Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
File: kQRcV5lsmjyeYnekMmsRgyFdW2o.mft (raw, json)
Hash identifier: mFHf2CX0/OGgHljol2EkIbbsAtdWkPNbLrviGd+JgJg=
Subject key identifier: 29:96:AF:F7:81:AF:7C:A2:5E:98:06:50:06:21:A7:92:3A:8D:F7:4F
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 0196741E565300642B11B97E625AF5A0BE51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
Manifest number: 0F08
Signing time: Sat 26 Apr 2025 22:01:07 +0000
Manifest this update: Sat 26 Apr 2025 22:01:07 +0000
Manifest next update: Sun 27 Apr 2025 22:01:07 +0000
Files and hashes: 1: 75qkVCY5XXIcFQQiW3dyFVzW6eQ.roa (hash: dXFNWNpycxDfWS4F1kZ68a/+XDX33UqEzrugZvo8DVg=)
2: kQRcV5lsmjyeYnekMmsRgyFdW2o.crl (hash: YohS7C3vKBS7YBSHWEHf690iPPywLDeVjp8e87dw//Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:1e:56:53:00:64:2b:11:b9:7e:62:5a:f5:a0:be:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Apr 26 22:01:07 2025 GMT
Not After : Apr 27 22:01:07 2025 GMT
Subject: CN=2996aff781af7ca25e9806500621a7923a8df74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:19:e2:36:86:50:3f:2c:49:c2:cc:98:e7:c2:
17:b2:d6:7b:1f:1b:fc:66:d8:43:24:df:b7:81:0b:
7b:27:a1:4d:75:e4:21:6e:42:9b:16:5d:d6:a0:1b:
e6:9b:d6:1c:82:4e:46:5c:4e:db:60:cc:de:1a:72:
04:31:fa:cd:c7:be:89:31:d8:f8:6e:cf:a2:a9:f9:
ca:2a:5d:c0:d4:d2:1b:26:d7:b9:b7:36:fe:fe:b4:
5d:ef:c3:88:7e:c1:f0:44:f7:fc:ee:c2:c0:33:6f:
c9:19:25:07:9f:74:74:bd:9f:39:d7:f1:ae:a1:1f:
2f:88:02:95:9d:e5:10:42:e7:17:1d:47:5d:71:00:
a8:58:9b:b5:47:a8:63:8c:06:a5:40:aa:75:85:ed:
45:bc:39:cd:aa:bc:d5:dc:04:1e:21:75:f3:c0:22:
47:1c:60:c6:2f:a3:5e:3c:44:47:2b:24:86:11:85:
da:1e:c3:f0:c5:28:72:d5:02:73:79:43:e2:47:5e:
d5:a8:3f:c8:4c:de:b1:3b:a1:2d:16:b2:20:be:a8:
ad:74:e9:38:45:b8:9a:23:36:8c:4a:47:3a:98:bc:
da:21:9a:54:fd:4b:5b:24:23:1e:4a:6a:95:7f:54:
85:45:07:7e:42:83:81:21:42:2c:4d:ed:48:53:fe:
e7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:96:AF:F7:81:AF:7C:A2:5E:98:06:50:06:21:A7:92:3A:8D:F7:4F
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ef:45:88:03:71:a7:55:27:96:cb:32:5e:c2:3e:26:69:a1:
8c:60:be:fe:43:ce:15:c2:8c:a4:78:ec:99:da:82:91:df:7c:
c4:80:ad:9e:b8:62:0a:f7:c3:b8:e8:9f:1e:70:86:82:66:de:
74:f2:a8:55:36:8d:f6:5b:02:45:71:6c:9f:6b:b5:9b:b2:7b:
d4:c4:03:7e:a1:dd:9a:1d:07:2b:94:2c:dc:92:37:04:d5:a1:
c6:bb:98:09:28:82:3f:7a:a4:99:26:46:71:1b:ab:6f:86:22:
d4:c7:3a:36:68:83:e4:59:c6:54:10:74:10:c6:08:7a:a4:97:
79:3e:89:10:d4:ac:5c:b6:42:d4:ac:b4:ae:6b:86:ff:a1:5a:
ce:f9:6a:cc:74:57:3f:7a:bd:ab:1a:f7:e9:6d:77:8d:7a:9e:
14:0e:da:43:38:c7:9b:fc:8d:b3:a4:41:b4:8f:d9:d5:8a:53:
fc:06:37:e3:b0:c2:10:64:3d:a9:a2:82:f1:bd:90:04:a4:03:
a9:87:6c:d7:5a:09:ac:9f:59:a2:c4:71:44:34:c5:25:5e:b3:
49:09:98:fa:02:8c:c2:03:12:3d:29:6b:cd:53:7d:7e:61:ca:
bd:b4:2e:35:3d:a6:9e:0b:ba:a5:e4:19:49:d7:08:0f:88:3a:
8d:ea:38:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:52:18 2025 by rpki-client