Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
File: kx48jeCt2dqVz0TYn1C_3nrhmlc.mft (raw, json)
Hash identifier: tsZi/bKRnB+csqPhBwQA8Kf2B9YnmlMhe+WjLrjwWd8=
Subject key identifier: 01:D8:93:EF:DF:C8:D1:42:0C:E5:C4:E5:EA:A7:22:18:89:9B:36:F0
Authority key identifier: 93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
Certificate issuer: /CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Certificate serial: 01964BC65F6693E4FA7D516B29343AF0546D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 02:00:13 +0000
Manifest this update: Sat 19 Apr 2025 02:00:13 +0000
Manifest next update: Sun 20 Apr 2025 02:00:13 +0000
Files and hashes: 1: CbRY4qO4S-WijK05eY2wCnYoQJU.roa (hash: +mTf7r6+zK/TdKHsfZ88i/cXxb9cvH9lfgC3dCfABuE=)
2: fJrFHPzcXBxu52oPqkGqKY4yJAk.roa (hash: 3hc352skG2gtrO+VgjnqkDCcrrWK6vetRgA/AknDSz8=)
3: kx48jeCt2dqVz0TYn1C_3nrhmlc.crl (hash: y4gMfRiMvC4H9O0PCDQNS8V1c23Hlg7+3tXC4DEQFN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:5f:66:93:e4:fa:7d:51:6b:29:34:3a:f0:54:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931e3c8de0add9da95cf44d89f50bfde7ae19a57
Validity
Not Before: Apr 19 02:00:13 2025 GMT
Not After : Apr 20 02:00:13 2025 GMT
Subject: CN=01d893efdfc8d1420ce5c4e5eaa72218899b36f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:bc:d4:ba:2f:93:d5:0e:6a:28:03:ff:8d:de:
b9:1f:b2:82:ff:7b:76:3a:23:2b:d6:df:7e:e2:44:
dd:a2:59:d8:0a:c8:b7:55:14:64:cb:d9:30:bb:ad:
13:3e:1a:92:e0:fb:80:5f:46:44:c5:ba:28:e7:be:
7c:39:e3:0f:4b:83:74:e4:5e:9e:de:52:c3:f0:43:
1c:78:fa:bb:64:f3:39:e7:d9:16:e1:7b:d3:c7:93:
14:b2:25:0c:56:64:6b:86:16:de:8d:48:c7:bd:75:
a0:72:0c:6b:62:89:1f:f0:9f:ed:83:d8:4d:b7:a3:
e0:ae:6b:05:47:c3:13:34:d9:71:1c:3b:7a:0d:2f:
87:4f:85:84:20:8a:dd:e9:fa:cc:29:6e:e1:fb:e5:
ce:37:e9:4f:d4:d5:c1:e3:d9:9e:01:c6:0c:9a:05:
07:c9:a2:46:ac:8b:9e:a9:79:11:75:77:bb:19:96:
a1:8c:c9:2a:1c:a7:66:23:17:36:69:52:cd:29:ba:
00:b7:8e:82:52:e6:85:a3:85:7b:59:74:6d:39:49:
1c:3f:40:bc:a0:e8:20:42:a6:c7:5a:24:67:f3:8f:
83:f9:8b:cb:8e:d4:e1:b2:0e:b8:8d:2e:6a:85:f2:
1e:33:ae:2c:b4:02:3c:1d:54:86:37:c9:b2:f9:cc:
0d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:93:EF:DF:C8:D1:42:0C:E5:C4:E5:EA:A7:22:18:89:9B:36:F0
X509v3 Authority Key Identifier:
keyid:93:1E:3C:8D:E0:AD:D9:DA:95:CF:44:D8:9F:50:BF:DE:7A:E1:9A:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kx48jeCt2dqVz0TYn1C_3nrhmlc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/852cfd-d592-4c2d-94cf-b9ca7555c2c5/1/kx48jeCt2dqVz0TYn1C_3nrhmlc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b6:aa:37:90:38:90:9f:2a:57:41:bd:b3:dd:7c:e5:c7:8e:
d9:a5:df:42:be:62:07:ea:52:0e:d6:f8:5f:78:23:94:5f:33:
1f:eb:25:b2:e7:5a:c1:00:f5:17:37:be:14:b2:b4:0c:6f:67:
21:d1:8c:c3:0d:41:6b:06:c3:90:80:a5:70:46:bb:78:1c:20:
a4:d3:b8:ef:46:c2:78:80:ee:28:bc:89:71:b4:c2:d5:1a:2b:
47:ba:f2:a1:6f:e6:61:27:90:27:59:3b:b5:3a:60:41:f4:8a:
c3:d9:e7:43:08:52:05:e8:af:84:7e:89:71:dc:70:5f:a7:6e:
8c:13:8d:0a:57:35:a7:c4:37:11:03:8e:aa:90:ce:65:62:09:
3b:4f:25:6a:d2:a4:40:d9:ad:bd:f2:40:09:b9:6b:a7:ca:48:
d1:27:d4:11:76:54:e3:7e:6e:f1:76:43:71:99:90:71:f4:2a:
bc:fc:6a:ad:5a:59:c0:80:c9:3f:67:8c:5d:4d:49:b4:3d:9f:
66:dc:a5:8c:e7:a7:ba:1f:eb:c0:b5:0d:f0:36:b6:7b:30:1f:
e1:5f:24:52:c1:79:41:b9:5d:e0:09:6a:a8:85:14:57:a2:fe:
fa:36:42:e5:af:eb:88:eb:55:b8:71:56:fb:fd:e1:09:95:9d:
c8:de:e0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:20:52 2025 by rpki-client