Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: HB9SinU99ndBZ54Mkzq91mpitnufJY2ZbRZgSoQnVlE=
Subject key identifier: 36:E8:83:5D:4F:63:63:87:94:D2:E4:1E:6E:93:5F:B6:7B:78:FF:95
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019675D54224C7CF9DE8DE1119A9D6F765E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 0402
Signing time: Sun 27 Apr 2025 06:00:32 +0000
Manifest this update: Sun 27 Apr 2025 06:00:32 +0000
Manifest next update: Mon 28 Apr 2025 06:00:32 +0000
Files and hashes: 1: URATm4jCOgD3H4rtfNMfks3a2e4.roa (hash: nWiO/SjK1FVtNWytxucXj9X6RnD6dSqkVKhRqQz1kHk=)
2: hOs9nIaVlgbTGSRX2cF-L9A292Q.roa (hash: 2H7Eh3LEgJqf2jRLorxXZOs950af5ymfMFZuDGRu8KE=)
3: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: QOfstzZAwlDtfBrbe2Zk6aQDZ9t1Wf+BrFdlghIS/lY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:d5:42:24:c7:cf:9d:e8:de:11:19:a9:d6:f7:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Apr 27 06:00:32 2025 GMT
Not After : Apr 28 06:00:32 2025 GMT
Subject: CN=36e8835d4f63638794d2e41e6e935fb67b78ff95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:0c:0b:4c:3e:bd:33:08:1f:6c:6e:ad:3f:a5:
29:a9:90:9f:16:8a:72:8a:28:33:bb:69:e1:95:39:
38:0c:da:de:90:63:96:0d:01:36:fc:89:d3:fe:dd:
20:40:14:fe:a4:4c:b9:d8:4e:91:7c:e9:f0:8d:65:
4c:a0:56:6a:61:88:17:e8:a0:a8:2f:4b:5d:01:12:
64:f4:68:21:22:dc:ce:7e:cb:9a:94:01:2c:c8:e6:
30:8a:f6:5d:98:98:9b:d6:22:c3:0c:39:f4:f1:ab:
da:2d:e9:54:2f:31:91:e1:f4:2f:19:a6:07:e6:e6:
29:5b:6f:0f:c1:2a:ae:39:53:3e:72:41:8d:15:d2:
19:6a:e8:07:1e:dc:d4:d3:eb:67:1a:7f:f5:f4:a6:
5a:f4:66:fa:af:db:66:ec:cb:84:fa:02:da:01:3f:
b6:cb:12:ea:9b:ff:3c:18:1e:4f:8e:e0:1d:ec:ac:
82:c4:7a:ee:9d:83:fd:f9:ef:a1:43:0b:cb:c9:62:
52:32:58:03:c1:b7:1b:f8:90:6c:fd:50:01:9f:52:
c0:3c:07:8a:3f:51:fb:01:90:18:82:2f:3c:1e:82:
28:0b:78:e7:b5:6b:fe:45:b7:8f:fd:50:1f:e1:2e:
53:f5:7c:ab:b4:17:f8:9c:ef:a6:d6:34:a5:55:77:
94:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E8:83:5D:4F:63:63:87:94:D2:E4:1E:6E:93:5F:B6:7B:78:FF:95
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:8f:cc:f7:31:81:fd:66:79:9a:3f:2c:ab:1e:8e:36:a6:e5:
7b:79:0c:a2:ad:f6:c0:34:44:7b:2b:c8:29:0c:4c:55:f3:a4:
e4:1f:a5:ad:6e:2a:b2:51:e5:39:93:d9:c1:2e:80:21:b0:e9:
5a:02:91:33:77:1a:0d:29:f2:73:6d:ad:2e:57:4e:98:16:8c:
e3:99:7b:ff:da:88:81:ac:70:be:4f:31:a8:13:df:4b:ad:01:
c9:c0:81:bc:41:e9:70:eb:8f:0a:60:cd:50:f8:ba:6d:df:81:
ea:82:58:7b:25:5f:66:31:c2:39:fc:58:7d:2d:26:92:af:ac:
4e:f2:fb:51:c3:32:56:1c:11:73:b8:c8:89:03:d4:a8:ce:a4:
b0:24:1b:92:76:e2:89:44:c1:fb:08:87:f0:50:ad:1b:95:c0:
52:db:bf:65:33:0b:7f:29:36:64:ed:92:f3:fe:46:3f:7c:70:
0b:f8:af:08:73:44:4e:ad:9c:cc:ef:7e:ec:ba:84:da:69:5e:
36:14:80:61:4d:10:95:9e:03:87:dd:ff:10:cb:b5:ad:a0:94:
87:89:be:48:2d:e1:9a:9c:cc:f0:05:53:92:f9:ba:ab:5c:9f:
00:6d:56:5c:b7:77:50:a7:f6:43:35:b2:37:ba:6a:5e:20:a7:
b2:f6:a1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:34:40 2025 by rpki-client