Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: a5HP7Hg5GUIGbZwWG8xF8sPwAzBeNSGOkRh875ss/ww=
Subject key identifier: 36:78:18:70:D3:F7:4B:9D:BC:D5:D4:37:A7:C8:78:D0:13:07:77:FE
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 0196895C01DE5B053492AA0EC6757D1D9CF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 151C
Signing time: Thu 01 May 2025 01:00:30 +0000
Manifest this update: Thu 01 May 2025 01:00:30 +0000
Manifest next update: Fri 02 May 2025 01:00:30 +0000
Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: P5ZpXtxTRRwEOCDNtMlTlcYgeOZbwRUujdfosdW6P34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 21:27:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:01:de:5b:05:34:92:aa:0e:c6:75:7d:1d:9c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: May 1 01:00:30 2025 GMT
Not After : May 2 01:00:30 2025 GMT
Subject: CN=36781870d3f74b9dbcd5d437a7c878d0130777fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:fe:dd:cc:20:72:78:e8:d8:6d:8f:5d:a5:
77:b1:07:d5:27:4c:d6:8f:ee:7d:1e:64:71:24:c6:
45:ce:1c:2a:56:8e:2a:ae:f3:b8:4e:9f:e7:50:84:
2d:e7:18:9c:93:ae:5e:52:2f:c7:45:68:45:78:c1:
f7:f5:ba:b1:98:4a:2c:02:eb:b8:29:0b:5d:34:db:
86:41:6e:4c:6f:1f:ce:05:dc:89:ab:aa:c0:7d:8c:
02:02:64:15:8f:da:3b:04:ff:a8:5c:2d:70:dc:51:
f3:81:4e:77:4b:a6:c0:8e:16:d4:92:2a:db:dd:e2:
cb:bb:29:93:c7:94:7b:e8:53:60:a3:68:08:6f:28:
31:3e:b2:b1:d0:4e:24:ab:e0:a0:77:09:f2:ea:63:
86:fe:52:03:00:54:34:90:ad:b9:e0:05:5d:71:d1:
a4:1f:4e:a7:46:d0:1d:58:61:a9:6c:d1:52:f0:cd:
10:2d:ea:9d:79:e1:68:b6:5a:f9:5e:df:36:83:1c:
9f:20:6e:75:f9:58:da:e3:70:23:ce:d9:6c:84:c5:
e8:4c:50:80:9d:d5:37:c9:17:80:a8:c2:af:2a:d6:
f3:86:bc:ab:d4:c4:66:b2:86:68:5f:e9:e5:75:01:
ad:5e:6d:16:93:c0:89:72:0b:54:2f:a1:5f:55:0a:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:78:18:70:D3:F7:4B:9D:BC:D5:D4:37:A7:C8:78:D0:13:07:77:FE
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a8:99:2c:1e:fd:01:c3:38:9d:1f:b1:23:2f:92:b3:a3:7f:
71:ca:98:a8:68:d5:d8:0f:6e:4c:a4:76:5b:25:67:3c:ef:3e:
c7:e7:70:80:6a:cd:1a:16:0e:38:0e:ca:4f:ef:4a:77:35:f2:
63:1c:12:19:9a:05:e8:07:5b:44:7b:b4:79:89:6e:53:55:46:
a4:5b:33:1d:4b:62:e9:6f:7e:6c:f0:6b:fb:51:d2:98:20:c7:
ff:4b:38:38:8c:fa:59:05:17:6c:c0:b2:3a:b5:a6:ce:eb:84:
2b:3f:d4:b8:a7:85:28:73:24:0e:8c:fa:07:a0:5a:1d:91:f9:
45:e6:78:66:c8:dc:66:07:98:12:16:46:f0:34:0d:4e:e4:a9:
03:cb:d4:b0:3c:6e:fc:3f:69:1c:11:67:fe:19:9c:6b:a9:17:
b3:69:22:db:c2:18:97:39:cf:3f:06:a8:cd:ad:aa:8d:17:5f:
d9:2d:c8:29:dd:63:87:01:5b:c6:15:7f:35:c0:e6:9a:e9:83:
08:e6:a9:59:ac:1b:90:c0:ba:2d:1d:b3:a5:01:93:ae:e4:2b:
bb:85:30:4f:5c:1f:c7:28:c9:3b:8f:bb:98:fa:3c:ac:bf:fa:
ae:a8:30:ef:9e:13:ff:7f:41:f7:08:7b:ae:6f:d8:b8:a1:42:
3d:d6:c0:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:22:59 2025 by rpki-client