Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: Hm8Mbi3kJByLj1N84rNfwuaaVyOUk49HFjM8UfHDMZQ=
Subject key identifier: B8:BF:AA:39:29:E4:50:43:B0:83:51:1B:72:26:04:1B:2C:47:57:DF
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 01967CE9E59732EF89B5A36233FA090686E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 15:00:25 +0000
Manifest this update: Mon 28 Apr 2025 15:00:25 +0000
Manifest next update: Tue 29 Apr 2025 15:00:25 +0000
Files and hashes: 1: 3nqGhkLV9lVUPlFFGoMeuG1mXiA.roa (hash: XcfY9Hmln8PmxUq94JhUMZLnl3Q3LCi2mdpPddFOCD0=)
2: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: O3iFc2At9jTbwLK/U+wQ7r8msTx/w8Hw2ivQpOcN/KY=)
3: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (hash: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:e5:97:32:ef:89:b5:a3:62:33:fa:09:06:86:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: Apr 28 15:00:25 2025 GMT
Not After : Apr 29 15:00:25 2025 GMT
Subject: CN=b8bfaa3929e45043b083511b7226041b2c4757df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:60:f1:fa:58:5a:88:25:3d:1f:1f:30:fa:f6:
cb:18:5b:13:63:3c:70:41:41:64:25:02:81:6d:be:
77:5f:87:1a:94:f2:53:9b:19:11:e9:6c:c3:28:44:
46:80:2b:bf:3b:a3:a3:b8:4d:e5:1d:b4:37:3b:78:
55:e6:80:04:7f:c7:e8:18:1d:72:f4:46:26:bc:90:
f0:7e:31:5e:20:46:8c:7c:88:ef:72:e0:e9:32:1c:
7a:1b:b8:6a:4f:e1:31:16:52:bd:e4:7a:c6:4b:fc:
6f:fc:ab:d3:ec:0b:86:cb:4a:fd:39:01:c8:59:e6:
d5:d9:ab:16:27:13:32:51:d3:ca:76:c3:dd:78:b2:
53:73:99:cf:cf:e8:b4:56:2c:ec:34:30:de:01:65:
c6:80:7b:ae:e2:a0:3a:ac:8b:1e:3f:30:3f:d7:2e:
01:35:b2:d8:78:02:39:fa:ca:fd:21:e9:75:fe:10:
98:53:fe:ab:1e:c9:f1:ae:12:97:53:cd:74:0d:f1:
01:dc:ae:7d:49:e8:99:f6:52:ef:ae:10:e5:2b:38:
1c:06:86:47:27:b3:d6:a8:35:ed:36:17:84:e9:5f:
53:a5:2e:90:19:24:b2:53:c1:1e:8c:90:d3:c6:a2:
46:3f:45:82:8d:7f:16:34:55:c4:8e:20:90:8c:f0:
90:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BF:AA:39:29:E4:50:43:B0:83:51:1B:72:26:04:1B:2C:47:57:DF
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:fa:77:a1:7e:28:af:4f:aa:95:20:03:7a:b7:49:28:e8:
12:91:3c:aa:21:ab:5a:6d:64:59:f2:01:ec:31:d6:71:36:b3:
c9:e0:ce:d2:d6:88:0e:69:25:72:d4:1e:d7:e8:6d:56:cc:ea:
32:06:04:7f:39:e9:86:03:a2:c7:37:6f:5b:72:06:8b:44:fa:
74:f3:2a:cc:66:c5:b8:2c:a8:f4:1e:55:9f:26:f5:59:51:bf:
5b:88:6d:c9:66:b3:44:eb:f9:40:48:f0:5d:ee:9c:b3:92:ff:
98:d9:3c:be:ec:d3:65:dd:9e:d7:fe:7f:98:70:fc:97:9a:a8:
0a:e3:c3:f4:5c:c8:96:b0:b7:c8:6e:a9:88:84:56:0d:31:c5:
14:e4:ab:63:5b:19:e8:93:cc:0a:c7:aa:30:4a:15:d5:ba:1e:
44:73:28:7e:18:c4:c6:ca:17:7b:37:b0:81:f8:8e:b5:78:8b:
70:a7:39:87:9e:5f:69:dc:d2:f4:ae:07:7d:f6:6e:f4:4c:6e:
d7:99:e4:7e:15:41:8d:16:8f:40:4b:cb:00:fd:6a:06:12:94:
5d:14:58:c2:3d:a3:81:9e:9d:f0:e6:06:de:2c:b3:81:ed:69:
30:1d:6c:e5:38:c0:39:bd:dd:91:da:96:ec:04:13:5d:6f:31:
e4:4c:f3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:01:01 2025 by rpki-client