Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: 9MwrNQijePQy7PcpjjnvdiPHVrOMsgvViFHDmLfZXlo=
Subject key identifier: D8:A2:15:CC:A8:77:4F:2B:88:02:AE:30:D2:58:DD:36:DD:41:43:DF
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 01964BC6EDA0C1645EE66F9040DE94F8A698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 0201
Signing time: Sat 19 Apr 2025 02:00:50 +0000
Manifest this update: Sat 19 Apr 2025 02:00:50 +0000
Manifest next update: Sun 20 Apr 2025 02:00:50 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: bQr0e8mDbsk5GGygUhUxWKMbxuJp+9wWBRhKnrpb5Mg=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:ed:a0:c1:64:5e:e6:6f:90:40:de:94:f8:a6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Apr 19 02:00:50 2025 GMT
Not After : Apr 20 02:00:50 2025 GMT
Subject: CN=d8a215cca8774f2b8802ae30d258dd36dd4143df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:0a:b4:c3:64:0c:b2:f3:19:e4:7c:ac:a8:03:
3d:af:0f:24:3b:c9:f6:9a:84:6e:10:27:fe:87:7d:
51:01:64:32:4c:0b:e7:eb:90:7d:e3:2e:fb:3a:b0:
dc:3e:a7:e4:3a:93:33:b8:46:72:7b:11:eb:7a:87:
aa:27:18:ad:63:06:2f:60:cb:f7:3e:7b:fa:a5:6f:
81:ec:21:d2:74:3c:a1:b3:63:eb:26:28:4c:eb:4e:
5c:c3:37:07:89:0b:ab:83:da:dc:60:6f:a2:f6:14:
1a:1d:3f:ee:e8:d8:e0:bf:99:69:d7:ad:0e:ba:c8:
76:14:eb:0b:c4:10:d6:25:80:de:d4:36:c4:76:fd:
9b:50:d3:27:2f:d8:e8:f5:0f:82:e6:57:d4:33:69:
94:d2:93:41:50:cb:e0:e7:d1:c1:16:92:04:cf:a3:
54:d6:cb:95:88:f4:16:1e:51:9b:7c:8d:d7:1c:c8:
59:b4:fd:57:7f:a6:c0:ca:8b:c7:42:69:dc:33:53:
dc:80:e4:57:8c:13:48:17:1e:10:58:57:2e:cc:2e:
04:cb:ff:02:de:10:8b:31:ed:af:8a:df:5a:71:12:
6f:a8:89:68:92:dd:f2:0f:70:1d:d4:a6:22:1f:84:
17:87:78:d7:32:90:41:11:b8:2c:25:4c:59:d8:46:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A2:15:CC:A8:77:4F:2B:88:02:AE:30:D2:58:DD:36:DD:41:43:DF
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d3:46:aa:07:f2:db:5c:7a:c3:be:4b:b7:41:0f:68:47:18:
c0:71:64:3c:04:5c:b0:2e:88:39:7d:5f:19:20:c4:68:ea:fa:
8e:e1:81:55:83:43:18:f3:c5:b9:b2:8a:8d:58:f9:30:dd:2b:
b4:76:35:89:9a:71:df:73:a7:a0:22:23:86:22:cb:3c:48:71:
9e:8b:ad:ce:1e:28:de:c4:0b:14:d3:e0:01:0c:18:d6:25:bb:
e8:6e:bb:a2:cf:7d:71:e2:b8:68:81:a7:bc:57:d2:78:a3:9c:
7c:d6:1c:78:57:53:d8:1e:75:8d:68:3f:e5:c7:48:55:d1:b3:
83:01:91:9e:c2:5f:16:29:46:9a:e8:1f:fb:1a:31:e0:b1:56:
ff:fd:cd:1e:5e:e2:dd:49:17:6d:6c:b9:47:32:03:b4:e1:ee:
9c:47:25:76:1f:fd:5e:54:16:db:4f:6b:77:5b:5f:cb:39:59:
0c:cd:1a:43:ca:b1:ea:92:5c:bc:47:71:10:38:03:8b:c9:6e:
e4:04:26:4f:30:a8:a1:b4:fe:02:47:87:d2:29:6d:4d:90:fa:
97:46:cc:19:f8:1e:c7:10:d4:ba:cd:ff:95:d6:5c:cb:24:a7:
d6:ff:87:5f:4a:7f:19:05:4a:39:f7:de:d2:73:0b:73:88:e8:
38:9f:b7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:40:42 2025 by rpki-client