Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
File: Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft (raw, json)
Hash identifier: VA+BXuGIuRQHTGnpIZBesRzsCoGh0NvKoAkO+lcHh20=
Subject key identifier: 28:BB:5C:25:37:36:18:DF:E9:3C:03:41:51:32:54:33:83:E1:B4:54
Authority key identifier: 2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
Certificate issuer: /CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Certificate serial: 01965613C5522F362463F14B404102A2A6F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
Manifest number: 0E2C
Signing time: Mon 21 Apr 2025 02:00:58 +0000
Manifest this update: Mon 21 Apr 2025 02:00:58 +0000
Manifest next update: Tue 22 Apr 2025 02:00:58 +0000
Files and hashes: 1: Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl (hash: U8gf5fc2QaOUx+Fv+L5zctwdj5aVs9zjj/UOtxMELdw=)
2: so_dnSs4BnrVZYioQ2oy6VOroHk.roa (hash: EXJQLyqb51APlznWLoV0tXq0fpUDEu2dhVkLYk30HsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:c5:52:2f:36:24:63:f1:4b:40:41:02:a2:a6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac89af05d20711e0a94e84bf4b44766362c5083
Validity
Not Before: Apr 21 02:00:58 2025 GMT
Not After : Apr 22 02:00:58 2025 GMT
Subject: CN=28bb5c25373618dfe93c03415132543383e1b454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:e6:a9:e1:a0:c0:7b:33:2d:7c:e0:95:86:
93:4d:5e:f6:16:76:42:87:31:ef:55:1b:e3:00:d0:
a7:ce:fa:ed:a8:2d:ef:85:54:f6:0b:d3:14:30:f3:
86:f1:3c:1a:0c:af:5e:06:04:a1:cb:4b:55:d1:d9:
e7:e2:5e:72:c1:b3:3b:ee:84:14:89:9a:48:44:80:
73:15:fd:3f:dc:eb:e1:ee:02:b9:89:02:82:d1:1c:
db:85:a0:45:9b:a3:83:8e:ea:1e:41:df:15:fb:60:
8e:b2:d9:87:2c:70:00:4d:97:28:17:42:77:65:bc:
42:9e:ae:78:de:fb:9d:7b:20:62:32:b1:bc:0b:55:
12:22:d3:d7:75:c2:4d:df:0e:62:70:d7:ae:02:7f:
0e:98:5f:0e:ec:26:61:7f:60:e7:ed:58:ce:3f:8e:
43:e5:50:22:21:ff:c7:b0:13:44:a4:1b:df:33:7a:
86:50:01:16:26:4b:ae:f8:9d:ee:87:77:85:03:c1:
0c:93:5d:81:f6:9d:02:04:25:7f:04:80:7e:9e:82:
2d:27:04:8b:b8:50:a3:9c:47:fd:e6:a2:41:24:4f:
d0:b8:da:10:48:a8:16:e1:a1:cb:4e:85:f5:8e:ec:
eb:83:1a:5a:41:54:20:7d:17:2e:87:14:70:da:b8:
5e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BB:5C:25:37:36:18:DF:E9:3C:03:41:51:32:54:33:83:E1:B4:54
X509v3 Authority Key Identifier:
keyid:2A:C8:9A:F0:5D:20:71:1E:0A:94:E8:4B:F4:B4:47:66:36:2C:50:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ksia8F0gcR4KlOhL9LRHZjYsUIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c9330d-4d4a-4458-888a-e362a90edec1/1/Ksia8F0gcR4KlOhL9LRHZjYsUIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1d:14:d7:d2:2c:43:cd:8a:9b:c1:14:e9:a8:12:e1:77:0a:
d1:d2:86:8b:fe:5e:ce:e4:41:1f:8a:d7:b3:12:29:be:15:a6:
4d:5f:c1:3f:6c:52:bf:bf:f8:41:00:4b:72:10:19:56:a7:32:
35:fb:16:34:a8:4a:d1:d4:ac:21:b2:9a:e9:c4:92:39:d6:c4:
3e:8b:37:f5:a6:9e:f7:73:fe:14:b0:37:53:04:1d:77:97:8a:
ad:50:25:c0:ef:dc:5c:f2:c8:24:51:50:dd:38:bb:ef:de:76:
46:c5:d7:ef:82:82:a2:a6:e3:9f:6c:b0:fb:b7:04:42:79:75:
8f:68:4d:65:f1:ef:4a:cb:85:4b:a1:83:e9:9b:d3:8a:0f:45:
32:06:a3:7d:28:6d:27:97:8e:fb:9b:26:5f:a8:76:2d:ea:b8:
6f:e4:2d:47:01:5a:d7:b7:a9:42:7c:07:e6:d2:20:79:0f:10:
8d:b0:15:dd:21:25:ce:7f:1c:e7:50:1e:50:8e:2b:94:69:a5:
68:68:1c:cf:1e:4d:bd:82:84:d4:47:ad:82:7d:a4:83:69:ba:
0e:ef:61:79:c3:4b:b9:75:55:a9:fb:e3:87:11:6e:2a:14:81:
fb:77:83:27:1c:6d:c6:29:b0:dc:a6:c8:b9:9b:5d:ec:a0:58:
46:88:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:37 2025 by rpki-client