Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: kO4slwIt49GtrUnUo63y9YCApNCm42CXiaSSUwfx6Yc=
Subject key identifier: 37:C6:13:2D:77:CD:F4:1B:BA:99:48:EE:8A:A1:C8:BC:9F:EE:B8:AF
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 019678D65D1B33D8AB33761E988AB478EA47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 143E
Signing time: Sun 27 Apr 2025 20:00:36 +0000
Manifest this update: Sun 27 Apr 2025 20:00:36 +0000
Manifest next update: Mon 28 Apr 2025 20:00:36 +0000
Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: Y8ZUqxG1TV/vK/IkUiSUSgaArwBYIE8Gz1+sA9Kr12g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:d6:5d:1b:33:d8:ab:33:76:1e:98:8a:b4:78:ea:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: Apr 27 20:00:36 2025 GMT
Not After : Apr 28 20:00:36 2025 GMT
Subject: CN=37c6132d77cdf41bba9948ee8aa1c8bc9feeb8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4b:65:ad:92:60:60:97:8d:92:d1:19:38:8d:
2e:45:34:a8:f4:25:09:d1:a9:4e:41:16:09:4a:29:
fa:02:bd:e5:33:07:4f:09:6d:49:7f:f9:dc:27:ff:
1d:26:1c:c7:34:32:10:a0:4c:32:86:e6:a6:a7:d3:
a3:08:7c:d0:13:56:e4:58:4f:9a:b0:8f:93:36:0a:
c5:91:ff:09:59:3b:b9:1a:72:e9:cc:3c:ec:90:5d:
38:b7:e3:35:e0:02:b2:f4:e1:7e:51:bd:5f:e1:af:
32:c9:8a:b4:0a:11:6e:37:83:24:43:50:14:22:8e:
77:3b:5a:73:c7:6f:af:aa:c6:85:d7:39:60:33:4d:
5d:52:92:4e:1e:ef:92:28:3f:54:f7:1f:43:ae:4f:
45:97:a0:71:e0:b2:0c:f1:b1:3e:77:9d:b1:dd:bf:
fd:37:48:e5:ab:85:6f:6f:36:c4:8b:5c:3a:aa:c3:
1a:d4:f5:a1:23:33:7f:7b:5b:af:59:a2:38:01:fd:
ec:28:b5:52:3a:af:60:80:07:5c:1e:0d:6d:b0:f1:
ca:6e:06:41:1e:d0:55:ce:cd:79:bc:61:8d:77:7b:
16:76:a6:d8:fb:c9:b3:e9:1d:48:fa:20:91:cf:67:
b1:64:22:fa:2e:af:1f:41:72:28:cb:a9:48:f9:19:
61:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C6:13:2D:77:CD:F4:1B:BA:99:48:EE:8A:A1:C8:BC:9F:EE:B8:AF
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d0:e6:5e:1a:25:e7:14:99:70:7f:63:26:2b:24:d5:cb:56:
a0:c3:4a:75:14:cd:37:7e:28:48:3a:d0:23:d7:14:d6:79:fb:
6f:fe:a4:51:86:f3:9b:4b:10:59:87:fb:b1:5f:b9:d6:d6:ac:
b8:86:e7:f7:de:6a:3d:a8:ff:1a:6e:0f:11:8a:db:a7:ff:bf:
d1:99:af:01:fc:25:71:d5:a0:1a:2b:88:dd:c0:56:c6:9a:4d:
fa:fc:7e:9e:e2:38:e5:a2:5d:0a:48:40:d7:f0:b3:29:af:bb:
3d:9e:11:8a:62:ba:63:98:dc:d0:49:f4:8f:f6:8f:56:d1:78:
b9:c0:56:31:c8:51:18:19:90:1c:3a:54:50:3e:bd:16:12:9d:
50:24:8f:31:5f:69:e6:a6:2a:48:52:d1:71:e6:a9:e7:f9:f5:
4d:01:ae:90:51:3f:23:b3:4c:b6:d4:22:50:db:55:80:e0:81:
16:6d:e9:3b:2d:eb:30:0f:cf:52:fd:92:5f:fe:b8:8d:ee:5f:
84:1f:95:ad:3f:28:29:ee:b8:45:1b:75:7a:17:26:cb:c4:da:
c7:fc:22:b4:7f:82:27:28:1f:b4:07:9e:7c:db:22:7b:10:27:
d6:3c:72:28:11:11:3f:a0:ba:b5:c2:73:1d:78:ea:85:96:03:
68:01:d7:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:09:04 2025 by rpki-client