Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
File: kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft (raw, json)
Hash identifier: KfICie1QcdRlfNu6CJSxedDU8FHVi2bUtw6SVwJcu58=
Subject key identifier: 67:FE:28:AD:CB:9E:87:20:C4:13:35:69:82:D3:D5:E3:A6:F3:AB:6D
Authority key identifier: 90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
Certificate issuer: /CN=9087833e025b2320f9053a103ba61de52eab2afb
Certificate serial: 019685ED180A2F668AEC8016EDF01391E2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
Manifest number: 04C2
Signing time: Wed 30 Apr 2025 09:00:30 +0000
Manifest this update: Wed 30 Apr 2025 09:00:30 +0000
Manifest next update: Thu 01 May 2025 09:00:30 +0000
Files and hashes: 1: Sl6Vo_wPwtgiIFIYMqrbSQblXKc.roa (hash: l8tp4Qke8V/squeIomyLOU/9sV5KVMqfblcX8Rj/Ujc=)
2: kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl (hash: a5BrFts/yYvvmt8nhPJ2jLb2vfZc1eROJZpkNPRDQSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:18:0a:2f:66:8a:ec:80:16:ed:f0:13:91:e2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9087833e025b2320f9053a103ba61de52eab2afb
Validity
Not Before: Apr 30 09:00:30 2025 GMT
Not After : May 1 09:00:30 2025 GMT
Subject: CN=67fe28adcb9e8720c413356982d3d5e3a6f3ab6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:3f:74:b3:a3:af:70:bd:fc:4c:69:da:76:
8e:a5:fa:b0:11:0b:10:42:eb:dc:5d:a7:40:d4:8b:
30:f3:f8:a4:f6:4e:a0:f7:cc:3c:ed:f0:91:65:7b:
64:10:12:92:33:2d:37:d4:7f:f6:23:db:31:b1:20:
a5:9f:82:99:28:67:97:8c:2a:82:d1:06:02:b8:c5:
4d:20:16:b2:8d:0a:99:b2:1c:76:da:84:26:91:ad:
74:0b:35:6a:d3:ab:3a:2e:72:8d:66:6e:13:d9:5f:
ca:7a:64:8a:cc:95:ea:c4:33:b4:e8:36:95:e4:03:
6e:c2:65:9e:a9:ef:fe:f1:2c:56:fc:70:4a:1f:bc:
77:f6:fd:4e:26:bd:bf:57:86:9b:18:22:28:1a:97:
81:ef:a1:15:70:a2:ff:7e:01:15:ae:00:38:e6:32:
0a:1b:01:64:a6:71:e7:4e:6c:12:e3:3f:07:9b:ba:
0e:ed:d0:36:95:76:27:89:3a:54:79:84:6c:70:e9:
d1:e0:41:f0:d8:98:6e:60:ee:bd:c5:25:01:d1:cc:
b5:42:5d:98:7f:ac:ad:ce:22:87:6b:b6:83:bf:6f:
a0:a4:85:7e:0a:19:2b:56:b0:06:9c:cc:2b:69:fd:
34:d8:2a:a5:e8:42:06:7b:3c:f8:a6:e6:b0:e0:25:
0e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FE:28:AD:CB:9E:87:20:C4:13:35:69:82:D3:D5:E3:A6:F3:AB:6D
X509v3 Authority Key Identifier:
keyid:90:87:83:3E:02:5B:23:20:F9:05:3A:10:3B:A6:1D:E5:2E:AB:2A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeDPgJbIyD5BToQO6Yd5S6rKvs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/3701f7-20ef-4966-a2cd-119dcd2ea9db/1/kIeDPgJbIyD5BToQO6Yd5S6rKvs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:40:54:e8:8b:12:68:89:c8:83:02:72:1d:94:10:6e:30:39:
75:fe:a0:ff:a8:43:ec:41:01:0e:5e:9c:75:83:81:5f:86:89:
c8:2b:c4:5a:80:49:fa:ad:dc:5b:c0:ac:68:42:7b:e4:a6:e2:
4a:62:22:e6:74:39:30:f4:14:79:f7:54:34:c9:4f:10:1e:32:
e7:9b:5a:6e:83:ab:d4:d0:2f:c0:87:71:32:5b:7f:d2:c2:53:
01:f7:14:7a:1b:69:32:18:57:52:f0:e1:dd:0d:2b:aa:46:8c:
42:a0:ba:6d:fd:b8:03:20:41:5c:6f:f0:53:73:7b:9c:cc:23:
31:78:57:95:8a:ba:e9:27:06:aa:f4:95:2e:db:d2:66:93:ac:
cb:84:6e:3f:89:78:27:70:4e:4f:70:85:74:3e:38:e4:c5:53:
72:d3:81:b5:2b:d1:04:06:16:58:64:d7:04:b7:38:5e:1d:90:
2a:6e:91:95:6a:2a:64:94:30:de:b3:e5:28:10:a8:fd:68:1b:
0b:f9:16:e7:52:3d:c6:22:98:4c:2e:89:ed:bf:7a:ee:d3:2f:
22:19:71:b7:ff:d3:af:1b:11:0a:6c:c3:ea:67:2c:ee:c0:c9:
ea:b9:33:04:e0:99:de:2d:37:3c:e3:9f:24:5a:92:bc:d0:75:
1e:c4:9e:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:03 2025 by rpki-client