Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: Pn941rvNI9oKGxd1rlhBULh4THw8Cz/ag3zfD4hoFhk=
Subject key identifier: B7:93:C0:7B:EE:7B:86:AA:48:8A:0D:9F:90:20:3C:44:6E:A7:54:2B
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 019672662C62D6A1C92D15D1D0220BACA3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 150E
Signing time: Sat 26 Apr 2025 14:00:20 +0000
Manifest this update: Sat 26 Apr 2025 14:00:20 +0000
Manifest next update: Sun 27 Apr 2025 14:00:20 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: LuH7rGPFoe8sHaOa9z9YtO9EuuNhCwWT8uN+VyNVsIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:2c:62:d6:a1:c9:2d:15:d1:d0:22:0b:ac:a3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: Apr 26 14:00:20 2025 GMT
Not After : Apr 27 14:00:20 2025 GMT
Subject: CN=b793c07bee7b86aa488a0d9f90203c446ea7542b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ff:16:69:9e:78:aa:8c:1d:59:46:33:3f:60:
63:b9:77:47:0e:2f:bf:61:f5:4a:b7:05:b5:95:e0:
fe:6a:2d:d7:3a:3b:18:3c:58:0c:e8:22:40:89:fe:
d4:3a:53:46:55:f5:77:09:72:7a:4e:fe:bf:7e:5a:
33:6a:01:33:b8:4f:3f:d1:75:93:16:f8:fb:52:fb:
8d:5e:b0:9c:b1:1d:3d:89:74:25:1e:f2:4a:a5:71:
e9:30:66:e4:c7:d0:e3:7f:d9:3a:56:d5:2d:8e:d1:
e3:c7:77:2f:50:20:e4:ee:23:a6:53:2f:e9:9b:4f:
43:03:e9:e0:78:30:d1:e4:7a:36:d4:f4:d8:d0:39:
c7:62:c4:6b:86:4c:cf:40:58:ef:88:b0:b8:dd:d7:
10:86:fb:8c:81:ac:ec:4d:b0:9e:7f:53:6b:27:4b:
96:f0:45:ce:08:df:fd:32:0a:f7:cb:68:ac:b0:6e:
81:6c:2d:a1:e7:5d:d7:7a:ae:f2:cd:49:13:95:49:
b4:de:66:1f:8e:db:6b:99:fb:c2:0a:c4:81:64:d2:
0b:d2:f0:9e:ed:65:fd:9e:82:a7:22:10:57:46:7c:
48:99:26:79:3e:dd:b5:bd:6d:59:32:db:9e:35:97:
df:43:23:fe:4b:7b:84:cc:59:f9:64:80:ec:fd:fd:
66:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:93:C0:7B:EE:7B:86:AA:48:8A:0D:9F:90:20:3C:44:6E:A7:54:2B
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:04:0d:a1:cd:21:33:bf:d8:55:a5:fb:9c:53:6d:89:8d:16:
8b:d1:38:25:5d:8c:a4:c6:77:ff:b1:5f:61:71:d1:ae:ee:84:
8a:81:3b:df:cc:b4:b3:54:77:ab:1f:d7:01:09:37:e0:7e:7c:
f0:f6:93:15:68:25:12:8f:2b:2d:cb:b2:5e:43:73:25:fb:3b:
e3:80:05:30:60:89:ef:35:46:ec:bf:b5:20:29:ad:5f:d4:1b:
34:71:84:5e:d8:39:f0:39:b5:ee:99:8b:6b:48:49:0e:fe:08:
17:a4:bf:cd:a0:f6:7d:d0:e9:6b:85:d6:ed:1b:98:fc:26:11:
fe:0d:b8:e4:91:db:66:a5:5b:9f:c5:0d:67:4d:5c:ed:0f:a6:
06:e3:d6:c2:ff:f2:db:84:aa:18:45:93:a7:9d:34:92:9d:b4:
21:62:6b:10:f7:2c:9b:79:25:84:16:73:87:8c:19:58:6b:35:
36:34:2f:6b:7b:1d:72:8f:ac:8c:e9:d7:c7:4f:2f:0a:48:85:
17:ce:14:6a:79:51:39:e4:77:ea:d4:25:3d:c7:24:c3:1e:5e:
25:f8:39:f6:10:ea:be:33:5a:d2:85:62:28:7a:67:3b:69:97:
48:c7:69:de:c8:65:e1:38:87:dc:28:d5:22:0d:2b:43:f3:e0:
40:d0:80:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:15:34 2025 by rpki-client