Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
File: kd0jFN2bfGHXHU2-2o-jllxCRXA.mft (raw, json)
Hash identifier: U6BJtS/ukvq/ti7QKpllCz1RcM7WlThuyazH/uBt65E=
Subject key identifier: 94:BB:28:34:16:00:FA:2D:55:82:35:85:13:05:C8:22:13:21:84:2E
Authority key identifier: 91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
Certificate issuer: /CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Certificate serial: 0196553849155716126E31D2F3E539F99C4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
Manifest number: 11BB
Signing time: Sun 20 Apr 2025 22:01:14 +0000
Manifest this update: Sun 20 Apr 2025 22:01:14 +0000
Manifest next update: Mon 21 Apr 2025 22:01:14 +0000
Files and hashes: 1: 1QgdyuQWVblUntU5znb6VUOcImg.roa (hash: 8ewfHwhOXDGmHEAryCOm3WfF+5LJGrecBJVM/3LIdo0=)
2: kd0jFN2bfGHXHU2-2o-jllxCRXA.crl (hash: kvW4PHdwWN40rP3mkAE5e5Kj0gv+rVysAbRgle+7XZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:49:15:57:16:12:6e:31:d2:f3:e5:39:f9:9c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91dd2314dd9b7c61d71d4dbeda8fa3965c424570
Validity
Not Before: Apr 20 22:01:14 2025 GMT
Not After : Apr 21 22:01:14 2025 GMT
Subject: CN=94bb28341600fa2d558235851305c8221321842e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9a:da:9c:dd:44:bf:35:8d:50:7c:a3:3a:c0:
e6:ab:ec:4a:e4:08:4f:64:4b:43:8f:eb:28:25:34:
b1:f7:4f:2a:c8:7b:83:be:41:cb:1b:28:7c:10:26:
4a:0b:fc:c0:e9:43:f8:8a:15:c6:81:af:68:05:b7:
ad:b0:c9:33:79:b9:9d:3d:62:92:b8:a3:21:a2:6e:
18:bc:6a:17:51:9a:ed:14:19:ba:5a:f1:9e:f9:61:
94:3c:5b:3d:7d:a9:95:52:b3:6a:6d:7c:98:6e:79:
8d:29:af:43:31:ef:07:b4:e0:e3:ab:4d:26:00:2c:
a4:b5:d1:39:cb:6e:3e:18:b2:98:d8:b9:05:fc:7b:
38:62:95:49:e0:d6:ac:4e:38:4c:c5:64:cf:3c:92:
a2:e1:15:6d:b6:f9:44:47:3f:e4:ab:93:f4:a4:64:
52:d0:2e:0f:27:64:01:60:04:a6:9a:ba:90:ad:08:
54:35:a5:bc:85:9f:c4:2c:95:88:6e:1d:c3:11:48:
fb:2e:4d:89:7a:65:94:08:8c:d4:67:f1:43:65:6b:
af:4c:bc:c1:10:22:38:3d:2c:35:52:27:b2:59:d0:
f1:ff:2a:ee:38:5f:97:6d:fe:22:59:8f:6e:e0:f5:
ed:72:7a:8d:f9:44:05:e0:a2:b1:fe:f4:0e:f6:46:
c6:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BB:28:34:16:00:FA:2D:55:82:35:85:13:05:C8:22:13:21:84:2E
X509v3 Authority Key Identifier:
keyid:91:DD:23:14:DD:9B:7C:61:D7:1D:4D:BE:DA:8F:A3:96:5C:42:45:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kd0jFN2bfGHXHU2-2o-jllxCRXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/063fa4-17de-4595-bc86-ce4b6250bb4d/1/kd0jFN2bfGHXHU2-2o-jllxCRXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b4:b2:70:f2:98:d2:db:87:da:ca:16:1f:82:67:ab:63:a7:
d4:1f:01:4f:05:01:8f:8b:fe:e9:49:2d:63:c0:23:c5:c1:15:
e1:f5:0d:d1:d5:f9:07:f7:6a:b1:83:3a:3a:7a:42:ad:df:09:
03:73:68:41:2d:b7:72:7f:63:db:9b:9f:42:f9:d1:c1:8b:ad:
b5:ee:bf:d6:56:75:f1:9c:dc:9d:19:db:38:0b:64:17:5f:29:
f1:07:50:b8:55:96:53:0a:be:e6:ff:45:f7:d4:5c:49:5a:8e:
09:77:41:28:86:52:de:4d:ad:13:46:9b:fd:16:39:c2:b1:c9:
89:73:2e:e6:01:5d:55:32:5a:d8:b8:48:dc:97:06:af:41:92:
73:e7:46:c2:a9:dc:65:3e:09:5a:f7:0c:f3:a5:1e:0a:67:f2:
f0:7c:93:fe:43:70:6c:da:69:c0:9e:f3:c0:96:6c:bf:6e:19:
da:a5:1d:37:c2:9e:c3:f1:a2:54:3b:17:5a:15:c6:30:69:f5:
50:f9:6e:77:38:81:1a:0b:68:ff:8d:51:dc:b4:fc:62:fd:f5:
ff:ce:cd:1c:f4:de:0e:db:ec:d7:42:9c:92:a6:1c:f9:25:ca:
4a:94:df:82:22:cb:c4:69:21:4a:79:c0:2a:57:0c:92:7d:64:
7e:c9:31:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:05 2025 by rpki-client