Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File: kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier: TjsSABqx7bn64EJn4uO3lQEyIz4v+C/yGHhgydzVRnQ=
Subject key identifier: 19:16:7A:55:BC:37:4E:16:B8:37:BD:3B:F2:F2:EE:37:30:67:9D:66
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 01968736733F4038F135A4CAAEB77196FBB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number: 151B
Signing time: Wed 30 Apr 2025 15:00:14 +0000
Manifest this update: Wed 30 Apr 2025 15:00:14 +0000
Manifest next update: Thu 01 May 2025 15:00:14 +0000
Files and hashes: 1: _wZ7w3Scv14H15k_iZCT9mnEPVI.roa (hash: JHtZU8B5JlDmryEaVYDxAxM9JobFikDH6+vwZ+Ii1xM=)
2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: 2PvtQ4XD/oYcmIKMlRUd3P7qysnRAe26+EK+wJSg73U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:36:73:3f:40:38:f1:35:a4:ca:ae:b7:71:96:fb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Apr 30 15:00:14 2025 GMT
Not After : May 1 15:00:14 2025 GMT
Subject: CN=19167a55bc374e16b837bd3bf2f2ee3730679d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:e0:d8:d4:b5:65:01:92:94:51:9d:37:70:
44:ed:47:d3:77:8d:65:02:c6:69:82:57:99:b6:17:
c4:5f:5e:e9:9b:12:cb:55:53:07:34:7a:a4:39:63:
04:e5:f7:b1:7a:2d:72:3c:07:eb:6e:55:d7:e6:98:
51:6d:0b:d9:9e:26:c8:f5:54:c8:99:a4:84:13:d4:
84:a5:6a:4a:4d:47:a3:bc:60:f3:79:d8:6d:d3:2d:
98:9f:ad:25:ea:90:de:66:af:df:71:7f:66:17:d7:
37:f6:f6:12:11:24:5d:09:16:c7:7e:7d:4f:f7:d4:
c6:90:ce:fc:a8:0b:90:48:1c:5a:b2:88:f3:a9:e6:
b7:5f:bd:30:41:c3:aa:fc:cd:aa:1a:3e:35:1e:6b:
16:ab:e1:a9:a5:df:3f:bf:f4:41:8b:6b:1b:28:2b:
55:70:f9:4e:31:18:f5:e1:fd:62:14:fd:4c:1e:df:
a4:7a:0d:8e:b1:41:41:04:14:82:5d:12:14:db:db:
c7:88:fd:52:cf:c0:2f:5d:97:c9:2c:95:95:cb:d3:
a9:8f:ed:0a:dc:2b:92:9a:24:15:27:04:61:ff:eb:
e5:15:74:1d:be:93:59:46:68:ca:3b:43:f9:17:57:
97:02:6c:4b:fa:25:00:a1:5a:26:42:c1:f3:74:30:
aa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:16:7A:55:BC:37:4E:16:B8:37:BD:3B:F2:F2:EE:37:30:67:9D:66
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a6:6e:43:f6:66:ed:77:96:44:23:c5:87:c4:9e:4a:07:34:
0b:6e:97:ee:d3:9d:c8:b3:77:50:9c:eb:45:23:95:2c:21:31:
de:7c:fe:e6:c3:19:ac:65:f7:b1:17:d8:60:20:80:ec:41:35:
73:7f:00:11:37:9f:8a:96:d2:ea:65:9b:08:21:b7:9c:75:31:
d0:24:1f:07:4c:10:af:76:c3:63:7b:bf:a7:99:45:ba:54:b5:
50:a3:a3:5f:d3:40:24:6e:8f:07:e4:49:a2:af:45:90:8d:d3:
34:0a:b0:e2:42:f3:5d:0d:65:4d:f0:a0:43:d3:6f:4e:7a:82:
aa:86:fd:87:d2:31:0f:91:91:b1:de:d2:d1:65:bb:92:7d:2a:
53:a7:9d:ca:11:dc:a5:76:36:61:87:a4:ee:da:95:cd:a9:2b:
52:21:63:a6:ac:0a:01:b7:41:ef:34:f3:01:5e:16:48:dc:fb:
0a:57:87:6a:e3:01:64:87:a5:87:77:d9:68:a8:d7:32:6f:87:
71:cb:48:f5:6f:f5:f7:38:e1:f2:d2:cf:7c:ad:3b:46:d0:f1:
c5:9a:c7:ee:b6:0d:f4:1b:9b:7b:ac:91:fe:db:b1:88:5c:b1:
dd:ca:16:43:47:01:68:52:e0:85:0f:c7:db:8c:a8:16:c1:41:
66:88:2a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:26:48 2025 by rpki-client