Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: p4BK2x4hRMDCjQgd1ihMFdaILpiAAeLVeVKwcOxWTlg=
Subject key identifier: 9F:F1:52:10:AF:41:F4:1A:52:BE:16:72:BE:2B:83:59:E7:8B:35:C9
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 019677FB1E25CDB5FCF29549FA71E9DC9C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 1106
Signing time: Sun 27 Apr 2025 16:01:07 +0000
Manifest this update: Sun 27 Apr 2025 16:01:07 +0000
Manifest next update: Mon 28 Apr 2025 16:01:07 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: gaQQV2Usfh5rxDsic94t8Z4VSRl+z6HkuiqDm3hk89g=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:1e:25:cd:b5:fc:f2:95:49:fa:71:e9:dc:9c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Apr 27 16:01:07 2025 GMT
Not After : Apr 28 16:01:07 2025 GMT
Subject: CN=9ff15210af41f41a52be1672be2b8359e78b35c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8a:eb:12:1c:e0:65:1b:c0:a5:3b:0c:b6:fd:
03:75:fe:e7:9a:63:6c:6a:59:a4:d5:bb:63:2e:cc:
76:13:98:b1:6a:03:35:2a:9d:32:3f:70:28:64:21:
9a:7b:b3:df:92:76:80:35:7e:93:36:d3:48:ac:66:
9c:a7:7a:58:6f:82:26:c2:b0:e5:dc:b2:d8:54:53:
90:54:7a:c5:42:52:bc:9e:a3:64:b8:2e:54:d0:f4:
d1:0f:b0:c8:b1:07:39:85:b1:45:23:cd:cf:81:04:
fe:6e:86:e2:e5:f3:d9:04:bd:0d:74:cc:fc:89:9f:
de:44:4b:d0:2f:22:c4:59:fe:c4:e5:bd:38:b2:0a:
84:06:bd:a1:46:ee:46:ec:f4:92:fc:e2:4f:e5:53:
39:35:07:75:88:b9:83:47:7c:15:3d:e5:b9:cb:53:
c5:5f:3c:7b:56:e9:aa:a8:c2:17:b7:05:11:cc:e4:
30:a7:7c:cd:c5:2c:13:b9:ee:9c:b7:3c:71:ec:2f:
b6:3f:38:92:62:46:54:ae:57:60:5c:2d:1c:a8:a9:
ea:7a:ec:80:98:e4:5c:a2:16:e6:6b:55:b5:66:19:
89:37:6b:17:5c:3b:d8:f0:7c:24:94:a7:6c:65:8c:
90:a3:e8:00:c8:9e:e5:33:0a:05:a7:45:32:b6:7f:
f9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F1:52:10:AF:41:F4:1A:52:BE:16:72:BE:2B:83:59:E7:8B:35:C9
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b1:65:6a:30:13:97:46:e9:0b:c2:c7:d0:b9:fa:33:9d:c7:
47:8d:75:61:55:74:24:eb:7b:58:31:ae:5d:4a:84:c4:07:fd:
98:f2:35:8b:13:be:a6:08:18:ad:49:1e:4b:b7:7b:84:35:2d:
5f:28:a3:71:60:4e:50:6c:65:2d:a9:53:f3:ce:cc:0f:e6:dd:
7f:a6:ca:70:7f:51:5d:73:a2:94:14:5e:b2:75:e3:61:63:58:
c1:1e:a6:59:72:ed:55:2c:f0:ee:4e:ac:4b:8b:8e:1e:da:99:
26:58:d6:07:00:68:f1:a7:53:b0:45:ff:bf:e5:fe:27:f0:fe:
b7:2b:ce:4f:d9:fb:d1:14:d2:c2:ef:c3:66:56:c8:48:4b:2c:
f1:b1:ee:29:19:04:45:56:ef:da:93:0e:e8:0e:f5:5c:75:4c:
0c:30:27:90:be:b7:55:b7:4f:ad:f7:0c:4b:f3:1d:43:7d:76:
f0:82:41:db:79:4e:54:df:a1:83:7c:7d:2c:4d:aa:f7:d8:da:
57:53:1f:b5:b7:7d:4a:12:da:f3:6f:9f:c7:9f:ed:5f:8b:09:
d3:b9:85:5c:69:ad:b2:aa:de:87:44:1e:12:8c:a7:12:76:e8:
b9:fe:86:8d:27:3b:aa:b4:2a:e9:45:df:ed:f6:5b:75:d0:9c:
18:d9:5c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:58:21 2025 by rpki-client