Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: IqtqYtwUpcrFKwHb8SvU6gsRpwzKdsfALFppIceGb60=
Subject key identifier: EB:A7:31:92:FF:42:1D:C3:3E:FD:8F:44:00:62:06:9F:61:6B:D0:0F
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 019678686CC3CEE0B3FEC078FA3084F82A23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 08BC
Signing time: Sun 27 Apr 2025 18:00:31 +0000
Manifest this update: Sun 27 Apr 2025 18:00:31 +0000
Manifest next update: Mon 28 Apr 2025 18:00:31 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: 9+JlLkEG9aflLn9VbqOHVcZal6PQ6rbJqUgAgycM1I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:6c:c3:ce:e0:b3:fe:c0:78:fa:30:84:f8:2a:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Apr 27 18:00:31 2025 GMT
Not After : Apr 28 18:00:31 2025 GMT
Subject: CN=eba73192ff421dc33efd8f440062069f616bd00f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ad:9b:c5:42:5e:94:32:6c:bc:dd:46:d0:d8:
9d:12:04:86:bb:36:2d:1b:97:d9:36:ff:9a:e8:0d:
c1:a0:bf:30:2e:ef:e2:05:8a:8c:0d:79:15:1e:e7:
a9:e8:85:67:02:1b:b1:3f:aa:f1:a5:92:c9:7d:8d:
12:07:95:10:df:5e:b5:ec:ff:ed:63:15:a3:10:ef:
0b:36:40:3d:ce:67:92:22:02:e8:72:14:b6:13:af:
6e:43:5f:5d:71:8f:d4:bc:77:11:8a:93:5b:d1:12:
d6:47:05:dd:58:d7:c1:9e:f5:2b:0d:3d:f3:c2:80:
a8:95:a8:a2:d7:ac:6a:cf:4f:22:d1:b8:54:4c:aa:
75:c6:55:b5:11:88:c3:0c:12:20:3b:ba:94:9d:d6:
25:bb:fd:87:1f:09:16:86:52:20:75:9f:79:94:90:
74:9b:bf:d9:7f:a8:53:6c:8b:c1:f6:01:81:30:d5:
18:40:8b:b1:22:44:b7:3e:c1:39:55:f6:16:0c:ce:
41:ac:85:62:f9:9f:b0:ea:a3:a6:33:30:5c:12:47:
25:f4:c3:08:07:8a:de:f2:1a:3d:d1:81:49:82:88:
98:86:30:39:9e:96:54:d3:3c:83:d3:3c:9f:11:f4:
57:d9:3a:a4:00:f6:bc:2e:0d:49:05:d2:c3:24:c0:
bc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A7:31:92:FF:42:1D:C3:3E:FD:8F:44:00:62:06:9F:61:6B:D0:0F
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1c:ff:6c:1f:55:4e:6d:25:ce:87:6d:84:16:11:ae:df:e5:
54:8a:36:bf:9a:f7:91:e2:c2:45:70:59:e8:ce:04:12:7d:15:
6d:95:f5:6f:56:a9:0d:23:ee:4c:5b:70:70:27:02:25:91:bb:
22:64:94:0d:e3:c8:9c:f6:db:5d:f2:ff:fa:48:bb:51:c4:ab:
be:77:a2:45:77:48:68:41:e2:d9:49:c7:75:c7:0c:56:cb:73:
3e:93:04:2e:f9:ae:5d:05:8e:be:a3:e4:3c:de:e3:98:c6:73:
9d:05:9c:c3:84:fd:f8:b3:23:80:63:47:e4:3e:11:58:61:6f:
c6:de:92:df:41:3b:c2:ea:c4:44:38:8b:1e:7e:c8:87:04:43:
44:17:8f:1b:4f:39:c6:4a:ed:eb:fc:11:d8:7c:24:7d:71:1f:
ca:4c:cb:aa:c5:d3:63:6b:90:ba:e1:23:aa:6e:fa:7a:00:a8:
c7:17:5d:07:4f:cc:a2:2d:42:6c:ab:92:f4:bf:ec:b2:c6:14:
91:85:c6:48:d5:38:f2:56:ea:4f:a4:a4:c1:1e:e0:a9:55:ea:
ba:85:4b:bf:87:14:56:ee:cc:8c:13:f9:d0:23:0a:26:38:c1:
af:9c:39:ff:90:2f:cc:9b:8a:a7:8f:67:f4:ab:7c:de:77:af:
d0:6a:f4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:11:09 2025 by rpki-client