Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: /YwXjX4Ey1Eioyk2ROisxLTlahPey69WgoEZXyjDgP8=
Subject key identifier: 6A:AA:1E:A2:16:D5:04:FF:FE:97:24:B9:41:AA:0D:6B:A9:9B:3B:50
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019683FF51BFB18E2188B8AEC04DA5E1D650
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 05B1
Signing time: Wed 30 Apr 2025 00:01:09 +0000
Manifest this update: Wed 30 Apr 2025 00:01:09 +0000
Manifest next update: Thu 01 May 2025 00:01:09 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: tXztxaW54DpTbWOwC2cFGQsHlHSNHa0zw9Ymf1lIem4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:ff:51:bf:b1:8e:21:88:b8:ae:c0:4d:a5:e1:d6:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Apr 30 00:01:09 2025 GMT
Not After : May 1 00:01:09 2025 GMT
Subject: CN=6aaa1ea216d504fffe9724b941aa0d6ba99b3b50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:2e:fb:71:9b:8b:a3:8c:e6:4c:31:92:ae:
fe:0c:d5:77:1f:3c:b1:a5:d6:e7:a5:32:fe:74:8b:
13:e7:5f:25:61:03:20:01:cc:72:99:f9:e7:60:78:
5f:e0:b7:68:c8:c0:2e:e0:df:0c:75:c9:e5:59:ca:
fd:45:b7:6b:9d:ed:0d:e9:4c:39:5f:5c:e8:af:c3:
c3:54:03:cc:f1:48:11:fd:b2:e1:58:9b:48:5c:34:
1d:5e:c3:10:19:00:e0:d6:74:cb:e9:15:c6:de:68:
78:33:46:39:41:b9:d5:48:c8:04:13:d5:db:fe:ee:
a0:90:be:49:e9:4a:3c:f4:fd:d3:78:82:64:b4:f9:
ac:cc:c1:87:fa:e5:15:9c:7e:8f:d7:90:47:ff:c1:
4f:13:2b:eb:0a:7d:e6:fb:fa:b2:90:52:b6:63:7f:
31:20:fd:a2:58:15:4c:ca:aa:49:0c:64:e3:96:de:
40:c6:d1:b6:4d:fd:cc:eb:52:c5:79:f2:a5:7e:70:
06:31:c5:10:00:eb:7e:4b:2e:b3:1c:96:91:e1:17:
b0:ce:e3:26:be:ab:df:7c:9d:83:f2:ad:f8:55:e3:
cd:1e:bc:71:24:ff:f7:3c:57:ce:f0:b4:92:a9:7b:
73:55:a4:0a:d8:9d:ab:ab:54:b8:d1:d0:ad:27:8a:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AA:1E:A2:16:D5:04:FF:FE:97:24:B9:41:AA:0D:6B:A9:9B:3B:50
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:88:5d:38:ff:84:08:68:17:b5:57:d2:2c:b9:28:54:0b:e6:
54:b8:3d:39:91:6d:31:d2:7a:48:db:31:32:6d:3b:26:61:59:
42:5e:4e:94:d9:7c:5e:8a:ea:8c:b1:a8:43:73:3a:0a:bb:15:
dd:47:ba:8b:b6:61:d4:ff:f3:1d:d1:a8:07:ea:7f:9d:a4:7f:
6d:8a:f2:ed:37:0c:69:72:b6:24:0a:11:cc:e4:28:6d:2c:3d:
01:2e:8c:c7:26:7b:66:7b:d9:6b:20:3c:d3:5e:33:ef:5a:12:
22:cd:bd:ec:ea:7d:d8:52:75:83:c0:0f:7c:85:83:35:35:50:
d5:19:35:e3:01:88:04:3c:65:fb:f4:58:3b:cf:32:9d:71:2f:
06:d9:63:ae:2a:fd:0f:72:9f:99:1f:2f:18:0d:d2:1f:c1:22:
2f:3a:80:66:02:5c:32:eb:79:dc:c4:4e:e8:40:03:93:5a:e6:
c0:a0:07:34:06:10:58:25:ed:93:33:df:28:b4:5d:d8:e1:1f:
1d:3e:14:13:a3:9f:8f:88:9f:b6:16:de:aa:41:3e:bf:26:a4:
8f:46:37:7b:70:de:8a:a6:f4:33:51:bf:c0:79:86:56:15:62:
26:15:08:5b:60:70:8b:ca:e0:89:35:a9:ae:02:97:5f:c4:ba:
78:17:8e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:47:41 2025 by rpki-client