Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
File: KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft (raw, json)
Hash identifier: x96Sz1iTTFpfC/M7mH1ILYs7Ee6QKJwYgFRzl+lzhb0=
Subject key identifier: BA:46:E1:EF:D0:14:5D:71:B2:26:D7:AB:F2:89:60:35:97:F3:65:EB
Authority key identifier: 28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
Certificate issuer: /CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Certificate serial: 01968391467A7C7FC050B1685520A288301F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
Manifest number: 0793
Signing time: Tue 29 Apr 2025 22:00:58 +0000
Manifest this update: Tue 29 Apr 2025 22:00:58 +0000
Manifest next update: Wed 30 Apr 2025 22:00:58 +0000
Files and hashes: 1: Ep5Q_paEMkoQ8JMNVQev_VtcdmY.roa (hash: Bu1EiGDnBTDp8uoDAPAoyCI9ib5FJjnia2bO4NVERCs=)
2: KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl (hash: QXRyEg0627JZ9XBs5CFioq84w84zNqk9qKhxgQ/7UHQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:46:7a:7c:7f:c0:50:b1:68:55:20:a2:88:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28203decd08bd47d8a9162a6e1742f3c53ea3c74
Validity
Not Before: Apr 29 22:00:58 2025 GMT
Not After : Apr 30 22:00:58 2025 GMT
Subject: CN=ba46e1efd0145d71b226d7abf289603597f365eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f0:51:5b:a3:29:0f:67:1c:c5:45:8a:70:3e:
4b:21:e3:4a:4d:13:bb:e0:35:d2:27:1e:7b:67:72:
e1:35:ba:55:48:e6:a0:09:16:20:e7:85:0a:85:26:
df:f0:b7:43:e1:71:ad:15:35:c3:1b:cb:df:09:13:
67:cd:b7:66:13:80:94:59:6f:ba:69:cc:47:12:bb:
3f:e4:e5:90:1e:6a:f7:59:e2:bb:a2:29:c2:f5:2a:
50:af:e0:11:b4:fc:ea:cc:61:5b:fb:f1:e2:ec:fd:
ae:00:4b:61:31:d1:98:7d:75:b0:7f:40:81:0d:2e:
dc:53:b3:30:2a:88:40:d7:5d:7e:e5:ff:73:ce:b7:
66:46:aa:a7:42:b2:7a:f0:17:0a:bf:bc:49:50:3f:
4a:29:b2:ea:e3:0b:ed:1f:7b:f9:da:c2:ca:6f:bf:
e7:69:32:af:34:83:b2:91:8d:4f:9b:32:f2:ef:7d:
8f:ee:60:38:39:29:3d:37:73:73:25:7b:be:3b:ab:
1e:8f:de:3c:51:b0:0c:97:06:b7:14:93:96:d1:1a:
dd:9d:88:16:8c:20:f5:61:61:36:5e:8d:fe:2c:50:
d4:9c:6f:1f:7d:2a:73:3a:5f:20:ef:4a:13:f8:49:
e1:eb:b0:56:c0:6b:57:0b:92:5a:c3:16:e1:ea:55:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:E1:EF:D0:14:5D:71:B2:26:D7:AB:F2:89:60:35:97:F3:65:EB
X509v3 Authority Key Identifier:
keyid:28:20:3D:EC:D0:8B:D4:7D:8A:91:62:A6:E1:74:2F:3C:53:EA:3C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCA97NCL1H2KkWKm4XQvPFPqPHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c90a34-0afd-49b9-bbd6-a297c1408085/1/KCA97NCL1H2KkWKm4XQvPFPqPHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:eb:8d:30:39:15:06:cc:26:20:9a:5e:bb:9f:a1:c7:16:4e:
38:62:0c:81:55:33:18:5c:2d:61:be:25:ba:d6:3e:a4:b2:2f:
06:ae:04:48:d5:0a:6c:6b:cb:72:58:a3:af:29:d5:14:8e:10:
38:82:87:e5:07:0c:fb:15:08:99:68:45:ff:1b:b5:14:15:c5:
90:e2:7b:dd:56:83:7b:03:a4:1a:e2:26:9a:a5:bd:65:73:54:
95:c5:83:d5:e5:ae:b5:3a:73:f0:ea:97:2a:83:2d:2b:96:2a:
e3:d5:fb:d4:7d:02:df:42:6b:14:d6:58:20:37:fd:2f:8e:f9:
85:ec:dd:bd:6f:37:56:b9:e5:64:6e:13:37:77:5d:17:77:e8:
12:ec:e2:ac:a0:f2:f9:54:32:b6:47:c9:fb:11:41:89:89:ec:
a2:0f:18:1e:0e:ad:bf:ac:db:de:04:40:d1:ab:d4:a0:58:18:
fc:83:44:fb:ba:4e:a3:6d:e4:3c:e0:35:83:54:73:84:b3:36:
a2:23:71:d1:90:94:2d:ad:15:ba:75:58:e9:33:6a:16:69:08:
62:36:63:b7:59:8a:8e:54:40:46:88:51:9d:83:58:ba:9d:3b:
61:38:6a:c3:83:c4:06:d5:43:96:bc:6e:d5:ae:1d:e2:0f:3f:
e8:b1:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:48:02 2025 by rpki-client