Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
File: kFLex7dhf-OchVDuIMOCIBq5ryo.mft (raw, json)
Hash identifier: ksCxwMsoLihGo5LRmLdnddKAb+t5wTF08S/6grM4OPU=
Subject key identifier: 89:2C:4B:5A:69:A1:E3:7E:5D:D9:98:66:90:85:E9:F2:F8:5E:9F:7B
Authority key identifier: 90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
Certificate issuer: /CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Certificate serial: 019677C3D9291FDC540C5A656CC9ADD0C514
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
Manifest number: 0F98
Signing time: Sun 27 Apr 2025 15:00:45 +0000
Manifest this update: Sun 27 Apr 2025 15:00:45 +0000
Manifest next update: Mon 28 Apr 2025 15:00:45 +0000
Files and hashes: 1: DoqnptEmFDIWhd5INYDJmXuCj7c.roa (hash: knJh69OYwi71VIfestV+KfQIeq85PlXtAbjPJg+Zm8w=)
2: kFLex7dhf-OchVDuIMOCIBq5ryo.crl (hash: oQK1off3uLl9KUQ60QAXYPvAMD+n5TlkHO+SwoDrnT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:d9:29:1f:dc:54:0c:5a:65:6c:c9:ad:d0:c5:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9052dec7b7617fe39c8550ee20c382201ab9af2a
Validity
Not Before: Apr 27 15:00:45 2025 GMT
Not After : Apr 28 15:00:45 2025 GMT
Subject: CN=892c4b5a69a1e37e5dd998669085e9f2f85e9f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:ca:6b:01:bb:b7:40:4f:11:8a:34:ae:43:
a6:c0:5d:37:08:e7:03:c1:6e:d3:5b:24:5c:8a:78:
a9:81:18:cd:2b:92:38:9d:20:31:46:78:9f:31:46:
da:4b:99:b8:76:a7:64:06:8a:3d:5f:b0:df:ae:c1:
0c:32:cb:31:96:73:c2:36:ba:9c:49:ec:b9:63:d9:
69:2d:83:bd:82:84:16:b2:58:40:85:23:8b:2b:04:
9b:f0:c4:e5:e6:07:08:56:65:4b:49:45:cf:cd:56:
53:e6:b2:7e:3d:9c:a4:b6:a6:15:ee:df:07:0b:f8:
d4:20:7c:74:79:49:a2:bf:36:31:39:e7:b7:4a:09:
42:78:90:e7:8c:52:3b:b5:d7:e2:32:7e:96:b4:84:
f9:6c:f6:83:f1:39:4b:8f:31:2f:53:96:2b:4b:f6:
20:58:cc:c2:55:aa:f7:2d:08:16:15:3c:97:2b:3e:
08:92:b4:b3:79:0e:79:8c:5e:1d:dc:b1:01:3d:ed:
3b:4b:33:58:f2:94:69:2a:60:68:c9:6a:62:72:3f:
13:b4:a4:a4:34:b7:9d:3a:71:fa:88:a8:a9:3a:67:
2d:d1:b8:9e:06:1d:fe:18:a7:d0:90:bb:9f:d5:5c:
ac:b8:18:19:27:bd:d5:de:cd:cd:e8:21:f3:4c:3e:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:2C:4B:5A:69:A1:E3:7E:5D:D9:98:66:90:85:E9:F2:F8:5E:9F:7B
X509v3 Authority Key Identifier:
keyid:90:52:DE:C7:B7:61:7F:E3:9C:85:50:EE:20:C3:82:20:1A:B9:AF:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFLex7dhf-OchVDuIMOCIBq5ryo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e9a7a1-e9fe-47d4-ae32-df0a44800aa5/1/kFLex7dhf-OchVDuIMOCIBq5ryo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:24:f9:b1:7e:3e:e2:28:d2:3d:04:3e:de:ea:3e:61:27:57:
05:6f:68:64:fb:eb:70:39:74:94:67:55:0e:50:a6:86:9f:2c:
40:50:67:07:59:21:7f:56:60:a7:08:56:15:3a:68:8e:9c:8a:
e8:c0:86:2f:a1:f6:77:06:d1:9c:ac:ba:bb:fa:d1:69:25:72:
1d:92:74:63:4a:b6:f0:c2:e5:13:ae:1f:f7:e7:0e:65:c2:b7:
08:be:64:e0:7e:d3:fa:0f:d5:88:a8:a4:d1:33:40:3b:98:c0:
ec:aa:7b:ab:8c:93:80:22:ea:d4:a5:8a:e9:0c:75:54:d6:f3:
96:2e:df:33:a8:2f:1e:b6:08:90:7b:0d:b7:ed:57:bc:53:a2:
4d:66:6e:a4:9e:aa:43:18:3d:3c:8b:33:b4:c3:2b:5c:5a:49:
01:e5:38:d3:8e:b7:c5:96:84:4d:35:eb:5c:83:dd:89:0e:67:
2f:18:b0:a7:80:b7:73:fb:19:b1:f7:b0:3c:07:d8:0f:83:d4:
4e:e7:1e:95:77:94:0d:63:e2:8b:77:c2:3f:9c:69:1f:82:f1:
bc:86:68:b0:88:71:0e:71:75:49:07:e0:de:93:35:8d:c2:47:
eb:d3:be:db:7c:77:22:b7:bd:56:5f:67:4f:c7:10:ce:f0:4b:
e0:7c:d6:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:16:54 2025 by rpki-client