Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
File: kRxMdux1VljUX9DT9co8yOvTdLc.mft (raw, json)
Hash identifier: mMJjFZ0VmLHL3eF3D9gwXTlypP1LegULjcgGfHae8v4=
Subject key identifier: A1:CB:CE:86:FC:66:42:E0:A4:45:1F:C3:79:11:AA:36:59:8E:D9:08
Authority key identifier: 91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
Certificate issuer: /CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Certificate serial: 0196586F8530CA1A892124DAC31B4E505B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
Manifest number: 0EFA
Signing time: Mon 21 Apr 2025 13:00:25 +0000
Manifest this update: Mon 21 Apr 2025 13:00:25 +0000
Manifest next update: Tue 22 Apr 2025 13:00:25 +0000
Files and hashes: 1: MRhTTHAkH95ULYTfOcPsfcxXr14.roa (hash: IE5WDUc9dmCUsWg7sthCjIhrzs4McHIG0OGY+bFwg+8=)
2: kRxMdux1VljUX9DT9co8yOvTdLc.crl (hash: kq64QprxMpx+1niD5A6HVoGDActYs8C+yxlOgcHtOB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:85:30:ca:1a:89:21:24:da:c3:1b:4e:50:5b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911c4c76ec755658d45fd0d3f5ca3cc8ebd374b7
Validity
Not Before: Apr 21 13:00:25 2025 GMT
Not After : Apr 22 13:00:25 2025 GMT
Subject: CN=a1cbce86fc6642e0a4451fc37911aa36598ed908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:49:0f:6a:21:52:b4:7b:2c:0c:18:91:9e:b5:
0d:b3:bc:4d:db:a9:8e:96:f8:a8:36:4a:75:19:85:
33:61:92:ae:6f:86:8a:5e:78:7a:60:f8:27:4f:d8:
99:c2:c0:26:bc:79:b6:92:e2:8e:be:cb:60:0c:44:
23:40:45:05:2f:30:f8:8b:1a:f9:5a:0d:51:28:22:
bc:e9:1d:1d:88:0c:eb:98:35:b1:b1:83:b1:8d:c2:
fd:bb:8a:55:06:37:77:be:25:55:ef:84:5f:08:5d:
a6:13:ec:0a:11:f2:45:0b:dd:9e:cf:5b:b1:c7:4d:
a2:c7:e1:8b:06:9c:13:da:2b:c9:45:47:5f:c5:c0:
86:51:f1:21:46:cf:a2:de:76:c0:be:2c:74:59:d1:
bd:32:b9:81:3d:08:20:ba:d5:c3:43:d9:47:aa:21:
05:22:23:cd:bc:eb:87:30:1b:c0:10:76:10:f8:3f:
30:c2:f0:07:7b:ff:2b:76:aa:f2:b0:ac:f4:ed:6d:
02:45:bb:92:ca:41:69:b8:d0:29:54:e1:71:f3:7b:
51:a3:e8:00:20:bf:07:8b:c5:30:5b:43:a9:31:c1:
b6:7b:2d:c1:d7:0e:c7:cb:69:66:5f:f5:23:68:0c:
7f:36:41:87:eb:0a:81:5d:f0:c3:ab:9f:12:79:6e:
3b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CB:CE:86:FC:66:42:E0:A4:45:1F:C3:79:11:AA:36:59:8E:D9:08
X509v3 Authority Key Identifier:
keyid:91:1C:4C:76:EC:75:56:58:D4:5F:D0:D3:F5:CA:3C:C8:EB:D3:74:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRxMdux1VljUX9DT9co8yOvTdLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fa4256-8415-4ab2-96ce-62d2754f288b/1/kRxMdux1VljUX9DT9co8yOvTdLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:39:07:6c:3e:de:b5:be:a7:5e:e5:ff:fd:91:0e:7d:3d:cc:
e8:49:7f:c9:ca:0a:9e:d0:7d:aa:54:af:cb:0f:ac:67:3b:2f:
5c:9a:82:0a:b7:47:7b:c0:c7:57:54:5f:64:97:33:a5:a4:43:
b9:39:c2:81:11:86:35:e3:25:af:f9:aa:5f:a6:a6:42:bd:fd:
db:bd:22:43:fc:86:f9:b1:4e:11:6e:52:58:01:0f:c2:30:33:
f6:fd:bf:bb:16:7f:b5:f5:7f:86:50:be:ca:5c:e7:e7:68:ea:
84:7c:00:8d:76:2c:44:79:31:d6:7e:7b:4f:85:04:cd:88:29:
d5:c4:40:ff:d7:c7:11:4b:e1:9d:06:85:73:d9:86:11:d7:a2:
e2:84:e6:dd:97:f5:23:36:09:21:3a:b2:f5:a7:40:dc:78:6e:
f1:57:e2:cd:9c:3c:1f:99:55:81:3e:68:4e:2d:bb:5b:bb:87:
ba:7b:7d:ef:fb:5b:de:fb:3d:0c:73:96:f2:ef:38:51:40:72:
bf:92:e8:35:6c:91:00:62:50:eb:6c:93:d2:b0:45:bf:59:1b:
31:ce:08:e8:32:42:2a:6c:40:07:21:f0:fd:24:52:d0:c5:4d:
ce:75:c0:ea:0b:c3:af:d4:85:7a:d1:43:1a:da:13:66:f1:56:
4c:4b:98:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:23:10 2025 by rpki-client