Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: 1OBVdmqKtAnfEyqq9jus6wmVCuxAf1yTofEfqAqsBuw=
Subject key identifier: FB:49:55:7C:47:BA:A7:ED:F1:B8:E4:4D:2F:79:59:38:54:36:AF:F6
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019681A28F7D74EFA27C0012CAF85FAE6FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 01AB
Signing time: Tue 29 Apr 2025 13:00:36 +0000
Manifest this update: Tue 29 Apr 2025 13:00:36 +0000
Manifest next update: Wed 30 Apr 2025 13:00:36 +0000
Files and hashes: 1: jOZUYryfotd3VTVGeBf6KTjWoz0.roa (hash: JyJSKW3JZ65ZSPqlG2CxfcAq5uNzQ++VbUTzOkT80MI=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: RiwejWIF/ZdXzlWtQcD5coEnvdIyqaETW8t6zxyCuXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:a2:8f:7d:74:ef:a2:7c:00:12:ca:f8:5f:ae:6f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Apr 29 13:00:36 2025 GMT
Not After : Apr 30 13:00:36 2025 GMT
Subject: CN=fb49557c47baa7edf1b8e44d2f7959385436aff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:78:9d:2f:dc:5a:a9:4c:e9:69:25:c3:4d:
73:62:71:1e:6d:dc:d5:a9:b9:88:3c:f0:b9:8c:19:
54:75:ec:f7:17:cf:d1:ad:28:c1:23:e5:f0:ff:43:
29:34:23:ba:6e:7b:6e:5a:69:7d:7c:84:bc:6f:5b:
b8:6c:c3:89:04:c8:a6:f7:d1:3a:38:60:37:61:51:
3d:d7:40:74:d4:43:b6:a2:fa:4d:33:64:39:8d:32:
90:53:60:cb:26:5d:d4:7a:a7:78:00:75:36:74:86:
9e:70:21:5d:7f:bb:63:28:ab:cd:2e:50:cf:de:3b:
65:14:db:47:02:2a:63:38:f7:3f:04:8e:43:7a:0c:
a4:e8:ff:c7:fd:42:8e:56:3e:fc:7f:d3:03:05:65:
4e:99:2a:3e:a6:18:9d:89:b4:06:0f:1e:2a:b5:5c:
81:50:b1:eb:d6:2a:bf:e0:1b:9e:b4:d6:7e:64:db:
46:8c:59:0b:f1:5e:99:4d:1f:96:5f:d3:81:96:b4:
ce:99:0b:f3:92:8c:62:fc:b3:a4:e7:ea:74:10:bc:
9c:67:1c:82:fc:74:a5:c0:3c:f9:c6:23:a5:68:af:
27:be:87:ed:c1:da:18:3a:29:e9:ef:fe:ef:c7:8a:
0c:2f:d1:fc:ed:14:f3:26:94:98:8e:73:f6:1f:89:
e7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:49:55:7C:47:BA:A7:ED:F1:B8:E4:4D:2F:79:59:38:54:36:AF:F6
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:dd:71:33:66:00:d9:7f:e9:94:f4:18:a5:c6:6d:bf:be:5e:
84:3a:b0:6b:f2:6b:62:9b:cf:e0:cb:f4:db:0c:1c:8b:93:36:
b5:4c:7b:f0:72:8c:0b:26:1a:47:10:fe:02:8c:7b:46:5f:86:
8f:31:87:26:df:41:28:26:38:f9:61:55:9f:ef:a1:70:24:3b:
6a:b9:6d:25:3c:69:2b:ce:2d:af:ac:a0:29:c7:c2:1d:c5:21:
e5:2e:c1:5f:b6:2f:d5:8c:73:7b:7a:97:3e:b8:ce:6b:07:95:
96:96:88:9c:d8:2c:44:96:32:ec:be:28:0c:9f:d0:56:a3:46:
3d:f3:86:4f:44:f0:3c:79:ec:a6:64:3d:d3:fc:53:c8:52:2d:
88:2b:57:3e:5b:42:9f:89:51:8e:78:36:42:09:b9:87:14:22:
ae:92:40:aa:18:63:8d:7b:fb:8e:06:18:54:83:4b:ef:00:2b:
9e:60:a1:af:9b:22:1f:a9:5b:9e:b2:c6:1f:2c:f8:fd:3b:37:
1b:b8:1f:66:30:65:e6:34:cb:02:da:e0:1e:63:1f:b7:02:91:
37:18:6a:39:b8:a2:d8:9d:28:01:09:36:29:15:76:68:88:aa:
17:a5:be:47:1f:a9:fd:31:72:e4:1d:60:77:d3:69:48:05:bb:
5d:79:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:26:34 2025 by rpki-client