
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
File: kMV7R1FqkODP4HIVeTenM71QO-A.mft (raw, json)
Hash identifier: M7jiPQIoJXQ6MkKHVFrkiysVclx3wJRhqT0La7cLd34=
Subject key identifier: DF:73:D2:22:F7:8D:1A:28:34:F8:15:EA:25:86:A4:7F:EE:A3:CD:E9
Authority key identifier: 90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
Certificate issuer: /CN=90c57b47516a90e0cfe072157937a733bd503be0
Certificate serial: 019674F9BD60ED131768D2C15E3FD4B7739A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
Manifest number: 0880
Signing time: Sun 27 Apr 2025 02:00:46 +0000
Manifest this update: Sun 27 Apr 2025 02:00:46 +0000
Manifest next update: Mon 28 Apr 2025 02:00:46 +0000
Files and hashes: 1: kMV7R1FqkODP4HIVeTenM71QO-A.crl (hash: W3XzFW0hFGYKjnwpdRbLicFxgncukI07G99eQ4S8pOo=)
2: zkP1QU3MF0GoTFmSaWvEQsODbsE.roa (hash: qo/m2b8+nCxd1dPgymjA/2fWlVcNJMND2bMF+AfYiPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:bd:60:ed:13:17:68:d2:c1:5e:3f:d4:b7:73:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c57b47516a90e0cfe072157937a733bd503be0
Validity
Not Before: Apr 27 02:00:46 2025 GMT
Not After : Apr 28 02:00:46 2025 GMT
Subject: CN=df73d222f78d1a2834f815ea2586a47feea3cde9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1c:0b:f0:e6:38:3e:0f:5d:c0:53:91:e4:f1:
c9:f9:6c:ed:f6:a0:bd:0e:ee:cc:62:f7:d1:fd:0a:
99:d9:b5:03:f1:13:1b:22:a3:3f:d9:7e:96:43:a3:
9b:2d:c9:f5:95:46:5f:2b:a2:dc:4e:09:ec:b4:f8:
f8:56:87:83:ef:89:5d:88:37:88:2f:36:5d:a7:78:
1b:0f:c1:5c:06:a4:b1:6b:4f:42:25:7d:ba:1b:a3:
aa:70:e5:b6:85:d1:01:59:8e:8e:37:c1:62:a1:4f:
14:f4:da:6a:fe:80:67:80:0d:58:84:c1:f1:ee:3f:
17:48:c9:97:66:36:d5:e8:d9:3a:c8:c8:a2:ee:29:
cd:67:cb:38:39:da:f3:40:59:d0:fe:e1:ca:5a:ca:
7b:5d:f0:1c:ee:6b:63:3c:55:18:b5:59:7c:0a:12:
d7:38:6a:4e:61:27:18:e5:5e:f6:37:8a:a8:cf:ed:
aa:f8:3a:92:ac:06:c6:a8:19:31:9b:bf:46:33:e9:
35:b8:cc:6c:01:37:da:a3:99:19:7d:63:a5:1e:1f:
fa:79:1f:82:9d:12:68:5e:80:1e:44:8b:b2:4b:4c:
a7:b6:6c:b9:37:5a:88:38:0d:6f:cb:10:cb:89:06:
84:f1:fe:c2:d7:7a:a7:ed:d9:00:41:a3:00:a3:61:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:73:D2:22:F7:8D:1A:28:34:F8:15:EA:25:86:A4:7F:EE:A3:CD:E9
X509v3 Authority Key Identifier:
keyid:90:C5:7B:47:51:6A:90:E0:CF:E0:72:15:79:37:A7:33:BD:50:3B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMV7R1FqkODP4HIVeTenM71QO-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/516f8b-b4d2-431c-be47-cfacb25084d7/1/kMV7R1FqkODP4HIVeTenM71QO-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:88:d8:4e:1f:47:37:27:1d:90:62:65:ff:00:89:bd:4b:f9:
9f:19:be:18:d6:86:41:3f:6a:a7:73:8d:18:49:39:85:65:94:
f7:eb:6a:b8:d4:4d:79:97:82:fe:e9:fe:02:8e:48:cc:d7:c8:
b7:17:0e:da:cb:81:55:f4:9d:5f:47:d6:fa:36:47:ba:06:51:
61:2f:65:fa:33:1f:78:98:94:73:a0:7d:f3:d4:db:a7:43:3a:
65:e7:64:52:35:ac:bf:c4:1e:d1:62:b9:75:dc:26:2d:73:33:
11:58:88:2c:ec:a3:43:8c:c4:6a:03:ca:38:3d:13:66:43:82:
e5:44:be:60:8f:cc:73:79:d9:b1:33:1b:a2:67:9f:b4:5e:92:
45:22:15:78:c1:11:3d:14:bd:76:e5:d9:bf:49:53:3a:84:e4:
c1:3c:4d:96:b0:87:98:1b:ae:37:80:6a:2e:4b:fb:5f:20:41:
25:9a:e8:4e:3d:04:d4:c7:1c:6a:8e:82:29:ad:97:e3:bf:b5:
ba:cc:6c:a0:c3:0b:2b:81:be:19:b1:51:74:c7:28:0f:4f:11:
50:17:99:0b:e4:df:f1:6f:eb:3c:d6:34:73:35:f2:03:c1:2e:
24:31:15:9b:1e:4f:11:be:07:63:94:47:6f:ca:ab:89:d2:58:
50:97:01:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:40:09 2025 by rpki-client