Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: Rqa79G4OWvovwTAqizeznSSjKsGvxPSAeJdAbxiVq8M=
Subject key identifier: C4:C9:23:4E:9F:69:74:47:69:F8:03:39:FD:18:3B:17:37:5E:17:19
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 019659148E40AAED380CA82F6C67283B9A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0BCC
Signing time: Mon 21 Apr 2025 16:00:41 +0000
Manifest this update: Mon 21 Apr 2025 16:00:41 +0000
Manifest next update: Tue 22 Apr 2025 16:00:41 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: 1Ld66ID3NSjtfgi026naCtNYewBw7MTFi5fVqrJ3F4Y=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:14:8e:40:aa:ed:38:0c:a8:2f:6c:67:28:3b:9a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: Apr 21 16:00:41 2025 GMT
Not After : Apr 22 16:00:41 2025 GMT
Subject: CN=c4c9234e9f69744769f80339fd183b17375e1719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:70:4e:b6:15:4f:d1:b7:bc:33:8b:cd:56:
50:4c:30:cf:c8:ee:ab:27:74:55:ff:4c:7b:2a:38:
ab:d9:6d:e8:a9:4a:e0:83:91:88:20:db:cf:18:c8:
ce:dd:96:9d:bd:46:15:25:f8:ec:0f:43:03:f4:6f:
1b:71:be:54:a9:a2:b3:57:1e:9c:8d:ca:cb:47:13:
3a:ce:53:52:e4:af:9f:6f:2d:1f:c0:1a:99:6b:6f:
e5:8e:63:cc:2e:a3:a9:6a:7b:e0:15:01:a7:f3:9c:
6d:ca:d2:47:da:d6:97:1a:41:f2:2e:2a:f6:c0:2c:
86:8b:a6:55:97:d3:d1:c6:67:52:3f:47:4b:a6:79:
5d:7a:cc:25:fa:2a:2d:19:60:57:25:7b:8d:ce:3b:
d7:0c:27:0a:42:e2:53:da:56:98:39:89:65:d3:b6:
79:59:65:93:b7:43:fd:42:24:74:73:f5:5c:d6:93:
00:1a:d0:b7:28:13:c4:05:1c:4c:ec:2b:55:00:f2:
cf:82:ce:4f:7a:9f:43:bb:99:a1:56:22:18:65:d1:
e9:06:eb:ae:ff:fb:09:2f:3d:d1:1b:7a:4c:f3:b1:
94:73:b2:a1:fe:2c:88:73:60:61:fd:e2:db:d7:78:
bf:8f:34:fa:62:1d:a8:4f:e3:71:77:a5:56:df:3e:
0f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C9:23:4E:9F:69:74:47:69:F8:03:39:FD:18:3B:17:37:5E:17:19
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:02:c7:2b:62:95:71:cf:b5:70:d4:aa:9c:b0:ff:1b:46:06:
ee:75:f1:a6:34:6f:24:4d:00:8d:9b:d1:0a:24:ad:66:45:59:
7b:fa:93:e7:2b:65:de:db:69:0a:d1:21:c4:da:de:73:a1:95:
e7:a6:a4:83:ed:11:ca:5c:4f:ad:81:79:f9:12:4a:8d:8c:e9:
af:2f:f6:61:9a:ae:75:e0:58:c2:0c:ce:16:22:ca:ea:e7:8f:
4d:f4:57:af:aa:cf:87:8d:ba:09:92:5e:eb:ea:1d:26:6a:44:
37:e1:05:ab:9e:34:4b:a3:08:ef:69:bf:54:f5:2f:2a:f7:01:
d3:f5:28:a3:aa:be:fc:45:f9:80:8b:1d:e9:3f:17:06:4d:1f:
c7:79:89:1d:f9:e8:29:e6:5f:57:e2:97:6c:e6:04:4c:de:02:
6f:85:6f:e4:4d:a6:9b:12:ae:04:2d:98:94:70:b2:47:87:29:
e2:52:eb:a4:93:be:15:fa:da:59:be:86:7b:75:54:2d:18:16:
c0:cb:75:3f:ad:ea:83:43:df:0a:9e:5c:3f:08:93:ea:b6:81:
42:8f:02:af:76:33:3b:85:30:20:7e:f8:e6:8f:29:6c:d2:9a:
ca:9f:a7:c7:73:e0:e9:f8:4d:c5:77:b1:b3:b6:83:db:30:b9:
45:bd:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:01:57 2025 by rpki-client