Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: pTOCzB9ag68vJ+aPp8xQCt6pR5T0+CsNMLek7/B3JW0=
Subject key identifier: F8:BF:4E:67:25:29:3F:70:F1:68:30:2A:00:20:14:7F:8C:34:BB:EA
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0196753082152C9778909D85A61180F09899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 1513
Signing time: Sun 27 Apr 2025 03:00:35 +0000
Manifest this update: Sun 27 Apr 2025 03:00:35 +0000
Manifest next update: Mon 28 Apr 2025 03:00:35 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: 7SebP9IL8I8xYiXpzXIlL0W7eFUZJbrF1smqQijH1HU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:82:15:2c:97:78:90:9d:85:a6:11:80:f0:98:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Apr 27 03:00:35 2025 GMT
Not After : Apr 28 03:00:35 2025 GMT
Subject: CN=f8bf4e6725293f70f168302a0020147f8c34bbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3a:67:67:be:ba:81:42:ef:81:43:d2:74:b1:
4c:9e:73:40:75:29:0e:59:29:3e:cf:a0:25:ca:1f:
97:65:cd:4b:64:e5:f0:cb:ce:e8:b4:f9:9b:d0:83:
4e:fc:f6:9f:9d:da:5d:d5:fc:71:cb:ba:32:69:2c:
b0:15:f3:64:53:b4:86:73:b2:e6:f2:ac:30:20:9b:
f2:0f:59:e7:cf:9c:f5:65:08:27:3f:6e:58:8f:f1:
44:82:74:bd:d6:16:14:d5:72:5d:ad:65:33:02:1b:
90:f5:64:71:07:1a:f8:4d:60:88:32:9e:31:d0:a0:
cd:1a:7f:51:14:79:17:ce:34:d7:37:4b:db:8a:16:
05:4b:a2:1c:b9:75:85:67:44:9f:ee:6f:99:7c:3b:
2c:f9:9c:72:89:84:05:44:50:e0:36:ab:68:a6:f1:
df:a0:b7:18:93:8f:91:7c:8e:0b:52:a8:7e:75:be:
06:09:ab:91:99:45:80:23:fd:35:ad:86:df:fd:4e:
37:bb:7d:bb:9d:58:56:24:93:23:df:19:f5:f3:86:
11:9d:a6:78:f6:3d:4c:27:bf:df:b7:30:b9:5d:eb:
28:47:a8:8f:34:32:44:ce:9a:fc:71:a8:dd:0c:59:
00:a3:29:df:e8:c3:c3:8a:55:b2:16:14:cd:59:78:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BF:4E:67:25:29:3F:70:F1:68:30:2A:00:20:14:7F:8C:34:BB:EA
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d9:c5:23:63:e8:ed:86:47:68:9c:83:26:71:e9:f5:13:c0:
7b:40:ee:76:7e:89:c1:3c:34:f4:3b:3a:06:cd:35:09:b7:5a:
01:15:77:33:15:b1:af:b4:8c:23:fb:dd:34:e0:2b:4b:50:2b:
c2:a7:06:41:da:6a:13:9f:60:90:75:36:27:54:97:1e:b7:52:
60:21:69:8b:26:74:49:ef:6e:0b:ed:36:65:c4:f8:d5:f6:ab:
b4:25:95:4a:be:34:5f:ec:66:9a:85:d6:3b:2f:01:cb:29:52:
e2:ce:d6:86:00:7e:e4:a2:65:b9:a3:72:80:4f:4f:03:45:67:
21:bf:c8:ed:7d:fd:35:43:31:ba:13:97:75:1f:55:d5:7f:ab:
20:41:53:91:6a:39:08:e0:73:b7:c1:37:be:7a:11:a7:81:09:
bd:cb:b1:58:bc:81:07:c9:ca:b6:73:56:87:9d:7e:63:01:cc:
dc:29:02:4e:87:78:fe:9d:82:1f:3a:5a:c1:b1:d9:3a:65:b9:
37:18:49:57:43:54:8e:89:06:c3:3b:3f:97:10:bf:27:92:5b:
e9:95:0b:87:54:d8:0c:c8:e8:64:4c:28:10:2f:97:15:f0:6f:
47:38:a7:2f:fb:96:7e:38:14:96:f6:db:7a:94:91:65:55:35:
f4:93:ff:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:19:11 2025 by rpki-client