Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: 2rdaEYkbYJ78NjgN1VdM7VB5MMOZZ9XImc0NiFQI4UM=
Subject key identifier: 69:77:89:7A:AF:2B:22:8B:05:9B:A5:13:4B:97:29:30:00:8B:5E:FF
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 019655A596D82A989AEFD5B224735F9A02A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 1467
Signing time: Mon 21 Apr 2025 00:00:37 +0000
Manifest this update: Mon 21 Apr 2025 00:00:37 +0000
Manifest next update: Tue 22 Apr 2025 00:00:37 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: OhG+sPV0Ceqet1kjDwp22cfofv5XIUr5uRMoHmQgxe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:96:d8:2a:98:9a:ef:d5:b2:24:73:5f:9a:02:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: Apr 21 00:00:37 2025 GMT
Not After : Apr 22 00:00:37 2025 GMT
Subject: CN=6977897aaf2b228b059ba5134b972930008b5eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c6:3e:8f:3f:34:a9:06:17:36:28:10:cd:f2:
2d:5e:a7:1d:af:f2:d6:d2:05:b8:3d:d4:06:5d:d1:
d4:03:59:24:7e:b1:55:33:8e:c0:4e:23:23:6f:df:
aa:2b:f1:09:19:ce:d9:84:a2:b3:da:16:0d:7a:7c:
f8:91:8e:e8:2e:b7:79:86:d1:89:46:d1:68:da:7e:
d8:21:f0:e0:1b:6d:1d:61:f7:9e:06:1b:a3:1c:13:
62:da:bd:6c:8c:d7:bc:25:a5:2d:16:9a:3b:f8:26:
d8:c3:b4:32:a4:14:27:c2:de:76:8f:67:33:63:29:
c4:1c:a0:17:cc:f6:2f:ce:96:f0:06:53:d7:ef:ae:
59:79:7b:64:78:1a:fb:a9:56:20:7d:f8:71:4e:90:
71:af:f5:a7:7c:3b:e8:dd:18:7a:7f:89:00:b1:cc:
8f:6e:4d:6e:ee:db:0b:01:78:ef:d8:fa:41:c1:3a:
ec:a6:6f:04:eb:25:45:41:6a:46:e8:30:9d:c9:0c:
85:f8:11:d8:51:9b:3f:03:3d:0e:dc:61:49:b8:f9:
56:31:d2:8d:29:46:d6:83:82:27:6c:2f:76:b2:82:
de:2c:b9:30:55:3f:37:60:55:f0:77:61:f6:03:ec:
5a:af:e0:4e:24:4d:12:6b:1a:1c:b8:3c:8a:aa:39:
f5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:77:89:7A:AF:2B:22:8B:05:9B:A5:13:4B:97:29:30:00:8B:5E:FF
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4b:68:d0:57:5c:8d:7c:a5:e1:85:7a:3a:61:04:4b:4f:b3:
8a:d0:2a:7f:4c:3d:da:bc:e9:90:47:18:1f:df:e5:87:05:27:
87:d4:85:f5:15:af:df:6a:9f:5b:72:d4:bb:9b:ee:c1:a3:48:
27:a8:9b:ea:cb:35:a3:40:14:e1:c3:b0:ee:20:37:c6:80:46:
78:0b:2b:74:90:c0:ff:fe:d6:78:51:a9:e3:73:bd:a7:85:45:
f9:0c:e9:f3:3b:7d:cc:a0:a4:5c:f4:86:b4:e9:af:59:d2:de:
95:81:cb:2f:5b:83:32:d5:5c:0c:03:a0:1d:f3:40:41:1b:3a:
b3:52:14:a7:c8:af:bc:05:88:1b:aa:fb:40:f4:24:d0:61:98:
c6:ab:50:64:de:2d:48:60:f2:8d:c4:23:cd:72:a9:09:57:be:
fb:53:27:8b:00:f8:73:a5:a7:0c:87:4e:97:a0:3c:3c:a9:72:
23:29:8b:98:80:b2:cb:c6:d6:b0:02:83:d3:08:68:2e:d3:bb:
c5:8b:9e:68:d0:57:9f:ce:84:d5:c0:71:ea:f8:fc:86:ab:03:
98:38:74:17:90:ad:44:2c:cb:25:0f:a7:91:d5:89:f5:0c:30:
dc:26:af:c5:b6:76:de:a9:24:de:5d:75:52:70:c9:94:92:c3:
0f:ce:4b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:28:11 2025 by rpki-client