Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
File: krWsiPLNsUk0gwwawJal73MJjxI.mft (raw, json)
Hash identifier: xmNHE3QgTcWyanasOX8OfIDMfaa5R1+3MOrbP3eG5u4=
Subject key identifier: C5:46:5C:C0:6A:EC:FD:82:6C:DA:FA:D8:33:5F:20:88:42:AD:6A:30
Authority key identifier: 92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
Certificate issuer: /CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Certificate serial: 019677FB080E238E2BB0860C2CE595DE8347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
Manifest number: 1436
Signing time: Sun 27 Apr 2025 16:01:02 +0000
Manifest this update: Sun 27 Apr 2025 16:01:02 +0000
Manifest next update: Mon 28 Apr 2025 16:01:02 +0000
Files and hashes: 1: GCdodDNbb8kK5Nk7F_0-nAXSuto.roa (hash: +rPewf2fSfxIULsaTk1i8u3POGDLVTn+S/ryNeqw1mw=)
2: krWsiPLNsUk0gwwawJal73MJjxI.crl (hash: +FmmB580g6UOE4G3zsCiv4zXCjlfcPnYTsUH2zzbqbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:08:0e:23:8e:2b:b0:86:0c:2c:e5:95:de:83:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b5ac88f2cdb14934830c1ac096a5ef73098f12
Validity
Not Before: Apr 27 16:01:02 2025 GMT
Not After : Apr 28 16:01:02 2025 GMT
Subject: CN=c5465cc06aecfd826cdafad8335f208842ad6a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:33:38:69:c6:c1:fa:6d:05:15:13:a7:33:
27:27:7e:8d:a4:ec:37:00:42:e9:5b:24:ed:d9:52:
12:87:73:65:25:f9:74:f5:f5:21:88:40:06:6a:a1:
0f:41:5c:16:5b:6e:1a:db:e1:92:cd:95:20:24:ee:
8c:10:48:4a:75:bc:5c:0b:55:69:24:9e:47:a3:bb:
bd:5c:63:30:fd:22:99:b2:30:0a:30:06:3a:fb:6a:
e6:98:10:a2:c5:7a:16:79:b0:c2:8e:24:aa:bc:9e:
8f:bb:6e:f2:ab:21:c5:de:f1:25:8d:53:d1:1d:3f:
6b:e4:02:e0:c9:e1:2d:a7:8a:e6:e3:d0:62:1f:38:
1f:73:a4:8a:de:a0:69:da:92:fe:c9:a0:b5:cf:fd:
4d:1e:ce:e9:25:e8:ca:1a:fb:e5:4a:80:cf:cf:b1:
86:80:2b:fd:fb:a9:2a:2f:81:98:6d:34:7e:51:69:
81:e0:7f:d2:3a:c6:fb:1e:62:c1:51:cb:32:6b:39:
6b:15:01:e4:f6:9a:bd:b1:7c:3f:e1:ac:33:86:01:
79:42:30:25:37:16:10:92:38:86:38:c8:56:73:87:
4f:c7:81:11:65:67:81:d2:17:0d:27:7e:58:c3:ff:
34:d3:72:d6:73:4a:43:4f:28:9e:d5:92:36:b4:66:
c1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:46:5C:C0:6A:EC:FD:82:6C:DA:FA:D8:33:5F:20:88:42:AD:6A:30
X509v3 Authority Key Identifier:
keyid:92:B5:AC:88:F2:CD:B1:49:34:83:0C:1A:C0:96:A5:EF:73:09:8F:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krWsiPLNsUk0gwwawJal73MJjxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e417bd-14eb-4ca5-80f7-36c46f90d9a5/1/krWsiPLNsUk0gwwawJal73MJjxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:97:e7:a3:1b:aa:cd:6b:1f:12:7e:40:f7:93:cc:4c:1f:93:
d5:ef:37:49:ad:bd:b3:61:9f:68:77:8d:fc:51:fb:32:bc:c9:
2b:52:9f:d2:a4:69:62:36:57:62:e4:d3:d9:a6:09:b7:11:d4:
44:42:63:51:ed:77:a2:27:34:eb:2c:c2:e6:2a:21:04:80:46:
da:26:05:f5:54:e6:0e:f6:4c:13:dc:33:f4:68:d2:7b:c9:af:
02:49:6d:bf:96:7f:e5:90:e3:e8:6b:c2:a4:d0:63:65:85:18:
9c:e3:a0:7b:1c:cb:57:26:ee:aa:2c:36:e0:6c:e6:c0:7d:aa:
14:c7:98:00:34:ec:7f:c1:4b:c6:31:57:df:d7:be:e0:f5:1a:
b1:a4:6e:df:aa:67:27:bc:b2:67:81:ef:d4:f3:6a:12:ac:bd:
2d:02:e8:75:a0:19:e8:56:f6:ea:0a:cc:67:76:0e:d5:54:70:
76:14:2b:a0:4b:fc:d5:b9:c7:d7:7c:23:54:03:7d:10:a0:df:
1d:b2:be:06:cb:30:af:b0:db:d0:a1:d6:25:1f:00:34:9c:dc:
54:10:6a:19:41:6b:24:ac:1c:74:03:69:81:ed:ad:c6:8b:0d:
4f:78:3d:c9:37:88:ac:ee:9e:6f:43:cc:0d:bb:a6:d2:a9:dc:
47:2b:de:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:37:12 2025 by rpki-client