Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: OW1XsMEiFa54xNvWyn3kvDKsdHwKq3rr5C8DLzB/r8U=
Subject key identifier: 73:5C:C4:4E:0C:04:20:97:86:11:49:DB:9B:57:01:35:85:07:6A:7D
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 019679E939ABD1D744C8FDE43EC51384C54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 1510
Signing time: Mon 28 Apr 2025 01:00:49 +0000
Manifest this update: Mon 28 Apr 2025 01:00:49 +0000
Manifest next update: Tue 29 Apr 2025 01:00:49 +0000
Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: Ok/rBlxeVbkmmfSg3EXbxFKLJ1eJZNXoZ9qYb+FV+hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:39:ab:d1:d7:44:c8:fd:e4:3e:c5:13:84:c5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Apr 28 01:00:49 2025 GMT
Not After : Apr 29 01:00:49 2025 GMT
Subject: CN=735cc44e0c042097861149db9b57013585076a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4a:ff:a9:47:26:43:60:67:49:4e:20:75:db:
e6:8f:9e:bc:93:be:04:a5:cb:d9:cc:aa:b0:35:56:
12:06:5f:23:dd:17:df:31:45:f5:4a:7a:c8:45:d3:
21:de:4c:1a:13:5d:79:bb:12:b6:c1:7d:b5:d2:e6:
54:91:b1:5b:16:c1:de:93:90:2f:f0:8e:34:9e:57:
90:22:de:96:36:93:02:a6:d2:c2:c3:83:a8:dc:b5:
ed:dc:56:cb:7f:18:3a:40:ba:cf:ec:f7:a3:2d:dd:
88:98:90:38:e9:81:e1:cd:59:d0:87:7a:58:2f:8b:
1c:da:82:5b:d3:29:41:a3:73:dc:82:14:37:6f:19:
e7:26:d4:e3:e8:7f:74:44:cb:95:d0:90:d2:77:1c:
1e:e8:ce:ea:5f:c1:37:fc:7c:7d:36:84:56:15:a3:
fa:49:f6:67:05:02:94:02:1a:4f:0e:20:a0:f8:3b:
f7:36:e4:34:33:8c:77:30:15:bf:ed:fd:a7:05:21:
c8:29:a4:33:9a:54:78:9f:5a:ff:f0:dd:7d:99:97:
65:f3:91:ed:d8:fc:a5:75:ec:69:55:03:ac:ab:19:
96:50:32:02:12:60:98:c2:8e:77:26:5a:07:fb:52:
66:16:45:fd:b3:f6:e2:cb:c2:4d:ab:9b:70:93:2f:
50:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:C4:4E:0C:04:20:97:86:11:49:DB:9B:57:01:35:85:07:6A:7D
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f7:09:5a:30:9a:3e:61:0c:88:c3:00:63:5c:6c:ba:37:ed:
a1:87:60:0e:33:cf:79:f8:b4:20:ef:e8:c9:da:15:f3:aa:5b:
08:dc:08:ac:43:90:1f:96:82:84:b1:17:5d:99:bd:b2:22:ee:
0c:92:6b:4c:db:20:ec:c0:26:2a:57:43:c1:41:52:b2:71:f5:
7d:d7:f7:f9:53:09:42:5a:ca:50:40:c7:9b:09:15:28:12:8b:
4f:ef:f7:01:47:0a:7f:07:b9:1d:48:8f:b6:39:a4:62:84:55:
be:3d:ed:c5:35:29:a5:2b:05:13:f8:21:fd:ea:c7:ae:c8:a5:
f3:b3:da:b6:27:dc:f7:4b:39:cb:ec:62:87:32:99:57:95:91:
98:82:3d:e3:c2:24:21:ca:2a:cc:55:fa:ab:15:9b:d6:84:0f:
98:73:77:89:81:d6:a8:52:f4:08:d2:06:3b:3b:fb:fe:a1:e7:
dd:36:79:e0:ae:3f:a9:55:c0:c9:ba:65:d7:89:df:73:37:05:
94:47:30:1f:f7:91:53:48:3b:53:17:94:6f:7a:f4:dc:47:a7:
5d:3c:4e:66:24:62:fc:b9:1c:0b:c0:a9:cd:5e:37:60:5f:8e:
c2:30:6a:23:a3:dd:8e:ee:ad:54:55:b1:b3:f6:17:e3:af:ca:
f2:03:97:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:20:50 2025 by rpki-client