Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: ufQsxPMaO+XcrmK/32qTkzat0SR38b/kw8XwwS5LT0s=
Subject key identifier: 72:AF:B3:F5:7E:BA:B5:8E:12:71:EC:D2:7F:E2:66:59:CD:96:30:50
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 019657265F7DF364F1EBD06C46B19D9B775C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 07:00:54 +0000
Manifest this update: Mon 21 Apr 2025 07:00:54 +0000
Manifest next update: Tue 22 Apr 2025 07:00:54 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: Q6twOeIhjdSQS+u/LWPYxbhvEVla6+ShtL4krtkW6p8=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:5f:7d:f3:64:f1:eb:d0:6c:46:b1:9d:9b:77:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: Apr 21 07:00:54 2025 GMT
Not After : Apr 22 07:00:54 2025 GMT
Subject: CN=72afb3f57ebab58e1271ecd27fe26659cd963050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:96:00:68:06:9f:ca:c9:e1:c7:f0:a8:2e:31:
00:0f:fa:1a:f0:d3:65:6c:63:4e:28:cc:f7:1d:e9:
55:71:b5:69:e4:bb:10:85:c0:7c:14:92:58:5a:b2:
7c:61:89:d2:fa:22:cc:69:b9:d9:ed:44:26:5e:18:
91:49:53:67:cb:bf:4c:de:15:c5:18:96:8b:00:6a:
12:1b:e5:79:c0:81:33:ea:b3:b2:fa:a3:95:bf:9f:
e7:b5:12:43:9c:d7:a0:60:e6:c2:58:49:01:6b:46:
c0:a9:e3:84:8b:81:f0:d7:25:8b:33:0b:ca:a5:d0:
62:c9:36:f8:d0:e6:ed:7b:4a:c9:0d:dd:66:74:40:
b0:27:5e:5d:b9:5c:ce:c3:0a:79:9b:e2:14:a9:68:
b5:ef:ba:5d:96:f3:fb:47:dc:3a:cf:29:70:81:03:
c7:a9:b9:4d:6d:da:26:bc:8b:7a:3e:b8:83:46:34:
13:b1:9a:01:f2:71:8c:a3:18:68:85:52:a0:ec:ba:
f5:b0:89:4d:61:d5:f1:34:ef:eb:95:36:35:fe:1a:
c0:85:92:95:0b:b3:0a:6b:d6:1f:d6:99:f8:cc:88:
47:a4:03:3c:b1:a9:7c:cb:3c:59:c2:88:54:e5:e3:
1f:3c:ad:07:97:ad:e5:59:12:88:ed:5c:8c:c9:41:
33:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:B3:F5:7E:BA:B5:8E:12:71:EC:D2:7F:E2:66:59:CD:96:30:50
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:18:14:c0:c6:07:37:90:bf:1d:b7:95:0b:90:04:a2:67:d2:
0c:3f:44:8d:57:5b:6f:4f:bc:e9:de:50:00:77:1d:8c:ca:8a:
48:59:6f:2c:18:f1:c4:51:05:f2:b6:74:c1:94:dd:ec:08:19:
b5:f0:1f:a4:fc:2f:4c:96:d6:92:70:47:c2:e1:6d:6a:20:2f:
3a:19:d4:02:ee:ad:19:17:86:96:bc:d8:98:14:db:e0:e5:27:
92:ea:de:fd:41:a9:9a:5e:91:a1:f2:69:9d:e3:7c:d1:1a:6d:
e3:4b:b2:a1:d0:22:0c:e7:0d:10:b0:6b:e2:fb:fa:88:74:f6:
64:28:48:14:70:8d:93:78:c0:5c:40:68:ac:5a:32:db:af:db:
a5:d2:c3:3c:f7:1c:98:f9:2e:5b:89:f9:5b:38:59:55:c2:16:
19:3b:8d:b3:9a:60:1d:c6:a0:68:80:17:c3:26:7d:91:1e:0e:
38:86:04:b6:3c:96:d1:68:03:ce:a5:9e:22:6f:f3:bf:6e:f7:
03:db:6e:98:aa:3b:c6:e4:93:fa:b5:a7:f9:cd:5b:1d:16:71:
94:c9:7b:34:d7:ff:35:15:a0:6a:0c:44:7f:89:10:90:af:d0:
f6:c2:a6:cd:23:10:db:b9:fc:b3:44:89:a8:66:12:1b:73:cd:
b3:5a:71:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:18:41 2025 by rpki-client