Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: 5ZnC4TWP+WiCekmbh8DrINuZKEwM7wszddMO2uTqHdw=
Subject key identifier: 72:75:EF:7E:22:11:6D:1E:DB:69:83:C0:B1:C9:AE:47:84:8D:C5:C9
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 01965793FF0A36FF5BA283AE2C9C50C7D005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 08AB
Signing time: Mon 21 Apr 2025 09:00:38 +0000
Manifest this update: Mon 21 Apr 2025 09:00:38 +0000
Manifest next update: Tue 22 Apr 2025 09:00:38 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: E/D3l0f7wO7zEs3ei7FW7NWsCkyL4s8bwhwyaCrWfvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:93:ff:0a:36:ff:5b:a2:83:ae:2c:9c:50:c7:d0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Apr 21 09:00:38 2025 GMT
Not After : Apr 22 09:00:38 2025 GMT
Subject: CN=7275ef7e22116d1edb6983c0b1c9ae47848dc5c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d7:58:2d:6d:6b:12:b2:76:7f:b3:96:58:e7:
2c:35:34:8c:9c:0b:e8:62:45:d6:88:d0:d3:64:e4:
b4:69:c2:a1:d5:03:0b:2c:af:21:b2:3a:a9:04:92:
e2:e3:36:41:4d:d0:5e:da:6f:a3:34:a1:20:54:24:
42:ec:52:f0:d5:00:16:83:bf:85:27:78:cb:70:17:
6f:66:1f:95:31:a9:fa:34:ad:a8:52:a2:5c:bd:23:
29:0a:98:55:b9:70:ff:93:bd:0a:59:32:3a:ba:b9:
9f:f7:90:b4:bb:b8:fa:18:bf:83:44:d6:5f:1f:eb:
78:fb:c0:32:0f:cc:a1:79:0e:4d:27:20:97:c4:8b:
82:67:df:2f:42:4e:e8:1d:05:35:46:47:c5:13:67:
27:ab:c5:0e:23:17:5f:fd:83:20:5f:9b:6e:94:c3:
c1:de:5a:5b:35:1d:80:a1:02:65:29:b9:37:05:78:
19:46:05:a7:07:37:82:82:47:39:e2:82:2a:b5:45:
cd:98:7a:9c:e8:86:70:c4:3f:3a:70:f7:23:2c:48:
d4:a6:86:37:53:62:59:de:1e:35:78:b0:2f:fd:fb:
e4:11:60:af:c9:ae:2c:f1:b9:71:60:61:69:3c:20:
75:11:b6:10:d1:b6:ba:08:cc:f0:e9:61:af:12:55:
2f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:75:EF:7E:22:11:6D:1E:DB:69:83:C0:B1:C9:AE:47:84:8D:C5:C9
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:ef:b8:33:f1:35:9c:df:ff:98:3a:e8:f5:fa:ef:54:67:61:
48:06:9e:dc:ba:dd:5a:f4:da:a9:42:a2:51:8d:8d:1d:ab:9b:
e5:b0:68:f0:43:cd:63:29:c7:54:55:bd:00:72:20:3f:83:04:
80:71:63:a2:42:06:55:c2:22:a7:8b:82:1a:55:ee:a2:b7:e5:
8f:bf:35:fa:cc:28:fa:8e:21:a4:91:a5:9d:a0:01:9a:f5:c3:
90:c8:d2:ee:5f:90:6e:09:00:98:32:26:8d:57:37:28:24:02:
cc:4e:06:db:c5:1b:fd:6a:2a:34:90:86:c6:18:7c:c3:8c:86:
35:d8:d0:0c:b2:b4:9e:d7:cd:66:86:0c:50:64:82:e8:09:c8:
a5:63:b1:64:38:d3:64:57:c3:e0:9f:a9:ee:ae:76:56:bb:96:
19:cc:22:db:0f:5e:ee:4d:e9:df:63:52:b0:12:94:a3:2c:22:
b7:b9:90:22:2f:d2:12:bd:22:47:b3:e7:8c:c1:63:e8:ea:3e:
5f:d2:7c:99:7e:a0:9d:9e:de:67:3d:0c:df:b0:77:34:de:b2:
2d:f4:9c:07:40:79:44:3a:d6:fd:05:06:81:38:b6:f7:6e:44:
71:2b:8e:66:d6:44:b8:83:a4:2e:b1:26:77:1d:9c:37:4d:59:
4f:24:19:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:43:32 2025 by rpki-client