Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: yvnwm6UBA2w2/FPpGIpFQkpfLd/T0DbnlyxrzuXMiwM=
Subject key identifier: FA:26:40:3E:DE:A9:2A:ED:52:52:18:13:23:D9:56:DA:CC:29:1C:53
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0196771EB135A32A5CEA44BC1961B556434A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 03D8
Signing time: Sun 27 Apr 2025 12:00:22 +0000
Manifest this update: Sun 27 Apr 2025 12:00:22 +0000
Manifest next update: Mon 28 Apr 2025 12:00:22 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: lt4AmnpbmIbFvKuBmw7MHtI30NzpmG1OC2Gwu0TJD1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:b1:35:a3:2a:5c:ea:44:bc:19:61:b5:56:43:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Apr 27 12:00:22 2025 GMT
Not After : Apr 28 12:00:22 2025 GMT
Subject: CN=fa26403edea92aed5252181323d956dacc291c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2e:df:28:53:13:88:0b:70:e4:a5:b5:d4:b1:
81:19:05:a9:34:24:df:65:f6:d4:57:ae:79:a0:3b:
9d:78:fe:c2:53:96:89:de:8b:8f:b7:5b:f6:77:d3:
ce:da:44:61:43:e9:43:76:cf:4f:52:83:95:1b:ef:
30:90:02:da:0e:94:b7:f3:c1:f8:bf:81:02:f9:5e:
d6:3d:6c:97:9c:fe:41:dc:74:06:5e:23:ba:ef:d2:
42:06:b7:c7:ec:c9:0a:ef:82:38:4e:cf:0e:5d:10:
6d:3e:a0:aa:a9:15:fa:f9:60:5e:89:4c:a7:f0:82:
77:52:b1:44:95:93:35:55:5d:4a:95:57:65:1e:00:
d7:9f:a3:59:1f:8d:7b:73:49:df:37:4a:90:52:77:
31:31:c0:a5:76:ef:53:f7:12:99:d0:68:10:d8:01:
ec:bd:47:ed:51:1b:f1:ee:24:79:49:8a:57:0f:83:
80:f7:ec:e7:72:f6:6c:82:3e:00:41:25:32:21:2d:
5d:61:ee:8f:b0:0f:4c:ed:79:53:c4:5d:37:d1:f5:
2f:9a:87:2d:d3:0a:58:d8:1b:74:07:18:8d:5c:56:
73:34:6f:9c:bf:88:70:0f:1c:d5:e5:b6:55:53:c0:
9c:dd:e3:e7:ba:4a:c7:94:1d:a1:ec:f2:22:49:a8:
38:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:26:40:3E:DE:A9:2A:ED:52:52:18:13:23:D9:56:DA:CC:29:1C:53
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a5:e6:6c:0a:d6:52:0a:f0:52:a4:b4:d2:0b:de:45:c1:17:
46:e8:30:4d:21:bd:45:ae:54:2f:3e:77:7d:c6:2b:9d:7c:ce:
57:aa:21:ff:21:0c:01:c6:34:0a:88:19:a4:1c:87:7f:ff:ae:
f0:de:38:e8:d8:56:49:10:4f:d8:99:fa:54:06:8d:15:4a:9c:
2b:8e:74:98:6d:64:18:b0:d8:df:9a:9f:06:38:86:91:9f:a1:
b9:fa:77:50:73:77:c6:a1:36:9b:b6:ae:4a:2c:c3:6f:eb:06:
e5:a3:56:0a:40:4a:f5:96:c1:ad:cf:71:a2:b9:e1:3e:51:bc:
70:60:d2:b5:8e:40:66:2b:68:8c:c2:e6:26:61:3f:ad:21:3d:
e5:48:92:57:a3:11:8e:f2:47:30:b9:c3:d0:45:97:ba:58:01:
f3:67:1e:24:e2:7c:94:ca:53:36:c6:bc:a5:72:43:2f:a6:65:
09:c2:bf:19:4a:4a:f5:15:fd:67:8a:9b:fb:55:13:c3:31:06:
76:88:4a:0b:28:62:a4:cf:4b:d8:ca:08:6c:01:de:9a:4d:b9:
01:b9:24:7a:c2:d1:b1:bb:e9:b3:d8:69:9b:fc:b4:c5:eb:c0:
fe:0c:71:71:7a:39:97:d1:6a:36:45:19:3e:de:73:9a:c8:ea:
8c:59:81:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:30:25 2025 by rpki-client