Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: 180qKkHECkhKvH3C0EWgMm1fFwHs5D8rvc6642E38HI=
Subject key identifier: 4D:E8:CF:97:AA:A0:DC:DE:FD:33:D4:F9:25:1E:B0:32:4D:9B:D5:DB
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0196865B6FCA35DB58CFA95FD1A235B15751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 11:01:01 +0000
Manifest this update: Wed 30 Apr 2025 11:01:01 +0000
Manifest next update: Thu 01 May 2025 11:01:01 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: upcYrZTnfjxBUgw368+cAQTrGDVidJBzrtaLTWsxwvg=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5b:6f:ca:35:db:58:cf:a9:5f:d1:a2:35:b1:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: Apr 30 11:01:01 2025 GMT
Not After : May 1 11:01:01 2025 GMT
Subject: CN=4de8cf97aaa0dcdefd33d4f9251eb0324d9bd5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:21:d9:57:4e:f4:59:7c:84:6c:bf:97:63:
42:ec:6a:1d:26:ac:fb:33:c9:d4:c3:3c:74:3d:d8:
66:78:52:f5:ff:7d:fd:b7:ca:db:98:8a:da:58:66:
71:0b:d6:a8:fd:9f:23:48:b5:0f:7d:4d:62:0f:96:
d3:af:f4:91:11:eb:6a:f3:be:ee:b0:45:7f:77:38:
88:2b:6b:09:56:d8:78:eb:17:8b:96:20:4e:12:b7:
d5:bd:3c:87:1d:26:69:14:25:2e:62:7d:5a:b3:09:
ff:d5:d4:64:f3:e7:30:c2:23:f5:28:a3:f9:a4:34:
4c:74:7c:aa:28:fc:f2:af:6a:cc:bc:cf:ab:06:ba:
e0:b6:f5:59:eb:4e:71:69:f2:49:84:fd:69:13:a5:
33:bd:9b:6f:73:2f:b6:fb:17:e0:8c:2e:7c:a3:7b:
26:85:67:14:21:4a:4c:29:9e:73:70:89:df:19:06:
4c:29:8f:28:8f:99:13:65:57:56:b8:f8:46:0d:67:
d3:68:6d:ee:b0:ed:58:16:db:5b:dc:8f:a8:30:6f:
39:b2:05:fd:4b:7b:f0:68:08:13:4b:4b:41:65:7f:
6a:24:88:a3:d3:97:c5:ca:3a:6f:d3:de:9f:4a:56:
58:72:38:b8:ec:ba:ca:e2:87:60:d0:db:05:7f:0e:
1f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:CF:97:AA:A0:DC:DE:FD:33:D4:F9:25:1E:B0:32:4D:9B:D5:DB
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:d7:07:ad:a2:c8:9e:5b:f9:a0:a9:a6:4c:3e:b0:4f:a6:6c:
f6:91:06:0f:9a:d4:40:bb:74:18:4b:1e:27:fc:d4:ad:2b:09:
46:28:98:8f:d8:6c:34:98:2c:1e:dc:c8:96:a8:ac:fa:46:1a:
32:8e:3e:81:43:6b:67:48:e8:ea:7f:42:18:7a:63:a7:ed:bd:
b9:28:60:52:be:bb:85:9f:c4:58:f4:f9:68:34:e8:8d:8f:ae:
6a:de:43:9b:49:03:9c:92:27:c5:04:2a:cd:db:85:10:0c:36:
52:d2:da:3d:ac:bd:c5:67:18:6b:e8:14:b1:b5:b2:0a:4c:c8:
55:c9:cf:f5:32:e9:a7:a7:68:d7:8f:35:5d:b4:99:18:f0:dd:
8e:33:28:90:f4:1d:a2:e6:fd:c7:38:d0:9a:ae:fd:59:ad:bc:
72:bd:aa:7e:f1:be:b2:31:0d:96:45:88:0d:8a:3f:af:67:83:
5c:b4:b4:6b:db:80:1a:ae:f6:5d:fa:49:a8:cf:4f:c8:a9:1f:
60:ac:03:b2:c1:4c:78:b9:b4:74:fc:95:84:0f:ce:7b:77:c1:
37:22:4d:1e:95:eb:40:51:79:0f:b7:c6:72:47:2d:e2:34:09:
d7:23:42:d9:c8:e8:f3:44:54:5c:63:39:4b:d6:2e:6a:d2:3b:
d1:d2:2d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:22:17 2025 by rpki-client