Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: UYFYv0nqKfRo0KXlJQSC9Kf2t7IkNfIygUCUwZvptlE=
Subject key identifier: 53:E7:12:06:54:1B:04:9A:33:F4:02:83:93:D8:7D:93:7F:EA:74:00
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 01967B69D75FF6E709F0E8ABC6129F210799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 0504
Signing time: Mon 28 Apr 2025 08:00:56 +0000
Manifest this update: Mon 28 Apr 2025 08:00:56 +0000
Manifest next update: Tue 29 Apr 2025 08:00:56 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: ERpymuUMJ2KFW4VxIdmCswLHfklMWC+x7ds5LlpDwj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:d7:5f:f6:e7:09:f0:e8:ab:c6:12:9f:21:07:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Apr 28 08:00:56 2025 GMT
Not After : Apr 29 08:00:56 2025 GMT
Subject: CN=53e71206541b049a33f4028393d87d937fea7400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:43:84:de:d7:97:0a:97:cd:85:84:96:ca:9b:
ef:87:db:43:d7:a4:76:61:f5:d7:23:b1:55:88:45:
6c:ab:7e:3a:a7:10:7b:3c:23:ab:d4:d6:b1:3d:cd:
69:e6:ee:a2:11:a1:2c:2d:1e:25:d0:51:ad:c4:14:
59:2c:39:62:67:17:e8:95:69:e7:a4:76:02:b0:4f:
95:c8:d6:6e:dd:2e:b4:ba:8e:73:a9:4d:41:85:94:
a7:35:27:a0:71:b0:cc:4c:c5:e4:9f:3e:a6:ae:93:
c4:79:05:c9:53:91:df:a5:de:85:59:1a:3c:67:cf:
e8:fc:45:2c:58:1e:c0:a3:b0:79:3a:41:13:ea:3f:
d1:f6:de:7b:3b:ce:06:5d:e1:07:6b:81:29:11:a5:
b8:e9:e2:c4:e4:04:e6:6a:04:4d:9f:56:93:cf:c2:
d4:ee:dc:ab:76:3c:e5:3f:d5:0c:b6:19:70:fa:f7:
3b:23:a7:8e:29:9c:b1:1b:b4:5d:c7:81:2d:8b:e5:
0c:a5:0b:b8:ca:c6:51:59:93:85:32:4d:85:3b:b6:
2a:f5:02:84:52:ec:72:15:36:b7:c2:41:2c:a5:4c:
b5:e8:60:15:52:a0:d5:3b:61:b6:1a:03:74:e4:14:
3b:2e:85:c8:9f:76:78:f5:b8:88:89:8c:84:29:be:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E7:12:06:54:1B:04:9A:33:F4:02:83:93:D8:7D:93:7F:EA:74:00
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ce:2f:e9:2f:74:f7:78:e4:e9:a9:59:93:ed:95:14:d6:95:
09:66:46:13:0e:5e:05:94:93:d0:f4:4d:d7:48:c8:dd:a5:a6:
8e:8a:f6:e6:39:72:f0:df:c7:0d:d8:aa:92:67:3a:2a:36:7a:
17:23:99:4d:57:98:15:79:98:16:b6:22:30:5c:dc:40:1b:ee:
2c:55:ce:36:8a:cd:50:56:8d:3c:95:db:86:1c:ef:e7:b6:38:
8a:2f:92:73:86:d7:fd:7b:be:89:f9:96:05:8b:bd:89:be:8d:
cd:cb:a7:35:98:3b:38:99:5b:e8:d0:52:20:7f:b9:ef:b8:bb:
3d:ad:7f:37:64:81:a8:9c:ef:7e:29:48:e9:02:a7:18:a7:5d:
be:0d:a7:9a:01:8a:77:25:31:a6:43:2a:6b:ec:b8:6f:14:1a:
d5:bd:dc:38:c8:0d:03:d8:df:5f:ce:64:15:5b:cd:34:01:42:
d4:e2:94:ab:26:f6:da:f8:f9:f5:bd:3a:4b:e9:f4:8d:53:7a:
ab:ab:c9:f9:db:8a:6a:fd:bf:1f:1d:bd:05:7d:99:88:90:9f:
cf:a3:b9:3a:70:fd:67:32:4e:64:f3:45:54:9c:4d:75:7d:1e:
49:cb:21:21:dc:8e:b0:6c:20:5a:2f:8d:35:5a:f6:f6:db:05:
e5:f1:29:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:24:39 2025 by rpki-client