Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: EgSj2/hQtYJH3zXd2JrO5QSu14xrB19ro9mLdndnhec=
Subject key identifier: 7C:8D:6F:BC:B0:11:DB:56:29:89:40:F3:EB:D7:2B:6E:CB:57:1B:45
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 01965793C374FBFFFFE0549E85762A8E7E45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 14FF
Signing time: Mon 21 Apr 2025 09:00:23 +0000
Manifest this update: Mon 21 Apr 2025 09:00:23 +0000
Manifest next update: Tue 22 Apr 2025 09:00:23 +0000
Files and hashes: 1: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: MkeuoLt278VqdmTHUMGEkoslF6hO3+wzLChEd7f8xy0=)
2: u-dAmjX4oqcf2iXVI7lxfelsBMA.roa (hash: XLlmaFeeXeZeIUJOi3DmWDwWe9ndlrrcSMKKooeEWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:c3:74:fb:ff:ff:e0:54:9e:85:76:2a:8e:7e:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: Apr 21 09:00:23 2025 GMT
Not After : Apr 22 09:00:23 2025 GMT
Subject: CN=7c8d6fbcb011db56298940f3ebd72b6ecb571b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:a6:9d:6e:18:bd:4d:3e:70:36:21:93:ac:
9d:ac:00:91:e3:e3:c2:3a:f0:e0:d8:93:ef:71:1a:
47:05:51:df:19:3e:34:00:a8:b7:da:79:20:3e:b5:
56:f9:59:ef:ca:ae:c1:49:a9:d4:86:e1:b4:f8:f0:
64:ab:37:ec:5d:85:0b:8b:57:ed:15:63:45:47:04:
52:c8:43:3d:a3:47:08:94:6d:69:7c:fb:b1:f3:da:
34:c3:d1:26:88:2c:e0:50:b0:87:d0:5c:f4:0d:71:
70:90:c9:60:d2:c4:b9:5b:73:a4:ab:f7:6f:f1:52:
fe:54:24:28:d4:a5:4b:b0:95:5b:5a:49:d3:dc:34:
73:f8:7f:9b:ac:e0:dd:33:dc:51:17:44:e0:ec:70:
67:a1:c6:1d:04:34:bd:f0:cc:7f:53:70:24:64:90:
20:a4:c8:07:e4:13:0d:8f:a2:0e:70:7f:04:f9:ee:
28:60:9d:11:e6:af:f9:42:58:43:ac:e4:83:f1:03:
2a:05:e8:f5:56:2a:ce:cd:4c:bb:e6:7b:38:fb:7f:
eb:05:8f:78:8e:14:83:ca:c6:79:45:e6:85:bc:19:
6f:55:dd:bd:00:3b:73:61:e4:69:a6:49:c9:83:6a:
eb:83:84:2f:42:93:d3:78:af:63:ef:c4:d4:d8:ad:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8D:6F:BC:B0:11:DB:56:29:89:40:F3:EB:D7:2B:6E:CB:57:1B:45
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:bd:59:6b:0d:65:b6:93:43:a8:b1:21:32:87:16:40:c8:67:
d1:9f:7f:19:d2:04:77:02:a8:c0:8a:6d:47:f3:73:03:c5:0e:
59:0c:2c:a6:c8:9d:47:fd:bf:d7:6e:ae:20:b5:32:aa:85:de:
2c:dc:08:03:32:9f:9d:29:58:67:23:10:bf:68:52:4d:49:06:
25:1e:3d:5b:10:a9:38:36:ea:8a:b4:2b:9a:a8:7a:cb:9c:0e:
9d:bb:6e:7f:01:67:37:9d:09:7a:95:de:29:1a:2a:c5:d1:d9:
69:4e:3f:81:65:26:53:18:9e:b9:89:38:f6:52:54:6f:8a:93:
59:d3:2b:30:c4:16:b8:5e:b3:ba:a6:a2:72:35:91:23:ca:c5:
38:08:fa:f7:ab:a1:1d:4a:3a:f6:b7:23:1d:2c:d5:b8:d2:85:
43:e5:64:00:08:f6:7b:3f:d9:64:76:53:cd:ba:9b:ed:de:b6:
66:08:83:cc:f1:20:ee:d5:2d:d1:42:3a:04:76:0e:d9:6e:2f:
72:25:0c:5a:bb:8c:38:23:89:8e:02:84:94:42:21:65:24:d2:
0b:03:c1:a5:d5:d2:73:78:62:30:6b:b8:0f:c6:0b:21:88:d8:
d1:24:9b:a3:39:99:65:4b:9c:8e:ad:36:d7:15:df:cd:c7:0a:
3f:dd:74:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:48:26 2025 by rpki-client