Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
File: kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft (raw, json)
Hash identifier: BXHbZUx7CzaSeTgFmq93ERECShPesGIdb7sEcFwqwZw=
Subject key identifier: 58:E8:D3:06:D5:45:31:31:D9:56:7A:4F:24:09:2B:B5:0B:07:D7:81
Authority key identifier: 91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
Certificate issuer: /CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Certificate serial: 01967CE9E797FDD4B497A57D5781AE54CD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
Manifest number: 1095
Signing time: Mon 28 Apr 2025 15:00:25 +0000
Manifest this update: Mon 28 Apr 2025 15:00:25 +0000
Manifest next update: Tue 29 Apr 2025 15:00:25 +0000
Files and hashes: 1: 7onO-XhdJCc_IRQIQVCJn8u-1wE.roa (hash: sTU2wUb7RHNn6n+c6UyiV4vOHD7amsQkLEZ6q5B98dM=)
2: kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl (hash: k7XNqIo3kmI82Ww1bkFDsbVya7oCethycnB5JcIARYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:e7:97:fd:d4:b4:97:a5:7d:57:81:ae:54:cd:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91cd4c6c1260fc9a7c894bf6abe77a6eecfec06e
Validity
Not Before: Apr 28 15:00:25 2025 GMT
Not After : Apr 29 15:00:25 2025 GMT
Subject: CN=58e8d306d5453131d9567a4f24092bb50b07d781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:20:46:d8:62:e1:e7:8e:32:54:ed:63:79:05:
cc:9e:34:ea:9b:91:ff:70:ce:93:d8:fc:d4:e5:b1:
2e:95:a6:b1:0a:5c:72:26:36:fb:8b:21:6d:fe:90:
f1:1c:1b:2e:c2:b7:05:47:8a:41:54:35:1f:d9:3c:
a4:4d:dc:fe:dd:ed:a5:11:78:a5:76:4c:54:64:26:
99:3c:53:78:1b:5c:70:d7:a5:c4:d3:da:18:57:fa:
a9:e4:01:9e:73:07:fc:71:29:29:40:9c:9f:7a:85:
4f:8a:84:e3:68:0d:f5:48:89:ac:71:9e:f5:73:19:
35:2a:ad:9c:57:ec:a4:7f:cc:15:d6:a9:ce:24:7e:
a3:25:1c:a9:45:fb:8a:d3:7c:9f:47:d5:6b:24:e8:
04:b8:85:68:68:45:cc:48:31:32:8c:9e:6d:93:5a:
53:14:ae:44:b9:73:b6:36:d2:f4:d5:e3:34:8a:29:
3d:5d:cb:bd:78:27:47:cb:b2:e2:06:db:db:a9:de:
5f:60:7b:30:db:9e:bf:a5:bc:09:ab:6b:28:52:bf:
8e:fa:0b:4e:af:e7:8f:b5:d8:3a:bf:2f:f9:df:9f:
cb:96:6a:a7:b3:09:a5:a5:8b:24:fd:cc:50:7c:93:
89:29:5a:6a:86:ee:25:6d:2c:13:d5:ab:60:07:3b:
a9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E8:D3:06:D5:45:31:31:D9:56:7A:4F:24:09:2B:B5:0B:07:D7:81
X509v3 Authority Key Identifier:
keyid:91:CD:4C:6C:12:60:FC:9A:7C:89:4B:F6:AB:E7:7A:6E:EC:FE:C0:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc1MbBJg_Jp8iUv2q-d6buz-wG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/e5b301-0c33-48b4-847b-e98ee2381146/1/kc1MbBJg_Jp8iUv2q-d6buz-wG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:3f:83:8e:3b:37:fd:15:f8:96:0a:8c:79:14:0e:14:1f:38:
54:49:3c:d4:2d:eb:d3:26:d7:0f:6b:67:81:50:8b:51:ab:39:
d4:00:00:95:e6:be:83:17:d6:a4:15:f4:cd:32:e5:e5:0c:34:
34:12:49:d9:8c:d5:7c:c6:cf:29:99:b0:6e:e6:9a:95:cc:1b:
a8:58:70:09:55:23:5c:1a:8a:f8:a0:57:7e:4e:de:d2:d0:dd:
01:79:5f:95:7a:c4:37:82:4b:d7:37:48:14:2b:ad:74:d9:fb:
35:fe:eb:b9:fe:54:80:fd:a6:c5:40:01:75:4c:6a:97:c3:d1:
d9:5e:ab:a7:48:7a:20:1e:69:11:ff:bd:02:c1:4f:4a:e9:b8:
47:a8:4f:10:12:6f:ef:99:0c:1a:34:ba:68:2b:98:31:37:70:
b8:de:63:ec:01:8d:26:ab:b4:52:dd:f9:82:69:7c:af:f8:0d:
7b:5a:63:05:14:a6:f0:c3:01:48:66:2d:59:5a:cb:0c:e2:f1:
4e:25:a6:03:5f:55:b5:ac:50:7a:16:b1:c8:6f:0d:18:ee:cd:
6a:0f:9d:b3:00:4e:02:b1:82:1e:7f:cd:30:6b:4d:80:b2:99:
97:50:88:1c:58:95:6b:82:23:5b:1a:d5:ac:73:7d:17:03:cc:
fe:3e:b7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:37:17 2025 by rpki-client