Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: jeBibe4j6K19YtH01ecQIECauVffmNHcQarkwYlGGf4=
Subject key identifier: F6:C6:5A:3A:03:86:A4:DE:9D:CB:F7:F9:03:6C:0F:84:95:03:E6:E5
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 019649A199844C8640FC8C9ABFD34AB3FF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 14FB
Signing time: Fri 18 Apr 2025 16:00:49 +0000
Manifest this update: Fri 18 Apr 2025 16:00:49 +0000
Manifest next update: Sat 19 Apr 2025 16:00:49 +0000
Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: mB0/mPJCKeMk552DHmDrrg9AGX/tm8NG8JEesDfv4N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:99:84:4c:86:40:fc:8c:9a:bf:d3:4a:b3:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: Apr 18 16:00:49 2025 GMT
Not After : Apr 19 16:00:49 2025 GMT
Subject: CN=f6c65a3a0386a4de9dcbf7f9036c0f849503e6e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:68:ba:5c:92:7b:3b:64:61:c3:1d:62:3d:34:
be:61:31:36:f7:90:32:6a:55:5e:77:a7:45:2a:f2:
2a:ba:46:d4:f5:9b:91:67:a6:40:ca:f0:83:05:08:
9a:68:16:2a:ec:d5:72:d6:6e:33:44:ad:93:76:a4:
df:8e:4d:b4:a3:5d:2b:fb:b0:9e:ff:80:36:be:ab:
e0:d2:00:1d:77:71:81:b1:0f:22:a2:86:4a:89:e7:
14:09:cc:47:91:c2:ef:12:06:1a:5a:28:ce:b9:e5:
29:99:7c:42:a2:f9:9c:32:eb:e6:34:c1:60:2a:4d:
7d:91:42:11:2c:f9:a9:0a:2d:c3:e7:03:d3:cb:c1:
25:68:8a:dd:99:32:86:f1:89:78:97:35:67:19:ce:
96:89:15:bf:3a:94:52:35:98:34:36:38:31:01:fd:
b0:7e:38:90:b9:1f:96:7c:67:94:54:18:c4:3d:40:
45:80:af:3b:7b:50:97:0e:07:ef:e6:4a:b1:52:2a:
5e:03:33:58:ae:9b:00:aa:e6:31:cb:fb:b5:46:04:
8b:b2:22:ad:5d:8d:70:b5:58:4c:47:fd:9d:32:a1:
1b:f8:6d:16:9e:e5:b7:cb:e8:6e:04:e1:79:56:12:
03:4d:12:c1:90:c9:94:8a:55:50:5b:fd:85:84:5f:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C6:5A:3A:03:86:A4:DE:9D:CB:F7:F9:03:6C:0F:84:95:03:E6:E5
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:f4:b2:98:86:f8:62:1c:71:c7:2d:0a:a0:5e:b0:12:cb:b7:
a2:45:e5:03:d9:79:7b:7d:df:97:89:b2:45:24:38:0b:dc:2d:
63:38:75:f3:bb:57:da:1b:97:f7:f0:85:c5:ea:05:00:bc:b5:
52:50:59:3d:79:fc:6e:34:0f:6e:7c:45:e6:31:e8:83:ae:a9:
5c:a4:58:d4:0a:97:c4:df:3c:e1:c3:3a:19:22:12:f7:46:f2:
36:6c:38:33:fa:02:a3:91:03:ce:a3:eb:25:ea:72:ea:1a:b1:
e7:27:4d:81:f0:39:09:c9:1f:a6:74:30:cc:1f:b0:30:a9:f7:
ae:0d:7c:9f:6b:fa:e8:ed:e1:f3:ad:c4:be:c4:e9:da:6c:8d:
5d:c9:a6:a5:b3:63:35:35:47:f5:31:72:54:d7:40:01:80:d4:
a4:19:66:ca:73:12:e4:bd:9c:73:e5:00:41:57:eb:7f:72:39:
f5:ef:46:ec:57:fa:f3:52:b7:88:bf:4e:e7:23:9f:cc:50:10:
2b:3d:ad:3c:dd:08:ff:96:7f:d2:95:b5:d7:26:2f:d6:bb:da:
c4:ef:ec:0d:c7:12:53:98:7d:c5:27:41:ab:61:65:1b:97:39:
d5:c4:c2:35:f1:89:8b:46:1e:73:6f:e3:13:c5:d0:fe:97:a4:
64:79:99:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 18:08:14 2025 by rpki-client