Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: PtBDUJ7r8zdfCeovXkG9UNfpxe2HjXbSskPX39hY6Ik=
Subject key identifier: F3:03:5E:DF:65:D6:F3:EC:A0:CD:44:E8:0D:17:22:7B:1B:5F:40:4B
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 01967454F9AC3C6E6DF055484CDA5695E1C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 150C
Signing time: Sat 26 Apr 2025 23:00:48 +0000
Manifest this update: Sat 26 Apr 2025 23:00:48 +0000
Manifest next update: Sun 27 Apr 2025 23:00:48 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: jPS10tEGlt43Hskw3B5jTN3GAT0eOFMKTNUcTxtcXUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:f9:ac:3c:6e:6d:f0:55:48:4c:da:56:95:e1:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: Apr 26 23:00:48 2025 GMT
Not After : Apr 27 23:00:48 2025 GMT
Subject: CN=f3035edf65d6f3eca0cd44e80d17227b1b5f404b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:30:a8:4d:5a:dc:45:e6:81:3b:cb:c7:14:39:
fb:5c:57:f5:41:e2:c6:e4:96:ed:82:58:31:8e:3c:
03:9d:02:7d:d0:c0:81:36:fe:e1:74:ed:13:9d:1f:
b5:84:c9:f4:5f:6c:cc:a6:1f:c7:3f:01:fa:b7:ab:
be:0a:95:f0:66:63:ab:fa:64:9b:ee:a9:82:fa:51:
fc:99:7a:96:3f:c5:a9:51:69:bf:71:27:fb:c2:60:
a5:2f:78:b4:64:40:81:bb:6f:d7:ec:51:99:bd:1e:
98:3a:f1:c1:0f:fc:48:58:fe:2a:d6:be:dd:67:95:
f7:f2:22:13:99:ae:8e:1a:72:89:ca:ce:42:cb:95:
6d:d5:93:d6:8c:6c:5c:f3:53:e7:c5:54:d8:31:62:
fb:0b:35:85:04:be:7a:4f:1b:37:01:6e:30:a0:a2:
b2:ae:dc:a5:11:26:15:18:87:41:08:ed:4d:44:d7:
9f:37:2c:7e:78:aa:a5:f8:54:b8:ad:75:d0:8e:33:
48:88:d4:8e:41:2e:32:35:b5:f9:8d:e1:cc:d0:d1:
f9:41:e4:15:b8:18:84:a3:b2:59:b1:df:bd:a7:87:
80:c7:d7:93:c5:0b:cb:ea:33:d7:14:ae:c6:1b:17:
1c:5d:d9:c5:cd:83:ad:7d:f0:ab:88:d1:f9:5f:9f:
38:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:03:5E:DF:65:D6:F3:EC:A0:CD:44:E8:0D:17:22:7B:1B:5F:40:4B
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:a3:fb:d0:67:46:dc:6d:3d:00:40:2c:07:a6:13:fa:2f:bd:
aa:98:a2:4a:1e:3f:23:4b:60:bc:5f:5d:d3:6e:d9:c4:7b:48:
1e:ba:e9:11:2b:88:67:e2:ed:db:21:46:a0:b5:2f:99:d8:34:
d6:31:00:cb:89:cc:65:05:8c:d7:ae:9d:88:86:79:fd:82:09:
9c:04:e3:f9:26:f4:75:46:96:e5:bb:33:a0:c2:bb:7a:78:02:
cc:85:de:9b:ef:01:6d:ba:99:fc:09:b6:93:04:62:07:99:5b:
6c:f5:ac:bc:cd:5d:35:8b:70:5d:75:bd:bd:33:7b:0c:33:9a:
e0:31:d7:da:af:1f:07:42:6e:11:ed:ec:f5:02:d5:00:46:bb:
2f:2d:6c:29:28:f2:81:bf:10:76:b0:8d:55:70:5b:3e:54:1f:
6a:91:16:35:73:82:3d:16:73:16:6c:ee:e1:07:5a:2b:b6:f9:
5a:d2:cf:19:09:03:6d:19:2c:08:58:98:68:48:d6:20:4e:c4:
d5:11:be:2f:36:54:5d:cb:12:0a:5f:f4:46:c4:39:67:28:e8:
85:df:e8:2f:e9:a7:3b:64:6c:83:e9:bd:95:75:31:dc:77:eb:
de:b4:24:10:c6:25:a0:a3:70:82:88:d2:55:97:ce:f8:e7:40:
76:bc:89:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:40:10 2025 by rpki-client