Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json)
Hash identifier: Jk46Z9JhKhHaJCTd4dI0MT6yk3ATdpk7GIZvo2Vbrd4=
Subject key identifier: FF:E1:DD:34:F7:B1:61:2D:06:1F:94:69:5F:5F:35:F5:14:72:1B:2B
Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Certificate serial: 019675305CB375AB731A47FDDA5A700D470E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
Manifest number: 1514
Signing time: Sun 27 Apr 2025 03:00:25 +0000
Manifest this update: Sun 27 Apr 2025 03:00:25 +0000
Manifest next update: Mon 28 Apr 2025 03:00:25 +0000
Files and hashes: 1: 0-pROOQXTsOCMh82qmUXoNFs4FE.roa (hash: 0vaU6zj0/sOrHvzQbJoSj9Sg3MRWFQ3zNRXZe2vIoxM=)
2: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: 1CMJcoSnkuOu/arhCauihXRm8SndHrA5yi9ZdPjZpnw=)
3: 2Cx8NesV2FgXdhnelF2G7i5Bybw.roa (hash: 8z2f0ixyt/V0YgUez4ATct6QO89AWHzLa+ZNoGbwCzI=)
4: 8YGP0hkU08CaSTjLusnYfNoY0P4.roa (hash: jWZuJOzMx9s5Np/gPv2mn1+ybL0gZ2yjh5jQEUREZ9U=)
5: MQiGNWbAlQR27bMbQEHKZB--EhI.roa (hash: AiFihDDBAGIMVUfPOtlJJbKjEh0jiKhW/hNN55RabQ0=)
6: g4GRCAwu2q3EL-X1WL9RVrJbAQI.roa (hash: slCTgIDY8YfOpbaBmeIbIqftrjDIQWNh6XUk0mKIj7o=)
7: i6OZnwSC6Nlsenhf0tdXitkE5-w.roa (hash: W6vwLHJCt+ThAPP53KTcgutvWVLILu8jqOoeNXpZV58=)
8: nFpp1sOKP4UepGIUoHswLN2IbRI.roa (hash: Ttm+Uf2laDwHJ/wFsX6jTAwI0vmckT+FtwvtYdaFusE=)
9: vYCLX9lBA7ZtzSrFDp94A_tt6ys.roa (hash: YmvWA4cqMB8VZpWwYryqd/wK/81/N7wIyQFXaVwROW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:5c:b3:75:ab:73:1a:47:fd:da:5a:70:0d:47:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e
Validity
Not Before: Apr 27 03:00:25 2025 GMT
Not After : Apr 28 03:00:25 2025 GMT
Subject: CN=ffe1dd34f7b1612d061f94695f5f35f514721b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e6:df:74:f9:00:d3:2e:3d:b8:0f:6c:21:ea:
92:5f:a0:00:2b:e1:ff:bd:17:57:eb:0e:d0:35:91:
d2:d9:eb:2a:5e:9e:9a:4c:78:35:f4:d2:1f:95:d7:
ae:5f:5d:f4:b6:f6:20:5e:97:f3:4f:e9:01:9d:9d:
d1:1e:6f:69:37:1f:e9:95:ea:45:a5:1b:ae:79:6d:
89:c5:55:39:09:b0:4c:fa:d9:55:45:51:85:23:63:
1d:ff:03:33:05:e3:63:68:61:4c:75:92:8e:fe:64:
33:36:55:7d:60:2e:0c:a1:7c:7b:db:ba:75:a7:3b:
c5:ec:9b:f9:73:b5:d8:eb:c9:db:d5:84:6f:4b:92:
fc:5f:a1:3b:14:4e:99:33:68:d5:bc:31:4c:fe:62:
37:96:1e:99:85:bf:25:02:79:6d:d7:de:dc:7c:26:
35:36:08:94:23:10:a6:d7:fb:cf:6e:52:02:26:a1:
93:24:de:c4:d4:f8:47:5a:54:0b:4d:cc:f3:55:4b:
c3:10:e6:13:e6:34:58:05:a5:81:fd:fe:66:b3:e5:
f2:d8:44:67:1c:2b:49:1a:ce:4a:91:30:66:47:ca:
e4:80:03:5c:a5:1f:ea:06:ba:f0:00:0f:3f:a9:b8:
e9:a2:43:a8:81:6b:8b:cf:22:91:64:0f:21:3c:2b:
d8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E1:DD:34:F7:B1:61:2D:06:1F:94:69:5F:5F:35:F5:14:72:1B:2B
X509v3 Authority Key Identifier:
keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:09:8d:e8:f4:20:7a:35:72:4c:4a:9d:be:3c:e0:ef:44:e9:
f4:6e:92:19:c4:e5:a5:0b:87:2c:3c:52:12:47:0c:58:f4:82:
ff:4a:24:e8:5b:63:38:c8:ac:8d:e0:a1:d4:75:04:91:c4:83:
32:de:a2:e2:b5:12:9d:c4:04:4d:a6:48:31:49:51:67:d8:0e:
cb:69:33:6a:2e:e6:e1:ce:94:b6:98:d1:16:8c:2c:03:96:86:
41:98:5f:c0:49:69:61:97:0b:79:b2:37:e0:99:75:82:24:db:
36:97:16:5b:9d:3a:9f:93:6b:30:1f:28:d3:e0:bf:6d:e8:3b:
07:f8:3c:c0:ec:71:be:e9:6f:9b:57:ad:6c:c0:d4:6b:b6:86:
83:37:f5:80:90:1f:3f:f8:8a:ad:68:06:b3:72:7f:77:9d:3c:
fd:16:c1:cf:67:ed:41:1a:fd:89:8e:08:99:b2:ae:6b:b1:01:
df:a2:17:6f:8c:a6:a2:14:b3:4e:00:78:43:00:4e:9e:ff:f5:
c8:83:3b:72:08:8a:39:ab:38:0b:ae:88:e4:4d:72:d0:ff:c5:
c6:54:08:0d:02:da:75:58:79:59:f7:77:c3:b1:7c:db:3b:3d:
f6:f0:10:ed:8d:cd:cf:06:0a:c5:51:da:cb:69:9b:63:1e:a5:
8e:64:1e:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:27:00 2025 by rpki-client