Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: 6qLYnQor7lH4RdxiW9ZnXXtLDUpupeK+3uivrBgTIvM=
Subject key identifier: 1A:7F:12:92:FE:D9:31:EB:BA:65:CF:DF:D5:A0:FD:BC:C5:4C:9F:4E
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019654C9DE8F791F60D2D116545FD5A6BD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 1249
Signing time: Sun 20 Apr 2025 20:00:37 +0000
Manifest this update: Sun 20 Apr 2025 20:00:37 +0000
Manifest next update: Mon 21 Apr 2025 20:00:37 +0000
Files and hashes: 1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: rlj1e6KxucbaCX2iiZj2WE/MVwcqXwV2Ae6iPz4GylQ=)
4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 20:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:c9:de:8f:79:1f:60:d2:d1:16:54:5f:d5:a6:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Apr 20 20:00:37 2025 GMT
Not After : Apr 21 20:00:37 2025 GMT
Subject: CN=1a7f1292fed931ebba65cfdfd5a0fdbcc54c9f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:be:23:92:21:40:31:88:4f:3d:8a:82:2a:
85:79:00:bf:17:eb:07:9f:83:37:23:71:af:a2:0a:
d9:45:2a:2a:a7:0a:78:95:91:9e:cf:a9:12:8c:e2:
11:94:04:7f:5f:0d:a6:ae:91:13:79:12:56:34:80:
29:b7:f0:fc:58:84:31:38:eb:22:a1:3b:18:62:9a:
b5:eb:85:0e:9b:60:50:4b:ac:ba:4e:96:0e:8f:07:
30:30:bc:db:e8:13:ee:dd:e8:c4:41:fc:e0:11:02:
73:d2:22:a6:b6:77:97:d3:cd:7d:d2:48:96:40:0f:
c4:b4:de:68:f2:dc:19:2c:aa:d8:e5:ac:08:0d:75:
97:f8:8f:30:e2:90:57:6c:80:03:8e:7a:cd:da:50:
37:52:41:ab:41:7d:76:07:3a:a2:83:cc:dc:1f:61:
5f:0c:d1:dc:25:da:4a:1a:b3:52:6b:75:66:ca:6b:
92:7d:82:37:40:73:27:d2:45:df:3a:21:4a:26:ae:
d6:23:2d:01:ea:4a:d5:83:25:28:59:30:e3:17:0e:
53:c9:51:6c:21:c0:1c:f7:b2:6d:c6:33:00:a1:c7:
65:3a:0d:3e:ee:ae:1d:f5:f1:91:83:07:75:16:4e:
b2:cf:3e:a4:0e:6c:0f:df:83:b0:d1:30:38:ac:75:
f3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:7F:12:92:FE:D9:31:EB:BA:65:CF:DF:D5:A0:FD:BC:C5:4C:9F:4E
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:46:37:49:d4:00:7a:b1:80:76:48:60:29:1d:62:c3:42:c8:
06:a9:37:76:8f:3d:1e:13:bf:27:8e:51:86:9c:32:5e:a3:0e:
79:f5:62:b9:50:99:13:24:b4:d4:c9:18:70:07:9e:cd:5b:5a:
6a:da:7e:be:01:58:fa:0f:09:71:cd:c5:cc:b2:22:e7:18:92:
b4:d3:bb:a6:00:c2:c0:4e:e4:f2:0d:1d:d0:db:d4:aa:7e:33:
c6:45:9b:4a:cb:2c:8f:65:ba:ef:6b:75:34:d3:87:d0:31:41:
2e:4e:04:ca:8e:38:7a:24:1b:36:cb:12:4a:fc:9a:4f:8b:fd:
fe:31:d4:a1:93:27:bb:9a:f1:49:88:e3:37:a4:e1:d3:c5:9e:
75:b1:d2:ba:c7:7a:1f:d1:73:61:bc:25:86:ae:b4:c0:4a:68:
d5:f3:31:1f:ed:21:48:66:76:ff:1e:2a:7a:9c:88:61:e1:8c:
ed:20:f4:30:13:83:20:09:08:06:41:71:32:a6:76:3d:6e:95:
62:47:79:69:4d:fb:45:bd:8c:b4:36:ea:e2:30:04:36:9d:ad:
20:f3:d5:ad:e8:06:fd:fa:a0:d2:2b:ce:db:c7:f3:fb:10:b7:
1f:ec:d6:e8:6f:4b:1d:d7:3c:5f:73:37:92:4d:2c:14:9b:43:
50:76:60:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:04 2025 by rpki-client