Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
File: kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft (raw, json)
Hash identifier: MZnhOUo4d8p8IGwtR0i4z2nFZunTN4wV1S1QaDPYjQ0=
Subject key identifier: 81:7F:4D:9F:43:CF:86:A8:61:7D:90:5D:B8:E0:43:24:B5:B1:09:56
Authority key identifier: 91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
Certificate issuer: /CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Certificate serial: 01969115744B0211A2650B9A07AD1C25CE18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
Manifest number: 151A
Signing time: Fri 02 May 2025 13:00:24 +0000
Manifest this update: Fri 02 May 2025 13:00:24 +0000
Manifest next update: Sat 03 May 2025 13:00:24 +0000
Files and hashes: 1: KWOjeTqrWS2bhx1qeVkVPGbzw7c.roa (hash: XUqhrwHbJF26mG4HYcUUQFE+zak+QHQ/0xU36G+fK8E=)
2: kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl (hash: 7f3X3a4xuLlc9YH+wATIaDpHzKbd4WOqS7zmiGADzpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:15:74:4b:02:11:a2:65:0b:9a:07:ad:1c:25:ce:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9194b857c037a7d7cb0575e35823e5e28032bda3
Validity
Not Before: May 2 13:00:24 2025 GMT
Not After : May 3 13:00:24 2025 GMT
Subject: CN=817f4d9f43cf86a8617d905db8e04324b5b10956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:d2:26:3d:31:30:bb:f9:86:0a:85:4d:86:
4d:2f:dd:ba:a7:fa:e7:59:3c:5d:35:7f:1b:66:66:
17:46:ca:f4:fb:5d:6f:8a:6d:d6:a5:d1:9a:6a:53:
b0:c4:74:74:15:30:46:76:e2:6c:54:1f:70:d6:21:
58:dc:fc:d7:9c:21:9a:50:d0:f8:dc:36:b2:7f:b2:
e3:d9:38:b5:78:fa:c1:6b:77:69:90:ac:c6:c7:af:
b9:12:a0:1c:3f:df:1c:0e:1b:07:fe:ee:ef:2f:5c:
cb:3a:18:d9:ca:c7:71:4f:52:8f:d4:e5:6a:90:71:
c9:16:8b:56:c6:b5:cc:01:21:90:38:65:c5:1a:37:
6f:a8:da:94:db:96:e1:59:a0:7c:e8:21:81:3d:43:
11:9b:9c:93:af:32:02:ca:e9:13:29:81:6a:18:c7:
e3:56:bb:22:07:f9:7e:71:cd:22:16:34:2f:21:f6:
18:f7:9d:50:52:a6:02:73:ad:55:84:0d:87:31:94:
6b:1c:c4:f9:83:36:8f:75:d6:4d:72:5e:8f:6a:8c:
96:dd:35:e6:0b:c0:d0:a1:e5:66:bd:bb:d0:59:ea:
e4:c5:82:bd:4e:51:c8:65:43:52:f1:2e:f7:b9:7d:
f2:e5:e8:5d:0d:4b:48:df:33:e5:7f:ce:84:24:cf:
f1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7F:4D:9F:43:CF:86:A8:61:7D:90:5D:B8:E0:43:24:B5:B1:09:56
X509v3 Authority Key Identifier:
keyid:91:94:B8:57:C0:37:A7:D7:CB:05:75:E3:58:23:E5:E2:80:32:BD:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZS4V8A3p9fLBXXjWCPl4oAyvaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/37ac59-8529-4ac9-ba4e-3bf7d77749ab/1/kZS4V8A3p9fLBXXjWCPl4oAyvaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dd:a9:5a:3a:37:f0:ec:cb:fc:66:cc:5e:65:0f:69:cf:28:a4:
ba:22:1e:ff:44:48:74:41:6d:b7:86:af:f2:f7:69:45:d1:5a:
3a:b9:54:d8:d5:32:0a:18:f7:16:63:6e:7a:4c:b2:26:a8:85:
1e:3d:35:65:6e:7f:6a:2f:6b:83:3c:cb:26:83:02:14:4b:0d:
08:6a:56:21:2e:35:28:5a:b7:fe:fe:54:98:69:ea:60:4f:9f:
fb:62:f4:42:7b:b5:99:6c:6c:ee:b3:4d:6b:5e:3b:d2:30:85:
e3:55:68:91:40:b5:2d:78:65:89:86:68:2a:bb:7d:2e:8a:8d:
41:0d:10:bf:22:fc:d0:fa:f2:fc:8b:70:3c:68:a3:01:22:ce:
06:f9:d7:7b:00:be:b6:62:98:6e:fa:c3:dc:43:6f:78:e4:f0:
b4:bd:1b:b8:33:ea:ac:a1:76:cf:76:94:c3:df:64:80:eb:a3:
2c:39:27:68:eb:4e:5f:35:6c:3c:a2:24:03:e8:cc:82:ed:bd:
87:1b:ff:a8:d8:a1:d2:ea:c0:71:58:17:78:af:8d:dc:22:1a:
0f:7b:b7:2c:2c:2f:f2:8d:d1:f9:35:5d:c6:07:6a:86:18:4d:
e8:91:c0:77:b6:24:2d:7f:cc:e6:4a:00:89:03:e1:6f:ee:a2:
ac:11:08:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 20:32:35 2025 by rpki-client