Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
File: kJgVO94ONFhLrJH6GGjX7yTWi88.mft (raw, json)
Hash identifier: /d1UBpM6YD8fjLwUQo7YalDvVOB6SmnyVR1OEDb+zaI=
Subject key identifier: 55:DB:B0:65:60:F8:5E:6C:04:5A:71:28:7E:32:54:59:8E:8B:6E:54
Authority key identifier: 90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
Certificate issuer: /CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Certificate serial: 01967F0F2E0AEC008774215E591A5CC9F91F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
Manifest number: 120A
Signing time: Tue 29 Apr 2025 01:00:23 +0000
Manifest this update: Tue 29 Apr 2025 01:00:23 +0000
Manifest next update: Wed 30 Apr 2025 01:00:23 +0000
Files and hashes: 1: eb5BeKaiz_AtECO-Tt6qY8ygMAQ.roa (hash: KHNrh7WH41ssOQgJhQOj9DmxhM8Vb3gfkSMyllLGJMQ=)
2: kGuaXeFXRy7zk4r_fksHu1gERzY.roa (hash: eMXSEjP4L4hwARJ1cK2WpXviS5zDUtCbinSWtpWSvYQ=)
3: kJgVO94ONFhLrJH6GGjX7yTWi88.crl (hash: fV+VTf0EP7druFP2Mz5PRXXXAxN6wVO1lWx9MjI/V/A=)
4: vvhvE6BMZMFQ1G4AEbYHHR_JKn4.roa (hash: kxXe/kCsq1l7fHe6/tvS8feYMvtFQTY38JduUQRo50I=)
5: x_9yjr6rLqSNbiZnjmWq-mNvOgg.roa (hash: mAB0u4tnNy3pI1HtMQoSvS+geYvks2ItYBoen25rRrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:2e:0a:ec:00:87:74:21:5e:59:1a:5c:c9:f9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9098153bde0e34584bac91fa1868d7ef24d68bcf
Validity
Not Before: Apr 29 01:00:23 2025 GMT
Not After : Apr 30 01:00:23 2025 GMT
Subject: CN=55dbb06560f85e6c045a71287e3254598e8b6e54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:46:d5:c8:2c:fd:4b:0f:22:8b:c0:00:35:ea:
60:ba:2d:b1:89:7f:3c:46:10:34:5a:41:29:17:33:
83:91:5e:8f:86:1c:68:a0:4e:bc:97:c9:d6:7d:f5:
de:6d:1e:bf:bf:e7:cf:9b:23:86:37:bc:bb:41:a6:
6c:ad:d9:9e:ce:cd:c2:38:3d:54:b6:34:f1:bd:1a:
bd:a1:f6:19:19:1f:c2:b8:cd:2a:5a:5b:9d:75:6d:
29:eb:ad:9d:38:b8:dd:f7:42:a7:b5:f0:49:3d:d1:
fe:56:4e:c4:e9:ce:cf:21:aa:35:3a:8a:1c:d2:c4:
48:2e:b3:53:7b:a8:a9:92:18:09:7f:78:2d:6d:17:
94:55:e1:c8:e4:89:ca:e0:ae:cc:17:7c:da:c5:b2:
4a:7b:6e:ae:f3:ae:38:d9:7c:e6:a9:72:fb:47:bd:
32:2f:77:07:84:1f:b8:c8:30:ef:b3:bb:63:fb:a6:
62:87:d1:40:3e:66:bb:5e:84:11:d1:1f:18:e0:63:
e1:14:b6:b9:c2:c2:6e:19:fb:a2:5d:af:94:fc:8c:
cf:96:1c:3a:2b:3b:b9:1b:a1:b5:da:26:f9:c5:3a:
99:99:50:f4:96:27:c0:37:60:32:20:cf:4c:ed:b1:
53:2d:ee:99:18:54:e3:1e:df:26:be:26:50:32:72:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:DB:B0:65:60:F8:5E:6C:04:5A:71:28:7E:32:54:59:8E:8B:6E:54
X509v3 Authority Key Identifier:
keyid:90:98:15:3B:DE:0E:34:58:4B:AC:91:FA:18:68:D7:EF:24:D6:8B:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJgVO94ONFhLrJH6GGjX7yTWi88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ba9003-d433-4095-84b7-2f933d9896e0/1/kJgVO94ONFhLrJH6GGjX7yTWi88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:be:ee:05:17:1e:a8:3c:c8:8c:0a:59:4e:d1:e0:8a:7e:b7:
f2:a6:49:c8:a2:23:98:8d:ad:0b:19:f1:74:3d:35:17:39:2b:
91:b6:22:7f:e5:6e:e9:2e:20:ff:4f:62:ea:8e:a0:d9:59:31:
9e:38:5d:00:19:cb:95:02:df:06:cd:52:27:84:67:7f:09:2e:
48:6d:10:1f:99:df:1a:e4:dc:d7:58:6a:c5:ab:28:18:24:14:
89:f2:31:d1:39:01:f2:ac:bf:6d:2d:67:8f:21:17:bd:59:d7:
61:96:ee:73:67:b9:78:37:f4:e7:b3:fe:36:86:bd:b1:6c:84:
a2:75:22:1b:52:fb:84:a0:a5:b0:71:e0:b3:a1:3c:11:e5:10:
a8:23:6a:87:1a:4e:1b:e2:34:0f:23:91:0d:21:d4:8b:da:e9:
2d:c1:27:2c:82:90:a4:7d:d6:ba:9e:4a:72:13:62:41:dd:81:
73:14:b6:e8:d0:3d:3b:52:94:3a:b3:36:c8:bc:a6:c1:66:8c:
30:97:61:86:8f:5b:bf:db:65:52:6e:ff:3b:f9:5e:7e:c4:63:
87:34:4f:bf:e0:ae:4d:a7:ff:4d:da:fa:55:9b:67:2a:9b:cf:
ec:fe:96:32:c5:b0:e3:05:68:4b:c5:fb:1b:5d:87:e8:92:10:
4d:e7:d7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:29:30 2025 by rpki-client