Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
File: Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft (raw, json)
Hash identifier: kGJU3j8fN4S4eDjswC0dSmrcwSBex1LuTNy6nlyiBw8=
Subject key identifier: 8A:C7:2F:BC:A5:11:12:B8:EC:A1:71:A4:02:63:9E:54:8B:04:45:C6
Authority key identifier: 2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
Certificate issuer: /CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Certificate serial: 019636BFE67408F8725866DF9699F828A9DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
Manifest number: 0513
Signing time: Tue 15 Apr 2025 00:01:08 +0000
Manifest this update: Tue 15 Apr 2025 00:01:08 +0000
Manifest next update: Wed 16 Apr 2025 00:01:08 +0000
Files and hashes: 1: E3Zl7hTQVNjV63pjgOsge1XkH0U.roa (hash: yrZmQZ4kTmjXpz++XtNl02KMrQY9DBIkid1grpWXuJM=)
2: Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl (hash: dqUVlaAaijcdDLQ1fMwoEfyAmw2WnusKQmxVYVFlePc=)
3: o0lO65ar-rW4jL4W8sebNaso080.roa (hash: WWdJYnb/d9BssaNMXrRC81WhzrjAYNXMX5FXKx6MRRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:36:bf:e6:74:08:f8:72:58:66:df:96:99:f8:28:a9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f8ffbe098922071f0c9c3a60f5dfdcde46da4
Validity
Not Before: Apr 15 00:01:08 2025 GMT
Not After : Apr 16 00:01:08 2025 GMT
Subject: CN=8ac72fbca51112b8eca171a402639e548b0445c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4d:4f:ee:33:87:c3:86:91:fb:3c:39:fb:c3:
f8:8b:29:13:5c:56:e7:5e:0c:ec:71:af:54:9c:3f:
3f:bd:39:22:5b:4b:3e:99:6d:65:5f:c4:87:fe:39:
45:8f:ce:69:a9:41:56:41:9a:f0:3e:68:ba:8d:80:
3d:2c:c6:5c:0b:f0:8a:48:5d:57:0f:53:ba:11:e2:
4b:e9:2f:23:80:b4:ac:bb:ee:13:1f:cd:ef:e3:92:
eb:19:2d:d5:d3:64:42:d9:2b:77:80:5e:eb:fc:cc:
02:8c:98:9c:af:e2:ab:dc:71:8d:92:28:37:b9:66:
53:96:8d:96:12:76:b8:a0:e7:7e:f2:f7:53:80:8a:
2b:e1:4e:6a:bd:08:2e:8d:14:69:8f:20:09:b5:ae:
cd:99:71:76:9d:99:ae:23:ef:bb:d6:68:8f:2d:b5:
da:32:36:5d:3b:2c:17:b8:a3:00:12:d0:56:e5:23:
5a:09:61:6c:7d:e5:3a:d2:9b:2c:c6:e2:a3:38:b0:
29:cf:5e:35:95:8e:6f:0c:f9:a1:90:b9:42:55:d9:
76:03:c6:fd:76:ff:3e:2f:a8:f3:9d:ec:14:cc:a8:
3f:69:42:c3:d2:52:b1:fc:bf:5c:d8:a1:18:9f:f0:
15:31:74:4e:4c:e8:93:09:77:d9:b9:af:99:aa:6d:
68:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C7:2F:BC:A5:11:12:B8:EC:A1:71:A4:02:63:9E:54:8B:04:45:C6
X509v3 Authority Key Identifier:
keyid:2A:6F:8F:FB:E0:98:92:20:71:F0:C9:C3:A6:0F:5D:FD:CD:E4:6D:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km-P--CYkiBx8MnDpg9d_c3kbaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/638d88-4952-4960-8774-c1c4d8cbf459/1/Km-P--CYkiBx8MnDpg9d_c3kbaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:e5:10:2a:7b:b2:2e:dd:23:a3:f0:44:89:f8:26:30:40:3d:
4a:ef:9e:cd:03:de:ab:fc:2b:65:53:78:bb:11:c6:08:82:f1:
47:f1:20:d6:79:24:eb:34:d3:dd:04:07:73:d8:15:a8:cf:8b:
70:dc:c7:98:b1:33:79:26:c5:95:6e:72:db:18:f0:d5:42:7d:
c3:89:45:10:73:78:bc:96:c4:75:c3:4a:05:96:67:03:32:60:
14:67:80:71:3e:c3:76:6e:e3:41:cd:2d:69:61:3a:75:a4:c2:
d6:8e:ed:61:e4:5a:e4:15:fa:b1:0e:2e:c3:2a:76:53:bc:88:
79:ae:17:8f:63:d3:7b:21:72:0e:83:a2:15:1a:89:3a:59:9a:
4f:20:06:04:80:df:94:35:62:e9:2f:6a:aa:0b:51:cc:3a:b5:
6b:bc:11:24:36:c4:ff:6c:07:eb:aa:ab:8a:27:4a:1b:59:23:
f4:2c:85:f6:07:d0:95:22:15:b6:3d:8c:da:e8:70:c1:ca:b9:
cc:11:5e:ec:02:b8:71:85:f7:8c:ee:69:b1:d5:c2:88:08:6f:
54:cb:12:51:61:e6:76:78:cc:7e:60:01:b9:82:d9:a3:af:c9:
d4:64:6c:db:16:57:c1:ef:72:f0:1d:dd:2d:a9:7c:77:6e:43:
3b:e8:3d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 09:29:49 2025 by rpki-client