Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: WrnSVtXHRFdo+4dP3C8gCj2JKLY55htTOxz9ZXYdYhw=
Subject key identifier: A3:93:A2:E5:3D:9B:6E:41:59:4A:0D:C4:17:5D:87:F7:CE:CE:E0:92
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 01967C458DDA1697E203D47A8F0E7BC4C5CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 1512
Signing time: Mon 28 Apr 2025 12:00:54 +0000
Manifest this update: Mon 28 Apr 2025 12:00:54 +0000
Manifest next update: Tue 29 Apr 2025 12:00:54 +0000
Files and hashes: 1: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: FX6ttKvkzb3lmnFv2cVClOmOeoQodvAZ1kySEq/TrmM=)
2: u-dAmjX4oqcf2iXVI7lxfelsBMA.roa (hash: XLlmaFeeXeZeIUJOi3DmWDwWe9ndlrrcSMKKooeEWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:45:8d:da:16:97:e2:03:d4:7a:8f:0e:7b:c4:c5:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Apr 28 12:00:54 2025 GMT
Not After : Apr 29 12:00:54 2025 GMT
Subject: CN=a393a2e53d9b6e41594a0dc4175d87f7cecee092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:2c:d0:9b:67:a5:58:e4:28:72:33:61:3d:
92:7e:29:94:45:5f:aa:ae:8a:82:96:45:38:fd:6c:
d8:ed:40:6b:41:13:82:25:ef:41:15:92:8e:26:aa:
b9:44:ee:f8:21:62:c2:a2:10:68:07:eb:df:a4:9c:
bd:a9:da:03:ce:4b:22:6b:6b:cf:ad:4d:6f:2c:73:
e3:cb:ff:ec:85:8f:7f:12:ef:3a:ac:98:08:5c:fb:
81:80:e2:c4:99:7b:34:c0:2c:a9:89:fa:be:ec:91:
a4:b0:1b:8c:37:97:83:07:65:20:0d:45:11:b5:57:
ff:a2:c6:8f:2d:a1:05:07:66:e0:62:57:87:1d:6d:
10:5e:03:4f:7f:8a:13:17:a5:cf:3f:1c:f8:42:af:
10:b0:7c:1f:98:ec:d1:98:59:8f:e1:f3:8b:3a:fb:
17:cc:12:23:f4:36:85:a1:45:f8:d4:c0:82:37:22:
fc:e0:08:78:15:d8:6c:5f:97:df:0b:a9:43:42:09:
94:fe:1d:7b:aa:1b:1c:81:a9:3d:fa:a4:17:f8:7b:
c8:67:8f:b5:c4:0a:f3:ea:cf:ce:82:2d:84:c6:28:
04:11:bf:84:fd:fd:d0:50:48:55:e6:38:1d:1f:96:
da:6c:6c:e9:27:4d:f5:f5:ef:a8:57:b9:37:7f:37:
80:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:93:A2:E5:3D:9B:6E:41:59:4A:0D:C4:17:5D:87:F7:CE:CE:E0:92
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:63:56:17:90:a8:20:7c:73:6e:f8:84:56:76:90:41:2b:0d:
03:45:4e:50:44:f2:cd:e2:89:b9:37:6d:54:dd:4e:ba:f0:36:
f5:89:15:a4:d1:43:82:9a:d7:a3:c2:fe:73:00:b4:b3:6a:3b:
13:ba:da:af:8f:c9:48:c4:20:f8:cd:70:89:b3:f7:22:92:ce:
a1:60:2b:9c:61:7b:5f:98:4c:38:d6:ef:e3:02:d0:5b:00:0a:
b3:34:74:cc:12:4e:d1:bb:32:46:2f:3f:2e:42:ab:93:82:c3:
ba:5f:7e:98:c9:1a:02:21:57:01:26:6e:5a:87:13:db:19:b7:
a9:3a:b2:1f:d5:75:00:03:15:87:fe:4c:be:a7:94:05:66:c2:
32:d9:80:50:36:3e:ac:91:1c:cd:be:32:b2:a4:c0:aa:88:43:
e4:96:a4:f2:c9:23:4d:92:3b:15:e7:e6:71:9f:b5:05:94:44:
30:0c:05:52:70:20:fa:82:7e:56:dd:ed:39:be:db:d3:ca:2a:
9e:80:cc:53:96:29:b6:bf:f1:c1:fc:fa:21:ab:30:ad:33:2b:
5f:a9:96:59:62:4a:40:7c:fd:66:26:aa:81:16:03:a7:78:15:
37:06:5a:8d:ae:07:3f:01:b6:ea:24:24:08:c4:01:1f:49:2e:
01:16:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:00:42 2025 by rpki-client