Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: FLDFeYH13ufvJm4aIkpPQGn2tWHtwRrwj5ZgVPTmVe4=
Subject key identifier: 5E:9A:E6:9B:8D:A8:5E:12:60:CB:5D:31:30:1A:71:7F:12:EF:F9:EE
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0196748C320D495EE3CD4BC4A9AC37C3CCFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 0940
Signing time: Sun 27 Apr 2025 00:01:06 +0000
Manifest this update: Sun 27 Apr 2025 00:01:06 +0000
Manifest next update: Mon 28 Apr 2025 00:01:06 +0000
Files and hashes: 1: 7KfzHRhceMH3Gb7zOEYksplo7xE.roa (hash: iVfBfIuw7lWYjZl+rIhHi1Vj8lrxetMWHxIKh5tV/kE=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: IscJMPpS0Pm9CEt0/jQ0WYtmLpppnJb57gPhnP05CFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:32:0d:49:5e:e3:cd:4b:c4:a9:ac:37:c3:cc:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Apr 27 00:01:06 2025 GMT
Not After : Apr 28 00:01:06 2025 GMT
Subject: CN=5e9ae69b8da85e1260cb5d31301a717f12eff9ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:c5:71:1d:b8:69:d9:a8:56:f9:93:f7:34:
97:90:61:ee:4e:e8:46:e2:5d:5d:32:af:92:e1:ba:
56:e8:c6:ef:d7:95:ca:fe:65:7c:58:a0:91:64:d0:
a7:c4:cb:35:d1:39:1b:a1:d2:ec:f8:5a:de:6e:81:
ed:74:ec:92:18:7b:9a:ce:36:bb:e8:8f:eb:6f:b3:
36:9c:c2:39:63:92:a5:6a:bf:9f:97:d5:3b:29:1e:
5c:5b:a9:d4:b4:18:6a:cb:ca:c2:a1:76:fc:32:db:
14:5b:c2:b4:e5:3c:15:b5:48:e0:53:07:9e:9c:41:
e5:ee:f6:b0:96:d7:9e:1b:b3:db:1b:7e:cb:b6:b8:
c7:da:2c:60:45:c0:8e:38:af:2b:ff:f0:71:31:27:
05:bf:f8:a5:05:8f:42:e6:bc:f0:57:fa:20:3c:f9:
5a:e3:f8:f0:fb:d3:1d:8a:32:52:fa:15:6a:e4:b7:
12:83:e5:ae:50:78:cc:f2:fe:23:2a:ed:2e:3e:5f:
40:01:e2:a5:fd:4d:1a:4c:4c:e1:92:d9:57:72:7c:
9d:47:c3:3a:f2:3f:8c:59:24:39:22:49:51:8b:8c:
8a:09:ea:5b:47:07:67:b2:7a:d3:4f:2f:99:1b:30:
90:d6:0e:02:bd:37:4c:ac:28:95:6d:8e:07:24:79:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:9A:E6:9B:8D:A8:5E:12:60:CB:5D:31:30:1A:71:7F:12:EF:F9:EE
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:fc:45:e2:e1:e6:16:84:bd:6e:5e:51:63:88:4e:c5:3c:91:
08:b7:ae:b2:ab:4c:4c:74:86:d8:48:fb:bf:62:a0:46:13:46:
c2:4c:ce:31:f2:2c:52:ab:d8:7d:2c:bb:cc:5e:1e:10:fc:e6:
50:1b:87:7d:69:83:a6:dc:5c:c9:00:88:b4:3e:cf:e1:66:ec:
c9:66:92:8b:49:9d:c8:2a:53:a3:76:5e:6f:e2:62:ba:ae:41:
5d:9e:2c:34:71:d7:37:16:08:1d:81:a4:9f:c6:95:af:a3:8f:
20:d7:9e:38:17:f5:1d:22:6d:78:db:73:37:88:95:59:aa:0e:
f8:cf:f8:d7:eb:a9:61:e4:61:d0:53:61:58:7a:88:b6:33:28:
f4:4f:d5:e7:1f:96:ba:86:e5:66:2c:d3:d3:5c:3b:b5:34:56:
94:ec:80:a1:d1:8a:50:aa:43:a5:df:02:df:1b:18:d5:82:c8:
51:ba:18:65:1f:d6:27:8e:e9:ff:5f:fc:b1:79:1f:39:8e:8b:
85:84:0f:d5:bd:a6:7e:39:4a:97:4e:0f:74:85:ea:5f:c6:66:
16:90:9a:5c:4b:2b:f3:62:65:54:d1:cd:90:ea:dd:63:f6:51:
74:c3:60:5d:ea:cb:80:28:f2:17:76:e5:24:6c:35:27:f0:bf:
08:9e:ea:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:00:52 2025 by rpki-client