Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
File: kRbcv3jGLVHakHag0Gra027jt1U.mft (raw, json)
Hash identifier: GIypVg4l88Lmv52xRGRmx74zuZEP8sX+UVlq0Cr8BGo=
Subject key identifier: 3A:80:A4:34:73:52:DC:A3:42:1D:3F:9D:D2:DA:47:B6:0B:10:A6:1A
Authority key identifier: 91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
Certificate issuer: /CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Certificate serial: 019683C789AE3AF9FC9CD9646DF2172BDB6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
Manifest number: 1516
Signing time: Tue 29 Apr 2025 23:00:14 +0000
Manifest this update: Tue 29 Apr 2025 23:00:14 +0000
Manifest next update: Wed 30 Apr 2025 23:00:14 +0000
Files and hashes: 1: DNiv8WMGcPKANx-uQmW-sx5fNXI.roa (hash: Lj5hqHXoRMsEWF++FwaU7YyRf1SOoK6ggthX5YqRKwg=)
2: kRbcv3jGLVHakHag0Gra027jt1U.crl (hash: EWvwdROJwJlExW+QTGreBjP/7kdcaJnZZsl6XXtYFxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:c7:89:ae:3a:f9:fc:9c:d9:64:6d:f2:17:2b:db:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9116dcbf78c62d51da9076a0d06adad36ee3b755
Validity
Not Before: Apr 29 23:00:14 2025 GMT
Not After : Apr 30 23:00:14 2025 GMT
Subject: CN=3a80a4347352dca3421d3f9dd2da47b60b10a61a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:4a:02:5e:6f:3d:9f:ce:c9:76:a6:0f:73:d7:
2f:2d:2b:d6:d8:86:87:ee:d2:f7:b9:d9:bb:26:46:
47:b5:c4:ec:40:d9:a3:b7:38:e7:99:5d:dc:b2:9f:
14:93:5f:56:d5:52:9f:12:ad:83:47:7a:c8:dd:04:
fb:73:53:d8:98:9b:86:61:9e:0b:bc:82:4c:67:31:
9f:0a:76:43:d5:1f:2f:77:c1:f4:10:2d:fb:1e:c7:
59:0a:17:02:02:49:85:fc:3e:95:87:8e:4e:16:98:
47:64:2c:c6:a0:82:03:f4:5d:10:d2:59:14:71:4a:
43:6a:b2:72:96:16:c8:d9:e7:0e:a0:72:d1:4b:35:
63:ad:73:fd:06:3b:3a:7d:22:21:33:13:4a:ee:45:
af:ca:1d:1d:6d:c1:ca:20:cc:b4:e0:bc:37:25:32:
0c:1c:a6:dc:51:b9:a7:0a:af:64:6d:b0:31:5a:4b:
2d:30:78:c7:36:0e:57:a3:f9:33:b9:c1:68:93:7d:
62:02:cf:cc:94:ef:ee:47:44:ba:ed:e1:cc:09:8f:
bb:97:0d:aa:d4:62:43:a5:dc:7c:26:03:fe:99:a4:
0f:19:61:81:38:a0:18:b2:cf:96:11:99:74:9d:fa:
9f:9c:85:79:3c:7d:b2:93:bf:44:bf:18:23:7a:e2:
e6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:A4:34:73:52:DC:A3:42:1D:3F:9D:D2:DA:47:B6:0B:10:A6:1A
X509v3 Authority Key Identifier:
keyid:91:16:DC:BF:78:C6:2D:51:DA:90:76:A0:D0:6A:DA:D3:6E:E3:B7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRbcv3jGLVHakHag0Gra027jt1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12f5d1-e760-4101-af25-7fc49da53d13/1/kRbcv3jGLVHakHag0Gra027jt1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ad:17:cd:b9:a4:0b:62:14:73:df:9c:eb:57:62:e1:89:97:
3a:bc:1a:04:99:2e:23:cb:da:e1:19:67:e8:e8:8f:98:d3:e9:
a2:fb:6c:47:ad:73:55:53:97:8d:65:14:86:f2:5b:6c:a8:c0:
85:92:50:0c:ef:04:bd:bd:26:5c:41:4c:be:b4:26:3d:df:03:
4c:c5:b1:e9:a5:aa:40:36:4d:7c:b1:1e:54:49:a9:ac:65:a2:
6c:f1:de:3f:92:5c:4b:92:21:b6:5f:47:0e:6f:7b:c8:c8:d7:
7c:2c:4a:f0:e9:78:2a:9c:cb:aa:4c:34:56:d1:5b:bd:2a:cd:
1e:99:5b:75:ca:62:9d:05:49:cb:6b:a5:c1:5c:81:cf:b0:d2:
eb:27:c3:74:1f:c5:ca:71:4e:00:9a:cd:8a:01:d8:40:ed:b0:
32:fb:96:b4:f5:55:ad:07:51:ac:2e:8e:f6:c2:11:d6:b9:96:
8a:8f:2c:05:a1:01:b0:cc:65:c1:ff:d0:c3:3b:b8:c5:d5:13:
bc:0f:f9:3e:53:52:10:17:93:60:a8:92:14:7e:1a:2c:fa:ec:
3a:95:02:9a:1b:c6:57:07:a2:0c:52:1f:7e:91:ec:93:cd:86:
5f:a6:36:48:d0:e8:bd:08:24:37:c9:f4:8a:1e:e2:09:44:0f:
03:3a:6e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:03:19 2025 by rpki-client