Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
File: kCGOgBpTJZXptxxkNoTqBflr9fM.mft (raw, json)
Hash identifier: wUsMkUbGOvpLfDlz0VsjECHZ9mlcyqDFSXV7HyyUJOo=
Subject key identifier: 89:0B:05:7E:12:F7:BC:59:AC:98:94:8A:B5:A2:77:1B:84:6C:52:5E
Authority key identifier: 90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
Certificate issuer: /CN=90218e801a532595e9b71c643684ea05f96bf5f3
Certificate serial: 01965E71CAAF96533D3398C4AAEE814AABF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
Manifest number: 0267
Signing time: Tue 22 Apr 2025 17:00:37 +0000
Manifest this update: Tue 22 Apr 2025 17:00:37 +0000
Manifest next update: Wed 23 Apr 2025 17:00:37 +0000
Files and hashes: 1: kCGOgBpTJZXptxxkNoTqBflr9fM.crl (hash: V/eHy7t+wMH7WtIbPs2ytP31QMkB0UE9G2puioqRNHQ=)
2: wO4tKRWBwJAF_Ti9XP-8yjRZuUU.roa (hash: G7Rk/RipLXF/QPRugyDtoGfESmr50WO1Zig00oPYW14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:71:ca:af:96:53:3d:33:98:c4:aa:ee:81:4a:ab:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90218e801a532595e9b71c643684ea05f96bf5f3
Validity
Not Before: Apr 22 17:00:37 2025 GMT
Not After : Apr 23 17:00:37 2025 GMT
Subject: CN=890b057e12f7bc59ac98948ab5a2771b846c525e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:05:49:35:d0:74:1a:80:80:42:32:43:b0:5e:
bb:bb:8b:e8:b5:c6:5a:d6:5d:bc:b1:20:9d:4b:8d:
f2:fa:61:f3:b0:5d:44:f5:87:63:22:59:dd:ff:10:
0c:6d:47:de:9c:77:7c:b7:6d:f9:f7:8e:3d:2b:33:
36:af:4a:62:88:6c:72:61:7f:86:3d:dd:8a:8f:d8:
88:79:24:02:f2:da:5c:dc:dc:69:61:d4:c1:28:1d:
4b:15:96:b6:3a:05:43:cc:2b:be:97:60:b5:61:a3:
67:20:33:6a:78:56:60:04:0e:b2:5d:b5:f4:d7:52:
a8:64:1a:13:d5:8e:75:4d:96:7c:79:a4:61:7a:79:
ef:3d:02:d8:7c:4e:2b:c6:fa:f2:3f:be:bf:68:29:
c9:22:aa:a9:95:0c:59:c5:d7:84:1c:2d:60:00:43:
21:9f:f5:84:9b:b9:05:f3:59:53:12:26:ba:f0:49:
0b:59:60:3c:f7:a9:02:a7:7e:ff:32:54:87:9c:90:
86:7b:ad:70:a0:cc:1b:5e:6b:17:5a:74:df:bb:5e:
1b:b1:d1:5d:66:26:9a:23:c0:e9:8c:ef:59:d9:92:
f1:17:4b:07:32:f7:c5:61:e1:14:7b:82:64:7b:d9:
24:80:a3:2b:c4:4c:06:38:0a:e3:48:f9:78:7f:a7:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0B:05:7E:12:F7:BC:59:AC:98:94:8A:B5:A2:77:1B:84:6C:52:5E
X509v3 Authority Key Identifier:
keyid:90:21:8E:80:1A:53:25:95:E9:B7:1C:64:36:84:EA:05:F9:6B:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCGOgBpTJZXptxxkNoTqBflr9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/1b6624-8441-4d01-96e3-601812ef428b/1/kCGOgBpTJZXptxxkNoTqBflr9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9c:04:57:9c:d4:52:b1:fc:17:fe:94:f1:48:45:6e:8b:01:
b4:49:46:ef:b9:ed:34:02:ff:63:b8:1f:69:a7:56:bc:2f:9b:
b8:45:95:f6:69:06:dc:5c:66:c3:0a:c9:7b:83:6d:c6:aa:9f:
2e:3f:37:b1:81:61:9b:cd:1f:c6:63:99:d6:7f:9d:a8:23:13:
2a:d4:ac:19:a6:59:bc:e6:4e:4a:35:f9:a5:b1:07:25:de:a3:
09:e5:dd:ef:4b:75:d9:df:b8:14:f6:9d:59:52:de:c5:23:25:
83:06:2d:34:80:e3:be:e3:73:ff:a0:b5:2a:23:ec:0c:6b:23:
0b:ee:bb:98:a3:a3:9c:96:b6:a3:f9:2c:92:b7:53:2d:70:99:
b9:a1:b2:bd:3d:34:21:1c:fc:1d:6b:ca:67:32:e4:5a:9f:25:
b3:ec:08:0b:89:37:a7:b4:5b:21:de:94:76:c4:cd:b1:1d:d2:
43:4d:7d:84:18:de:c5:e3:0a:27:15:1d:c1:a5:44:3b:be:1e:
1b:06:94:8d:28:eb:50:ba:b4:ae:86:23:4a:aa:4a:b1:6c:cd:
28:1a:ff:14:90:3e:f1:de:92:40:a8:45:c8:8c:55:d2:42:da:
2d:14:52:4e:d2:23:6f:51:99:d6:76:44:d2:11:35:d0:2a:e0:
a0:94:b7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 19:23:20 2025 by rpki-client