Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: 8I2kjizywLOzIs8r+gpFyce9dtH/+K1+NuCm9xJ1nH8=
Subject key identifier: 72:98:F1:52:A7:0A:97:0C:FD:C5:7E:8E:7B:7E:01:49:3D:AD:72:7A
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01967E33CC7DE53CB7D189CF40F159610B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0A35
Signing time: Mon 28 Apr 2025 21:00:45 +0000
Manifest this update: Mon 28 Apr 2025 21:00:45 +0000
Manifest next update: Tue 29 Apr 2025 21:00:45 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: dQq2ZvCqB7PRPcvNqaYT0SKWfDIMEIr3rAt4SlLAlH8=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:cc:7d:e5:3c:b7:d1:89:cf:40:f1:59:61:0b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Apr 28 21:00:45 2025 GMT
Not After : Apr 29 21:00:45 2025 GMT
Subject: CN=7298f152a70a970cfdc57e8e7b7e01493dad727a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:49:ca:96:c7:fb:72:6c:e9:08:9b:91:b5:
2e:79:eb:be:02:7c:38:94:4c:83:87:5b:bf:ff:5a:
4d:4b:68:b9:3b:f9:47:11:35:4b:46:53:7d:3f:61:
6f:8e:ec:dd:db:c5:b2:1c:e0:a4:0f:48:cd:26:aa:
3b:5c:de:a1:64:5e:64:38:ea:12:9c:8e:1c:6b:53:
91:4e:65:59:1d:9c:1a:98:62:5c:7f:74:25:30:1c:
29:eb:cf:d2:8a:52:ca:88:d7:2d:3c:64:5f:b5:68:
18:69:d4:58:13:8a:e5:84:31:62:40:f1:47:ef:37:
37:c1:7d:ec:91:ed:4d:39:3f:7f:6c:0a:d2:93:e0:
90:d7:a3:60:31:99:d7:89:c4:3e:57:f5:a2:5b:6b:
97:d9:8d:97:6e:33:81:ec:97:7a:b4:ac:c1:b0:80:
17:d7:54:f9:22:4b:8f:ea:e8:70:f5:b6:9a:8a:1d:
93:1f:da:99:ea:b1:3b:4d:56:91:28:6a:3c:06:d2:
b4:32:a3:4f:77:56:d3:ba:e6:37:fb:51:f8:93:f7:
2b:16:93:0f:24:9f:c4:d3:f0:36:a3:83:60:d3:90:
ab:39:45:37:2e:b3:0c:08:f3:af:ef:24:dc:03:7b:
4f:65:61:3c:06:33:85:fe:76:58:88:bc:21:7e:09:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:98:F1:52:A7:0A:97:0C:FD:C5:7E:8E:7B:7E:01:49:3D:AD:72:7A
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c7:10:6c:04:1c:56:b2:39:bb:e2:c1:00:80:e7:9f:fe:c9:
19:66:d2:6a:ff:dc:da:b4:74:f8:48:30:14:00:42:16:09:83:
c4:04:a7:d1:96:cc:0a:67:f8:69:0b:74:ff:5b:2b:a4:9e:90:
f7:3b:2f:ce:f3:40:26:75:92:41:94:34:d4:40:86:4c:e7:5a:
ad:2b:23:2a:04:8c:2a:e9:d1:4f:4b:74:21:55:8c:dd:80:30:
38:5d:1a:aa:48:ff:ef:10:af:77:92:aa:95:3b:e5:a3:e2:60:
83:7a:ec:d0:e9:f6:06:d1:32:fd:f5:75:bb:16:16:b6:6d:05:
45:b6:92:f6:f0:2e:91:2e:99:33:0a:99:14:32:5a:ff:40:18:
f6:c3:8d:51:f5:a9:e8:0c:c0:ce:c3:7e:55:1a:02:67:6b:87:
d8:de:57:d2:5c:85:d9:21:f7:fb:30:59:ea:ee:30:1f:9d:c0:
42:6f:00:27:2a:8d:ea:29:f8:f3:3f:c0:99:e3:f1:71:79:29:
2d:9d:ab:0e:a2:aa:23:e1:04:5c:7e:30:a1:90:a2:76:a4:85:
66:cc:8f:b4:30:0e:b0:b7:39:2e:53:47:14:8f:d8:c3:9a:46:
e1:5c:8c:f2:d3:e6:49:a4:72:07:7b:b4:d8:d3:25:02:66:a5:
6f:de:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 01:20:52 2025 by rpki-client