Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: 8wJ2KoSEr91XTtJTkjxOLDSTZddiAVAafeJfDdWx7u8=
Subject key identifier: 35:B0:7F:DD:99:D2:4F:07:3F:D8:D0:68:7B:A4:EF:28:7A:66:5E:38
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 019677FB6C17E58810F9F229B6F5D74704AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 11CD
Signing time: Sun 27 Apr 2025 16:01:27 +0000
Manifest this update: Sun 27 Apr 2025 16:01:27 +0000
Manifest next update: Mon 28 Apr 2025 16:01:27 +0000
Files and hashes: 1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: MX7asWiXApw1Euf0+HuIr403AkBDWvhYxG0BWZVeIeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:6c:17:e5:88:10:f9:f2:29:b6:f5:d7:47:04:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Apr 27 16:01:27 2025 GMT
Not After : Apr 28 16:01:27 2025 GMT
Subject: CN=35b07fdd99d24f073fd8d0687ba4ef287a665e38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:f4:98:32:51:71:8b:c1:ba:5f:ce:0a:aa:
6b:bb:53:78:3a:27:19:eb:cf:f7:f3:23:ce:30:93:
90:cb:fa:93:81:02:a1:e9:c5:9c:fe:a9:23:92:86:
f3:0d:4a:14:81:f1:02:26:45:b5:fe:60:9b:3f:72:
55:a1:f8:20:3c:cb:13:f1:8b:c8:25:0b:6c:19:8f:
ea:f1:cc:2f:de:ba:96:a9:47:c1:d6:0e:ee:81:b7:
e6:27:fa:53:4a:6f:e7:27:c8:2b:e1:d9:e7:08:02:
45:5e:96:7e:e7:16:44:80:37:6c:b7:35:8f:37:96:
58:bf:96:47:15:49:4e:36:38:24:65:76:e1:5c:22:
d8:d6:4d:3f:74:07:29:a3:7f:b0:d7:78:82:7d:83:
db:93:f3:41:35:c6:fd:64:ce:00:26:b8:ce:df:f4:
cd:e5:e1:54:71:e1:df:a6:42:e8:df:64:19:9c:77:
e1:ae:3b:4e:d2:2a:93:cd:d3:2e:b3:ff:82:e2:9f:
c0:39:04:97:a7:34:e2:8b:c0:e6:68:90:b6:53:84:
dc:85:0c:20:45:d3:ea:7b:98:6e:64:94:18:51:d5:
94:fc:75:00:63:a6:52:73:69:b4:76:e5:7e:13:d5:
b5:03:30:e9:2e:f8:16:dc:a2:9e:80:9f:7a:4d:2c:
d8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B0:7F:DD:99:D2:4F:07:3F:D8:D0:68:7B:A4:EF:28:7A:66:5E:38
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:cf:92:67:11:b7:08:4c:ac:01:70:88:75:ef:a3:f2:0d:ec:
1a:01:3e:31:f2:b1:5d:39:f1:25:06:1a:5f:e3:6b:70:cf:21:
de:97:ae:7b:e7:8d:47:4c:68:e4:b0:6f:dc:ba:27:87:2d:9c:
a1:bb:4e:bc:cb:fc:4e:37:cc:50:07:31:bd:1b:9b:18:6f:5f:
26:ab:72:e0:c8:0e:e8:7b:ed:3f:9f:f7:c7:e5:84:92:da:17:
da:2c:ac:ae:82:58:03:b4:ac:a0:47:f5:bc:56:0e:09:d8:c3:
5a:bc:6a:b8:e8:9b:f7:83:46:0e:c1:53:bf:92:30:44:cc:66:
7b:32:26:92:02:40:40:e5:07:84:c0:8c:d6:86:d1:51:cc:d6:
2c:09:00:a5:84:9d:16:cd:b1:ed:6d:f7:d5:eb:b6:b4:5c:ab:
d4:c7:36:2b:ef:9e:96:c6:09:4a:76:31:d7:55:e1:b1:21:de:
fb:a2:fd:d8:27:e2:cf:78:52:58:bc:40:6e:c1:49:68:ce:63:
a1:13:4b:8a:b5:af:84:09:7f:88:98:10:57:72:24:de:d7:6f:
2e:6b:94:50:18:7f:20:6c:6b:6f:71:ea:0d:17:9c:e1:74:86:
da:fa:c3:60:d4:00:ae:5f:01:a9:ae:20:38:5e:73:44:46:e3:
2e:46:ac:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:47:00 2025 by rpki-client