Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
File: khkujXhVgfcrGGRCJL2MP6ii0Rs.mft (raw, json)
Hash identifier: uJbA4q3zTsKrgtKU8/6WktK5NOFAJGzXvXTaob4xUv4=
Subject key identifier: 54:C1:39:A5:F0:12:7C:3A:A2:8F:2E:CE:02:26:68:57:63:D7:E4:86
Authority key identifier: 92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
Certificate issuer: /CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Certificate serial: 01965A2731EAD48DFF814D120C4842027361
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
Manifest number: 0F44
Signing time: Mon 21 Apr 2025 21:00:40 +0000
Manifest this update: Mon 21 Apr 2025 21:00:40 +0000
Manifest next update: Tue 22 Apr 2025 21:00:40 +0000
Files and hashes: 1: WCwlNGrnqXg0s07Q732U-2ylHg4.roa (hash: JC3pVBoWwnSgFg4cCXzdGvV9c4AWdX+y7n3AH9a1Lis=)
2: khkujXhVgfcrGGRCJL2MP6ii0Rs.crl (hash: EE62A09O4E2101Ih+4t2PjT60otYjh+FweIylWpQkFA=)
3: t3CZxHGrmtZmDELdMlXKtGYh3K0.roa (hash: EXeLpekUpbHYH7Cv6iD93sC4B2Y1Gc771dCHFnYz00s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:27:31:ea:d4:8d:ff:81:4d:12:0c:48:42:02:73:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92192e8d785581f72b18644224bd8c3fa8a2d11b
Validity
Not Before: Apr 21 21:00:40 2025 GMT
Not After : Apr 22 21:00:40 2025 GMT
Subject: CN=54c139a5f0127c3aa28f2ece0226685763d7e486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:85:a6:05:6d:c9:68:87:ef:3f:8b:78:11:
dc:7a:0e:fd:f4:5f:09:e7:32:09:0a:b1:38:85:ac:
65:25:4d:fb:05:97:06:96:e8:b5:ff:99:27:ea:4e:
37:32:71:03:0d:71:2f:c2:b0:6d:37:2b:72:2a:61:
65:2e:08:9c:11:f1:a0:2c:95:e3:25:b2:0f:2d:98:
48:41:66:c8:5f:f2:5b:ce:9a:03:82:b8:5f:d4:91:
c4:34:19:fc:98:9b:90:4d:62:ad:0b:74:44:41:1f:
0b:25:06:80:79:66:1a:98:0d:e5:20:7f:d6:38:d2:
1d:dc:b2:74:e6:6c:d0:0d:cb:75:a5:be:83:85:a7:
f5:c6:76:48:cf:b8:12:ba:6e:9c:4e:db:cc:b5:54:
88:e8:20:da:e5:4e:0d:bf:b6:58:6c:5a:5d:4a:03:
ab:1b:ca:b3:b7:99:43:7a:e4:a9:14:6c:e2:46:5d:
fc:2a:af:a6:bf:cf:e4:e9:8b:ca:e2:5b:c3:1f:f6:
d5:2c:e3:1d:ac:c2:dd:73:2b:8e:da:7a:8d:b5:19:
51:35:fe:14:bc:6e:2f:06:83:9c:4b:44:5c:c7:67:
d6:c9:49:ba:33:28:9f:9e:a3:4e:bf:36:f2:f2:60:
da:bf:95:c6:1e:f5:cb:48:4c:b9:d1:7c:83:95:31:
99:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:C1:39:A5:F0:12:7C:3A:A2:8F:2E:CE:02:26:68:57:63:D7:E4:86
X509v3 Authority Key Identifier:
keyid:92:19:2E:8D:78:55:81:F7:2B:18:64:42:24:BD:8C:3F:A8:A2:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khkujXhVgfcrGGRCJL2MP6ii0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d9b397-e105-4ac9-8537-0085a365a25f/1/khkujXhVgfcrGGRCJL2MP6ii0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:29:f9:80:e3:83:d9:d6:8d:b8:6f:94:74:85:4e:ac:3d:ac:
bd:41:12:ec:94:ee:62:0e:ec:91:c9:1c:de:af:f5:06:16:4f:
af:53:ed:20:b9:2c:29:b2:94:3d:24:7e:65:95:0a:97:91:bc:
27:f7:88:41:36:5b:03:39:54:96:5f:70:a4:77:b2:22:36:94:
c7:26:60:2c:de:0e:f8:d9:8f:d8:d2:64:df:00:e5:74:0f:3d:
72:9f:cd:a9:2b:87:ca:3a:ff:ca:45:f7:47:fa:9f:d0:37:e2:
e9:06:7b:1a:f6:ed:48:5a:9b:5c:b5:90:dd:2d:46:79:3d:b4:
33:fa:8f:4c:c7:b5:98:4f:4a:cc:9b:b4:89:52:76:d1:e3:a7:
1b:69:11:9b:1e:c7:78:c6:9d:d9:74:ec:c1:85:83:9c:2e:a8:
b5:c9:f4:29:78:66:9a:56:59:0a:61:0e:31:33:9b:27:55:0f:
ea:42:11:ba:fe:11:4b:c9:74:aa:a2:81:74:a8:52:43:af:df:
6a:cd:12:77:08:88:89:ec:ac:33:00:2b:1a:86:0c:c3:7f:c8:
92:10:56:f9:59:53:f4:14:48:c5:96:e4:bd:09:ea:af:dd:4a:
24:6f:3f:ec:34:ab:4d:61:59:08:83:e7:dd:45:58:61:66:5d:
fe:31:89:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:52 2025 by rpki-client