
7b:bd:40:b6:91:de:6c:ca:b1:a2:8a:3e:1b:b9:94:5c:18:0f:
41:67:ca:3d:1b:0d:7b:0d:4b:f6:e9:ca:f7:3e:ca:ed:d9:a1:
1a:41:92:03:f1:29:a6:80:38:5d:5b:0c:be:7b:49:ea:d5:ba:
36:2b:31:9a:66:b7:57:f2:4a:de:1c:b1:3c:a3:0a:ec:1c:da:
a8:f6:b9:3b:8b:1e:92:33:f1:2d:5e:c1:59:dc:d6:24:d5:ed:
e4:d9:85:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:13:39 2025 by rpki-client