Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
File: KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft (raw, json)
Hash identifier: FMK1ltf8zRpmoPoIdsuKtDtbYkkEphoC8g4dM6Xyui8=
Subject key identifier: 69:2D:0D:07:FB:01:59:9D:35:D5:2F:09:C5:62:FF:7F:33:B8:E5:5F
Authority key identifier: 29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
Certificate issuer: /CN=2901d76431c6e873d3c44730571e1e50d602057c
Certificate serial: 01967F4665786C4AF4650DD4B8574BC6AF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
Manifest number: 1123
Signing time: Tue 29 Apr 2025 02:00:41 +0000
Manifest this update: Tue 29 Apr 2025 02:00:41 +0000
Manifest next update: Wed 30 Apr 2025 02:00:41 +0000
Files and hashes: 1: JePrT9N5p_vpcuN2wLJvV6n4f0o.roa (hash: ec+cmY8FX0sUxq4KIX8YI3T2SVi2Yc81u8O7CEJnLdo=)
2: KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl (hash: BaFU63Pyuw9YkppdZU26Q0qozhSNUDnsB/0sjM5DmZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:65:78:6c:4a:f4:65:0d:d4:b8:57:4b:c6:af:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2901d76431c6e873d3c44730571e1e50d602057c
Validity
Not Before: Apr 29 02:00:41 2025 GMT
Not After : Apr 30 02:00:41 2025 GMT
Subject: CN=692d0d07fb01599d35d52f09c562ff7f33b8e55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dd:6b:78:4e:a9:9b:9f:c4:8b:f2:f2:7b:75:
57:e0:6d:67:53:53:6b:ec:87:8f:3f:20:75:4b:be:
4b:f2:8d:b8:dc:35:6e:42:c5:92:63:08:9d:b7:27:
19:e9:5a:7a:17:fb:2e:f3:10:76:a7:df:f4:4e:38:
f8:98:12:50:b9:f1:98:2e:6c:91:87:e0:f2:8f:04:
d1:de:fe:0f:7c:68:89:3f:fb:95:6a:31:b7:90:a5:
a5:37:b4:56:0b:b2:58:93:91:ee:75:50:9b:de:90:
12:52:93:15:30:7c:0c:b8:28:ed:ba:dc:21:fc:57:
ef:81:8f:a0:e3:f4:99:1d:95:c3:22:cd:01:27:09:
5d:ee:05:f2:47:08:13:5a:52:39:c1:f7:a1:35:e6:
fe:bc:65:6d:f2:e5:76:56:36:f1:f2:3c:a8:61:c2:
d8:b4:0d:90:0f:a3:5f:a1:63:83:18:0b:f1:57:70:
30:a1:a4:22:0e:6b:1a:76:d3:37:fa:da:87:54:96:
21:8f:cf:90:03:12:72:7d:20:fc:c1:c8:34:09:49:
4b:d3:6d:5e:cd:0d:bf:0e:c3:c3:da:ad:a8:77:8d:
25:e1:2e:99:f0:0f:bf:5a:3c:da:6f:38:27:b1:5b:
9d:40:9a:85:0a:3f:c4:53:37:f7:a2:62:f4:00:8c:
39:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:2D:0D:07:FB:01:59:9D:35:D5:2F:09:C5:62:FF:7F:33:B8:E5:5F
X509v3 Authority Key Identifier:
keyid:29:01:D7:64:31:C6:E8:73:D3:C4:47:30:57:1E:1E:50:D6:02:05:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQHXZDHG6HPTxEcwVx4eUNYCBXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/05c3a1-c8fe-40ff-9c52-3e6f0324410a/1/KQHXZDHG6HPTxEcwVx4eUNYCBXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:dc:26:d8:d4:64:f1:1b:41:80:32:10:86:45:a8:a4:26:3c:
a9:84:fa:63:df:a8:9d:df:a3:8e:04:3a:d8:58:44:bb:21:fb:
f9:18:ea:74:88:f7:12:e8:89:90:73:cd:5f:ea:5f:59:45:76:
14:64:10:3c:ba:a1:15:20:7c:a1:9f:10:66:e6:11:37:f2:30:
3f:3c:6e:a7:bc:e8:c3:2b:f0:da:59:bc:7f:be:e4:95:26:bc:
49:bf:1e:30:53:ff:98:49:5c:3e:c4:a8:87:49:96:b3:23:07:
a6:e0:ed:18:67:4e:08:b8:52:73:22:47:df:e2:79:6c:1e:b8:
a0:bd:57:bd:c2:6b:c5:54:ea:97:56:21:56:d7:b2:92:11:6d:
c0:62:41:ef:da:cc:7c:9b:c4:2f:40:3d:0a:60:6b:19:95:d1:
c5:5f:45:96:04:4d:78:80:ef:f6:d5:6a:65:df:8b:fb:10:e3:
33:20:c0:62:c3:f6:20:51:8c:63:0c:9f:15:89:ce:08:21:fb:
79:d1:09:3e:d7:db:75:cf:77:d0:f6:8a:d3:02:a5:aa:26:1f:
3f:56:21:32:83:22:a5:72:d8:f7:88:9f:46:69:62:b7:a8:c2:
2e:e3:1f:6f:8f:30:ea:a3:a4:2d:fb:10:7d:0b:b7:b2:67:f8:
2f:8a:06:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:54:43 2025 by rpki-client