Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
File: kNdTolR-A6Sw0vkccOnOTkRoBBg.mft (raw, json)
Hash identifier: 3ceneafAZugjGwZtWG3KkbkERHMYXbEvCQuxGnHCToQ=
Subject key identifier: AD:39:1C:95:89:CD:EE:FD:EE:07:7E:22:65:9A:25:A8:7E:F2:1A:A0
Authority key identifier: 90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
Certificate issuer: /CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Certificate serial: 0196809046E5438C11AF61D9FAA3FA5DBD83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
Manifest number: 09B8
Signing time: Tue 29 Apr 2025 08:01:01 +0000
Manifest this update: Tue 29 Apr 2025 08:01:01 +0000
Manifest next update: Wed 30 Apr 2025 08:01:01 +0000
Files and hashes: 1: g5z8NV4dmlaKd11s7v3mxc0KYqU.roa (hash: bnZ9DFLSZGC/zi7MlcnpGi6LDIICQO79p3wjfCQfT+E=)
2: kNdTolR-A6Sw0vkccOnOTkRoBBg.crl (hash: 8ghMoQdx8js7mQfTPvrMlMY2ITgnl+HJeDx4Q2aavcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:90:46:e5:43:8c:11:af:61:d9:fa:a3:fa:5d:bd:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d753a2547e03a4b0d2f91c70e9ce4e44680418
Validity
Not Before: Apr 29 08:01:01 2025 GMT
Not After : Apr 30 08:01:01 2025 GMT
Subject: CN=ad391c9589cdeefdee077e22659a25a87ef21aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0b:ac:08:d2:e4:b6:12:6a:29:0d:73:0d:bf:
64:ed:a7:07:03:10:94:77:50:e0:d4:b5:cc:94:0e:
bd:f5:47:b2:4f:fe:ef:5c:df:88:37:a5:07:c3:d3:
73:b4:fc:95:72:3d:cf:61:a1:bd:7e:7a:b5:8a:c7:
90:23:e7:93:1e:06:6e:2a:1a:62:af:1e:c9:e0:62:
83:5a:87:a6:2e:c6:36:a0:e3:48:f6:15:f7:7c:ca:
4a:87:68:01:57:b6:a3:39:53:98:04:3e:ae:74:6b:
37:9c:bc:eb:98:1f:20:5e:d5:cc:84:63:bf:09:83:
f1:e7:ea:e2:91:be:89:4f:85:84:28:42:47:91:12:
59:35:08:e2:18:e1:f1:13:a7:86:99:37:fb:33:99:
37:b0:a7:a2:fa:41:21:14:06:ee:5a:a3:ed:b3:ef:
39:32:d8:85:57:4a:c2:22:54:eb:2b:67:0e:73:6a:
ec:a4:62:4f:52:e1:c6:54:04:46:41:7e:03:30:29:
3c:da:8b:45:76:45:33:a2:4a:83:fa:58:9b:94:df:
85:ae:fe:29:8f:12:70:33:d3:77:41:40:c6:aa:75:
23:4b:71:36:61:f4:49:64:99:ed:ff:1d:83:92:46:
06:35:b5:58:e6:bc:3d:84:4f:38:d8:76:10:0f:16:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:39:1C:95:89:CD:EE:FD:EE:07:7E:22:65:9A:25:A8:7E:F2:1A:A0
X509v3 Authority Key Identifier:
keyid:90:D7:53:A2:54:7E:03:A4:B0:D2:F9:1C:70:E9:CE:4E:44:68:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNdTolR-A6Sw0vkccOnOTkRoBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cc9099-7101-472e-aefc-5eb66bce318d/1/kNdTolR-A6Sw0vkccOnOTkRoBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:47:93:35:8b:6f:23:ab:cb:dd:e9:4f:aa:93:b0:7d:00:0b:
4a:da:e3:14:9d:38:e6:05:6b:a3:cf:f7:13:54:57:2b:d0:d4:
77:85:46:16:fc:be:79:39:44:72:19:1d:27:e0:b0:82:a2:5a:
6b:63:5e:77:cc:21:d4:8f:50:8c:07:63:33:a7:34:c9:79:49:
48:87:46:ab:5d:43:e1:d4:e5:0a:63:22:95:bc:19:b8:ce:a8:
be:28:09:82:10:f1:67:a3:99:d8:e4:0b:2a:02:20:ab:0b:db:
16:8d:16:d5:d5:b5:f8:ca:46:08:1a:1a:4f:7c:ec:42:41:dd:
66:0c:f0:84:cb:42:31:6d:23:e7:a7:cb:64:dd:85:d7:b4:a6:
07:86:4e:fb:12:7f:dd:43:f1:8f:af:cc:86:ae:b4:64:b9:4b:
73:1b:85:43:54:9f:8a:ac:2d:3d:a4:8c:a4:9b:69:41:23:6d:
4c:4c:f9:14:55:31:a1:0d:51:bb:b3:69:51:40:9e:33:d7:64:
ba:28:5f:30:65:79:81:3d:69:53:42:28:14:5e:21:1b:31:7c:
ff:11:d2:9e:12:dc:c8:8e:61:56:9d:50:6f:92:24:cb:c2:4c:
84:37:0b:2d:7b:d2:28:67:9a:b7:de:78:89:3d:ab:53:73:1d:
4e:df:ac:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:04:37 2025 by rpki-client