Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: pFHlRVkuTEAiFSHnGQgByjNUo4KU9n63x/HDbPNvYWI=
Subject key identifier: 2D:00:27:7C:3D:ED:10:08:B4:2A:FD:0F:5E:30:9E:87:CB:58:A1:8F
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 0196760CE019A0111D28E50209CFB1DA903D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 151C
Signing time: Sun 27 Apr 2025 07:01:17 +0000
Manifest this update: Sun 27 Apr 2025 07:01:17 +0000
Manifest next update: Mon 28 Apr 2025 07:01:17 +0000
Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
4: U18SPSBUf3dwumuu9FyNIqHDXLw.roa (hash: V5VQUyBsrAGopRO8qXTISlE1ORxyujJueAvt5anuNoc=)
5: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
6: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
7: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: wKc26W2GZXGpU8pK1LQq92WRiEmk2gZjRkTCMq85N0I=)
8: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:e0:19:a0:11:1d:28:e5:02:09:cf:b1:da:90:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Apr 27 07:01:17 2025 GMT
Not After : Apr 28 07:01:17 2025 GMT
Subject: CN=2d00277c3ded1008b42afd0f5e309e87cb58a18f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:88:76:07:cd:72:04:1d:c5:41:f0:51:01:86:
85:0d:d3:61:15:0b:d1:80:ac:ae:df:c1:9f:8f:97:
1f:ce:13:9e:f9:af:6a:f9:3f:88:03:11:6c:64:cc:
f4:25:89:19:09:ff:7e:3c:3b:94:e2:c3:1a:f7:e6:
69:3f:d2:d3:13:3b:ef:28:bf:0c:e1:bf:fe:b8:c8:
31:dd:79:62:90:70:43:1d:7d:4d:e8:85:c0:9c:e7:
b3:96:c8:f8:b6:9d:82:85:36:71:a9:b6:fc:8b:cd:
8d:69:20:17:9c:9c:cb:a8:0b:d8:44:5d:19:7b:a4:
e0:a5:f3:c2:43:12:d0:3c:9b:31:a6:14:10:17:cc:
e3:94:c7:5c:42:7b:f5:90:52:b6:ed:b2:4f:f0:af:
bd:fe:c3:83:73:b9:33:88:69:12:1e:1c:76:a1:26:
b4:db:70:e5:bb:22:f3:53:01:f5:3a:4e:df:bb:06:
9e:b4:a9:28:d1:91:27:22:9e:97:fd:fb:24:78:42:
e8:e0:61:d4:37:b5:6c:23:3d:55:14:48:79:cf:07:
b8:19:86:15:3a:75:df:55:00:d9:e6:09:9c:f6:71:
44:17:bf:5e:46:4d:d1:16:f5:49:9b:73:ae:07:f9:
cb:45:2d:ee:de:fd:5c:49:ed:a5:8a:6f:d4:8c:69:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:27:7C:3D:ED:10:08:B4:2A:FD:0F:5E:30:9E:87:CB:58:A1:8F
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:6b:05:29:14:e0:57:12:b6:75:3b:55:0a:ee:30:01:e4:d7:
1f:cc:81:24:90:52:c4:94:ce:39:e3:92:23:90:9e:e6:7a:85:
0b:c2:48:16:82:a6:55:01:a0:dc:fb:a3:6e:02:92:4b:c9:6d:
6a:26:31:00:17:d4:5e:2c:1e:73:49:15:be:84:29:f3:a0:73:
6d:3a:5f:77:ea:5e:a4:bf:f4:ca:44:a7:a0:36:a9:ba:89:58:
18:4f:96:a1:86:79:57:23:44:d0:86:8a:5b:de:2a:de:9a:a4:
3e:1f:93:c2:29:c6:67:87:ad:9b:61:31:e4:e6:70:20:c7:e9:
3f:a3:9d:f0:3e:5b:6b:1b:cb:f9:ab:5a:c0:9e:e5:12:1f:48:
16:b8:41:99:06:27:cb:b4:bf:2b:c7:4f:c3:59:af:bf:10:b7:
b3:c0:cc:a4:c3:d0:9d:a0:8d:68:e3:4a:77:78:00:10:29:0c:
a6:43:83:38:62:da:73:28:6f:59:62:a8:44:e6:69:3d:04:b6:
c8:ed:e1:4e:ea:45:22:de:15:17:6b:ca:8c:d0:f9:7b:f7:e1:
ac:c0:17:cf:31:50:c6:bf:45:03:06:0b:01:37:2c:7d:1b:06:
43:cd:69:c4:fa:f0:d4:6d:0f:80:27:06:6e:7f:59:c0:57:90:
08:aa:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:29:07 2025 by rpki-client