Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: GBv/w3HhNJeIz0BK9lSIsQE14xJPkRmlBvRDQ/xIUXM=
Subject key identifier: 0B:DB:E3:30:D2:B7:98:70:80:8B:18:25:92:90:4E:60:F4:A8:31:5B
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 019681A35B5CC5E2B5DA8F4C27427523D3F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 14A7
Signing time: Tue 29 Apr 2025 13:01:28 +0000
Manifest this update: Tue 29 Apr 2025 13:01:28 +0000
Manifest next update: Wed 30 Apr 2025 13:01:28 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 9EdfiTjnGq4yCiD9+YyTF04HFeuFYr6HmHCwX5wEjhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a3:5b:5c:c5:e2:b5:da:8f:4c:27:42:75:23:d3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Apr 29 13:01:28 2025 GMT
Not After : Apr 30 13:01:28 2025 GMT
Subject: CN=0bdbe330d2b79870808b182592904e60f4a8315b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:25:c8:1f:ff:d3:94:97:73:3d:b5:5c:f3:
9e:33:64:2e:ef:52:21:26:75:89:ca:c2:46:3a:94:
8d:80:c5:ec:2d:f2:17:62:20:da:48:91:36:60:89:
2f:4c:d3:6e:42:8b:76:0e:e4:92:b3:90:81:b1:d9:
a5:a7:58:e8:c7:82:76:06:80:ce:fc:53:5a:b5:c2:
9e:65:c2:60:9b:bc:fa:f9:62:3b:b8:41:36:7d:e0:
6e:17:2c:8c:79:bc:e9:d3:4f:0c:f9:d3:fd:7f:96:
a1:84:0c:9d:54:cb:5d:ee:d7:a6:8b:3e:33:fd:4a:
02:8e:a4:68:46:f1:e1:0c:bc:7b:f0:64:b4:a8:39:
cb:6c:72:db:81:13:b2:0d:8c:24:40:1a:1c:20:7b:
be:8c:98:1c:96:7a:c7:bc:e5:ff:ab:70:02:fe:e0:
d8:cd:28:08:cf:74:cf:98:63:92:b2:7f:c4:f8:5f:
3f:45:1c:96:cf:82:e9:ac:e7:ae:4d:a6:3a:57:b3:
76:a4:16:00:d2:38:1c:ef:45:be:e7:75:d7:47:3c:
88:70:0d:92:b8:6c:d3:97:b6:9c:6b:de:b6:36:8d:
18:5a:41:27:8e:9c:2b:14:b9:49:3a:c9:0e:a2:bd:
7e:62:f3:18:f4:58:e8:df:77:31:5f:4b:27:04:18:
76:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:DB:E3:30:D2:B7:98:70:80:8B:18:25:92:90:4E:60:F4:A8:31:5B
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6a:eb:f8:95:c0:95:93:2f:05:43:ab:ac:7c:38:a1:a7:a8:
0f:fc:90:36:44:6d:09:15:aa:e7:61:09:1c:ca:5f:51:a4:41:
70:ce:2b:45:10:ec:47:c8:a7:93:73:e3:a5:79:c7:34:95:fb:
12:04:b9:a3:68:c8:d9:fd:16:54:1c:62:eb:7d:58:d6:53:20:
a7:40:58:32:08:35:0b:2c:aa:eb:b2:bc:0f:2a:cb:7a:4f:c4:
b7:26:22:6f:45:9e:70:4c:4d:24:92:83:86:7a:81:16:14:6e:
ba:f0:75:ad:14:98:fb:27:81:5c:7c:b9:f4:b5:79:6d:9d:df:
90:dd:d7:7c:d3:2f:c7:a0:c4:bb:3c:1c:04:0b:35:b3:97:ea:
89:6d:c4:30:c9:49:bf:c1:1f:08:63:8b:02:a9:b6:50:6a:63:
1b:d1:64:58:c7:a8:66:a7:2b:44:18:cf:4b:f7:66:3b:a6:70:
35:fd:09:54:d7:80:34:16:99:d5:df:69:69:98:44:23:18:37:
f7:78:b0:dd:fe:c0:64:47:f3:bb:d8:8e:81:cc:4c:e4:08:4c:
65:8c:72:f6:06:0c:3f:1d:6b:d0:7a:81:47:1b:d6:a6:ef:da:
70:e7:b0:f3:a5:a9:7a:16:96:4e:1e:1a:df:c2:2b:d2:eb:3a:
45:aa:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:32:41 2025 by rpki-client