Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: qO3AJpJeGECJknC9EpVpMUw2I273NsuSlntzDAjvlT4=
Subject key identifier: 20:14:AA:7C:B3:F3:45:80:32:D2:64:9D:B8:43:E8:FB:D5:8C:C9:18
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 01963E0B5E423099991B319079E8C95CC8B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 10E8
Signing time: Wed 16 Apr 2025 10:00:54 +0000
Manifest this update: Wed 16 Apr 2025 10:00:54 +0000
Manifest next update: Thu 17 Apr 2025 10:00:54 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: 5csq0gBtlZYKA1v4UURJwCcJhjj2Z+PYJLxDhojrY7k=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:0b:5e:42:30:99:99:1b:31:90:79:e8:c9:5c:c8:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: Apr 16 10:00:54 2025 GMT
Not After : Apr 17 10:00:54 2025 GMT
Subject: CN=2014aa7cb3f3458032d2649db843e8fbd58cc918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:80:1a:34:84:3a:de:ce:9a:9e:9a:cc:0d:29:
dd:af:0a:2f:0e:b2:14:e6:b4:d8:8c:c6:d8:66:36:
93:f2:a2:11:e1:0c:e1:04:c8:2d:8e:3e:2b:13:9e:
20:12:d9:42:2a:69:18:0c:3b:90:58:0c:95:ba:f3:
4d:eb:67:bc:1f:fc:73:32:ba:ae:38:c9:83:cd:16:
06:a8:54:7b:0a:e1:2a:0d:e6:47:26:dc:55:e5:95:
2e:8e:03:d9:33:e9:fd:88:2d:b0:a6:64:0c:b5:c4:
e2:34:53:36:68:d0:df:ca:1b:2a:1f:00:eb:d9:d8:
a7:0c:fd:9c:fd:3c:22:85:a0:f7:a1:20:3f:97:f7:
66:96:36:d7:37:d9:06:2c:c0:e3:32:c2:93:50:13:
90:df:13:17:be:1a:da:0d:1a:0f:2c:63:28:b6:77:
05:dc:d8:a6:5d:09:fd:cc:37:13:8f:58:f9:54:ec:
a0:fc:79:82:e5:21:97:b1:ea:1f:4e:2f:3e:11:ce:
51:28:b7:92:55:83:49:71:72:6c:1d:f4:31:79:89:
9d:f9:40:02:97:57:fa:54:b5:e3:fc:70:96:ab:2e:
81:b7:81:1c:47:ce:71:ff:16:5a:1a:c4:a6:c6:e8:
ea:69:9f:5a:f4:26:c5:00:e5:ae:86:21:ba:62:e2:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:14:AA:7C:B3:F3:45:80:32:D2:64:9D:B8:43:E8:FB:D5:8C:C9:18
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ce:6b:6b:66:9e:3c:14:ce:59:b7:a4:d8:f1:19:a6:6a:89:
40:f3:2f:82:5e:8c:84:ce:bf:7c:fd:46:db:01:de:b5:a2:72:
08:b6:a1:f0:ac:20:1c:b1:8b:fd:5e:26:4b:61:77:97:ee:d7:
da:db:8f:ba:cc:54:03:49:50:fc:a5:66:7a:ef:40:48:69:76:
a8:30:d9:aa:26:c0:f2:9b:ae:59:62:83:a3:71:9a:89:99:ae:
50:6b:8b:22:fc:1a:bd:c3:c1:66:e1:ab:d5:82:9d:20:92:f1:
b2:4b:bf:f0:a5:74:5a:a5:59:eb:ba:a9:ac:0f:59:81:50:dd:
38:70:d7:92:5f:24:a2:5b:68:4c:ea:76:a8:f3:89:c8:93:10:
f9:9c:f0:57:a4:69:ab:e6:64:74:e1:a0:06:d8:fd:ae:ae:0b:
ef:ad:59:21:4c:36:4e:a2:e7:93:92:04:32:27:d9:40:dc:63:
f5:fa:89:27:03:da:16:8d:3a:ff:87:dd:0a:e6:5d:90:14:ed:
7a:8b:89:7d:41:ac:18:28:5d:7e:16:ae:dc:4c:31:b2:ce:82:
46:fd:a2:ab:d4:ab:cd:1e:ae:58:ec:73:91:56:2f:62:de:d2:
db:22:18:dc:80:58:42:79:61:2a:60:32:b2:48:01:34:5c:7b:
9a:ca:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 19:19:36 2025 by rpki-client