Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: kf7IFWsprqXkDo3efaKl6pATb9WH8M2TKs7oWTyHaoY=
Subject key identifier: 99:6F:37:3D:B6:3E:9E:E2:B4:06:6D:7D:7C:B4:3A:7D:8E:F6:FD:A6
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 01968F5DDD85C4926FDFE74C2B2A56D4D9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 074D
Signing time: Fri 02 May 2025 05:00:15 +0000
Manifest this update: Fri 02 May 2025 05:00:15 +0000
Manifest next update: Sat 03 May 2025 05:00:15 +0000
Files and hashes: 1: I1YCEfbbjRZSc_xIUFyDblYriwE.roa (hash: eOZKe0lo11jreas9XGaAS+8tYDTXuTVMymwF1+Z+Yug=)
2: hWSKcMqeZaW4Zv4jBiknXOuGsW8.roa (hash: 2qZdD5hbe6sIKnLdKsWHsV9kY8NKZnUdaQZKVQK/Jyo=)
3: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: /v+PaZpme4++ABmghCtrOGikU/oUKY00igPWVxJlgBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5d:dd:85:c4:92:6f:df:e7:4c:2b:2a:56:d4:d9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: May 2 05:00:15 2025 GMT
Not After : May 3 05:00:15 2025 GMT
Subject: CN=996f373db63e9ee2b4066d7d7cb43a7d8ef6fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:66:8d:89:28:5b:2f:49:af:22:61:0b:9d:
78:8d:7f:17:70:92:97:c8:eb:8b:47:d3:b8:74:60:
b5:92:ca:72:4f:0b:ab:5c:f2:16:1b:20:c4:9e:1b:
64:1c:a7:d3:ff:1c:70:28:f4:8b:de:75:73:9f:7e:
1e:4a:09:0b:29:e4:73:dc:cf:83:9f:0f:74:93:35:
33:0e:8b:c3:ed:6d:75:a9:10:0c:58:c6:1a:6b:ee:
96:7e:23:7d:be:66:13:59:7a:ad:80:d4:c0:1d:12:
4d:f4:c2:59:17:16:f8:91:e6:49:9c:80:2d:9c:f4:
31:5a:ca:1a:47:40:4d:04:e4:55:cf:53:5b:35:d7:
be:bd:f0:94:bf:c6:4d:c7:b6:7b:ce:86:9d:2d:0a:
f8:da:01:63:24:ad:8f:fe:3d:38:0e:18:77:e6:08:
cb:05:f6:4c:76:1c:45:8d:38:21:50:7c:09:47:e0:
e6:e8:7e:b7:9d:f9:72:c0:4c:a9:d6:18:df:d3:00:
44:90:de:38:c2:f5:4b:5f:af:d6:7c:ff:a0:8a:3d:
3b:64:f3:4d:d0:fb:90:7b:5d:3d:70:28:f8:77:5d:
57:d3:f5:a9:cf:ce:aa:9e:c0:49:2d:86:0f:dd:77:
91:d2:3e:19:e5:01:b8:d4:1d:49:70:39:69:f4:b4:
b6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6F:37:3D:B6:3E:9E:E2:B4:06:6D:7D:7C:B4:3A:7D:8E:F6:FD:A6
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:74:21:16:20:97:41:2c:04:09:18:7a:e4:5b:6e:c6:8f:be:
f5:a6:b5:b5:e2:04:ec:ba:3b:48:32:e8:9e:92:13:9c:bd:62:
62:c4:2e:aa:37:31:6d:96:4d:0c:dd:4e:d2:27:0e:6a:a1:02:
1f:df:b5:05:f6:70:e7:66:39:1f:94:e8:66:42:b1:55:f6:33:
70:22:74:0f:09:e8:4e:96:78:bf:83:1a:8e:f4:b1:14:bf:39:
ec:12:62:35:28:34:2a:7e:d6:f6:fc:90:2f:00:eb:44:49:a6:
a5:95:76:a6:a7:36:1c:e4:2a:1f:e2:07:07:d4:76:f4:b4:03:
68:ff:5a:0c:d4:ca:2c:34:b4:70:ff:75:a3:e2:bf:13:6c:6b:
d8:42:27:10:ac:01:9c:b2:b6:06:5a:fe:1c:54:de:6c:88:66:
8c:20:fe:b1:d5:12:05:1d:70:45:2d:21:ce:16:ce:d2:5a:2a:
0c:fe:1f:8d:5f:d0:d4:81:31:93:9c:fe:16:17:df:8c:96:ca:
19:8a:5b:55:a2:36:21:ad:0d:25:90:e4:2b:d1:ea:f5:86:78:
2f:33:18:5d:bc:32:56:bf:56:e0:4a:a2:39:c7:ff:aa:6b:5c:
5d:a5:2a:10:f1:6b:88:3d:48:67:32:8d:39:b8:aa:ad:c3:65:
fc:05:06:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 08:01:29 2025 by rpki-client