Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
File: kMABN-5t-utOpII7wXPDvAADHfk.mft (raw, json)
Hash identifier: Woxazj/TrSxeWuffCUacLZQhrMCtOABEN1W4vZhOdDI=
Subject key identifier: 87:56:23:C2:EC:03:AA:4B:0A:76:96:85:AF:23:2C:E0:BD:74:5F:18
Authority key identifier: 90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
Certificate issuer: /CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Certificate serial: 0196550087E3BEE702E710424AF9D4AEC66C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
Manifest number: 04E3
Signing time: Sun 20 Apr 2025 21:00:20 +0000
Manifest this update: Sun 20 Apr 2025 21:00:20 +0000
Manifest next update: Mon 21 Apr 2025 21:00:20 +0000
Files and hashes: 1: FCW2bGoLdcM6i-Jx_GrHtMzXAlk.roa (hash: WJgWrgAT99wsdStIPz/Fl698liisGeyhumyE7tw/O7c=)
2: kMABN-5t-utOpII7wXPDvAADHfk.crl (hash: EdbnK3/2kw/StK9laKiWSnBa7NvzAm8Vohx4BnFXiqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:87:e3:be:e7:02:e7:10:42:4a:f9:d4:ae:c6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c00137ee6dfaeb4ea4823bc173c3bc00031df9
Validity
Not Before: Apr 20 21:00:20 2025 GMT
Not After : Apr 21 21:00:20 2025 GMT
Subject: CN=875623c2ec03aa4b0a769685af232ce0bd745f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:77:08:90:d7:81:fa:3c:2c:f9:25:d9:eb:4d:
53:f7:c2:31:05:91:e4:d4:c2:46:14:7c:b3:b3:4c:
31:51:a1:41:b9:69:29:c2:69:36:8e:e2:23:cb:bf:
f3:cf:3f:8e:e2:32:55:d1:69:be:c7:86:a1:23:70:
93:a3:70:f7:2d:30:36:52:d5:af:04:cb:03:99:d9:
b5:a1:ec:2a:05:4f:c9:e7:2f:83:01:4b:0f:3a:2a:
c5:75:c4:b3:d0:0a:fc:b7:ce:3c:3e:c6:66:72:12:
6a:59:1f:ad:de:5c:6e:8f:7a:08:d5:f8:aa:28:49:
ee:82:d1:1c:86:b9:f6:89:2a:68:67:f4:ff:b4:03:
b7:0f:50:d9:29:d2:76:47:de:ae:7b:0c:80:47:c4:
6a:d4:5d:67:60:d8:42:eb:ba:14:a2:44:72:18:77:
4e:e8:47:22:f8:3a:3a:70:13:74:42:7e:46:3d:ce:
4a:87:61:a5:f5:81:32:b4:64:36:18:a9:26:bd:1d:
63:3f:29:95:65:d9:bb:93:12:a7:a9:64:26:cc:19:
55:05:0e:d9:65:6c:e0:b6:ad:2b:53:3e:5b:75:d3:
55:d5:63:4c:67:20:11:63:22:35:60:a5:dc:be:1d:
06:d1:07:ca:3b:e6:93:77:d5:08:0c:1a:5b:db:38:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:56:23:C2:EC:03:AA:4B:0A:76:96:85:AF:23:2C:E0:BD:74:5F:18
X509v3 Authority Key Identifier:
keyid:90:C0:01:37:EE:6D:FA:EB:4E:A4:82:3B:C1:73:C3:BC:00:03:1D:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMABN-5t-utOpII7wXPDvAADHfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/be370e-6729-4df7-aabe-0a525b69db8f/1/kMABN-5t-utOpII7wXPDvAADHfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:9a:65:54:c1:88:1a:13:c1:2a:d5:66:66:ac:52:d6:3d:84:
9b:c5:f9:c8:c6:73:a5:52:23:63:64:00:d5:bd:c3:9d:e2:45:
03:f7:f7:ce:a2:2d:8b:34:88:6f:f0:6b:ff:82:49:1f:85:7d:
f6:56:df:f4:91:fd:09:c4:fa:92:77:c6:35:3b:59:80:2b:d2:
55:ca:29:97:cb:43:c3:16:e9:0a:56:9d:03:d7:a4:b9:d7:c7:
42:77:7b:0e:26:30:6b:2f:28:07:e6:33:3b:24:48:d7:fe:0c:
30:4c:83:2b:9f:f6:63:1c:54:79:0a:9a:4f:00:fd:08:ce:92:
40:f2:42:d9:fd:9f:23:c1:c2:87:76:a6:de:25:6e:ef:db:4c:
43:87:ff:ef:ab:7c:d2:a3:f8:12:0c:54:56:46:8d:6a:fc:01:
70:12:4d:9b:94:e8:70:a3:ff:a6:63:6c:01:f1:57:91:80:1f:
ef:52:c2:8b:cb:50:a9:72:5f:6c:92:e3:ef:f9:ce:ae:6c:89:
82:2a:78:8e:56:d7:fc:d5:64:0f:c2:cb:5e:a9:74:85:18:49:
ad:51:ec:67:b8:cd:71:71:40:29:18:e2:e2:1d:87:eb:e2:21:
7a:c4:d9:0a:b0:ee:c7:89:a1:cd:2a:61:f1:5f:40:5e:26:0d:
b0:41:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:27:56 2025 by rpki-client