Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: keZoNfJlMI5k6i/h0wsn8ZkzAUJz62Fw/MlbxfzvHFg=
Subject key identifier: FD:73:7B:40:EC:B0:B4:D8:8F:F2:7E:F6:88:61:81:50:CF:03:E2:8F
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 0196892502B7103E027449CECFF6E38B32CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1519
Signing time: Thu 01 May 2025 00:00:26 +0000
Manifest this update: Thu 01 May 2025 00:00:26 +0000
Manifest next update: Fri 02 May 2025 00:00:26 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: T2HISAogfilkYD5/29/zVAXp/opPcukultHKc/OBSGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:25:02:b7:10:3e:02:74:49:ce:cf:f6:e3:8b:32:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: May 1 00:00:26 2025 GMT
Not After : May 2 00:00:26 2025 GMT
Subject: CN=fd737b40ecb0b4d88ff27ef688618150cf03e28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:2d:98:41:e3:90:11:62:57:20:a0:1c:ae:
ea:19:c9:80:8d:8c:2c:d5:df:1e:1d:39:80:69:4f:
ab:f9:32:6d:fc:ca:7e:3e:58:5d:a2:2e:05:e2:bc:
da:06:7d:89:55:ac:72:dc:a6:ec:8a:65:f6:94:99:
b2:db:a3:5c:a4:a0:e1:e4:7c:70:8b:55:9d:c2:ab:
63:ff:66:1c:a1:9d:82:cd:99:65:ef:f8:c6:f0:e7:
7a:e2:05:58:25:c6:8b:f4:67:b4:d4:00:98:0d:9f:
b4:63:11:62:81:3a:4d:4a:4b:5a:51:92:40:4a:2a:
cb:49:39:ca:ee:37:93:de:86:46:25:12:d1:ef:47:
b6:5e:90:df:46:6f:c6:a0:be:76:9a:ac:67:1a:4e:
3e:67:72:e3:fd:53:8c:e7:e9:0d:25:ce:f5:3a:27:
c2:fb:0f:c8:5c:82:4b:63:4e:77:72:0b:4b:a4:06:
f9:b6:b5:fc:1c:3e:d8:c8:6c:c2:76:ac:c8:c9:95:
7b:5c:fe:81:8c:fc:f3:30:e7:b4:90:44:f5:2a:25:
20:23:63:6c:e4:03:4e:dd:97:0f:fb:69:10:7a:2d:
ec:17:48:46:f3:c0:4f:ad:82:6d:4a:05:0a:d0:c5:
57:90:a7:b5:66:c1:2a:d8:c3:c0:b1:64:75:2b:3e:
b7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:7B:40:EC:B0:B4:D8:8F:F2:7E:F6:88:61:81:50:CF:03:E2:8F
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:18:d4:02:ae:f6:ce:8f:36:10:ef:c8:18:e6:6e:29:c9:f2:
49:94:bb:54:43:80:c1:cd:ec:e2:b6:a1:eb:1b:04:4a:cd:0a:
f1:52:ec:cb:9c:51:2e:e9:4a:55:6d:ec:e4:04:46:90:58:4f:
fe:4a:77:f6:25:d8:04:50:59:ee:5c:ed:21:69:1a:01:28:cc:
d6:50:18:aa:ec:52:b8:96:65:c8:46:8c:63:7c:b4:93:70:77:
56:9f:4d:14:b1:48:a7:43:0f:d6:8a:cb:af:14:08:30:e5:ab:
8e:f6:83:8e:f0:5f:ca:53:5d:b4:95:2d:7e:1c:5f:f2:5b:6a:
4b:bb:50:58:a9:c6:1c:f6:ec:84:3e:ef:62:56:92:c6:03:62:
6e:16:5c:fd:62:34:fc:b5:f2:ef:6c:d9:1b:3f:63:e1:0d:01:
42:d1:a3:2f:3e:04:de:3f:4d:d8:3d:40:b0:26:18:2f:75:00:
ce:8d:51:2b:43:30:16:d8:6a:60:62:9e:03:8d:81:fe:96:78:
f5:ba:3d:38:19:25:ca:b8:c3:86:d5:e6:cf:5c:47:e0:30:a2:
27:cd:2a:7d:ed:58:98:5e:72:78:75:7f:ee:2a:5c:36:bc:15:
97:c2:61:a8:84:f2:9a:a6:76:36:6a:49:3a:29:b1:66:ff:37:
aa:d8:3c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:30:08 2025 by rpki-client