Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
File: kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft (raw, json)
Hash identifier: 5GliUp1ZLfQQr1cym9jlQm6c01zzE+uSKIEiqLB3xDs=
Subject key identifier: 6F:F6:2C:3C:18:01:56:9D:B4:6A:4E:CE:B4:BC:0C:5C:E5:F9:95:92
Authority key identifier: 90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
Certificate issuer: /CN=90878c39624aede3929e17ccd95878c292b2f351
Certificate serial: 019655A6180E2C1B8F6B831CCEB871D2F780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
Manifest number: 03CB
Signing time: Mon 21 Apr 2025 00:01:10 +0000
Manifest this update: Mon 21 Apr 2025 00:01:10 +0000
Manifest next update: Tue 22 Apr 2025 00:01:10 +0000
Files and hashes: 1: 3IEfkjrujN1otjC8OV1_yIF0n7I.roa (hash: Wz9JDIVRLlsFUBi000ABJhgJex6MuDmGadz9gz6sp1w=)
2: hdrzSAEQ0cxr-hQ_0pjXR6aa4FU.roa (hash: sfqipOVEI136CQV9RrCQ/2MEEAOWtOAMvL1rCoXPDGQ=)
3: kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl (hash: AsifUj4UAD8WkirD8rwu9+cEu6g/qOI/eyrevvUuN7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:18:0e:2c:1b:8f:6b:83:1c:ce:b8:71:d2:f7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90878c39624aede3929e17ccd95878c292b2f351
Validity
Not Before: Apr 21 00:01:10 2025 GMT
Not After : Apr 22 00:01:10 2025 GMT
Subject: CN=6ff62c3c1801569db46a4eceb4bc0c5ce5f99592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:b5:98:d9:1b:b7:79:e4:d1:cb:b9:68:a6:
21:6d:0e:cc:b9:74:e3:37:c4:8a:d5:55:9d:9b:15:
30:c3:43:6a:21:8d:a8:7a:cc:a0:68:68:a8:50:1b:
7e:f0:58:c2:ea:11:8b:1f:a0:7d:4f:82:12:8b:73:
bd:ff:2b:1c:14:e0:35:b7:37:8a:20:47:b2:38:d4:
4f:ab:b7:7e:a9:16:97:5b:6b:e8:da:7b:bc:6c:f9:
03:d5:4e:cd:1e:66:33:26:51:dc:1e:85:0d:aa:99:
57:e9:09:02:17:3a:37:17:20:a4:95:ed:c0:6c:26:
24:60:7d:a8:3f:24:09:84:f2:52:89:fd:88:24:9b:
ba:22:64:01:43:35:b4:33:b7:b2:97:4d:9b:58:04:
6f:78:25:d2:ef:ff:91:5b:c0:5b:cc:31:39:da:26:
7f:f1:9c:ac:c3:ee:95:4f:1a:d9:6b:b8:f0:67:00:
0c:ac:ca:4c:f5:ec:5f:b1:14:c5:22:fc:a6:1d:1d:
14:68:9d:c3:99:cd:f3:f3:aa:0a:8c:51:c1:71:b4:
30:b0:90:05:7e:27:c0:c7:3e:a4:ab:5e:23:ce:da:
1f:e3:3c:24:ee:03:7b:bf:b5:28:a6:63:22:df:81:
cc:70:98:57:49:71:35:16:0a:2c:3d:18:79:3c:de:
08:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F6:2C:3C:18:01:56:9D:B4:6A:4E:CE:B4:BC:0C:5C:E5:F9:95:92
X509v3 Authority Key Identifier:
keyid:90:87:8C:39:62:4A:ED:E3:92:9E:17:CC:D9:58:78:C2:92:B2:F3:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIeMOWJK7eOSnhfM2Vh4wpKy81E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5d31cb-46c6-4b58-8279-d5aefccc9522/1/kIeMOWJK7eOSnhfM2Vh4wpKy81E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:58:42:a5:30:fb:4a:13:53:4e:2e:e1:01:ef:c4:5d:90:ce:
a6:2e:83:c0:52:03:81:70:77:5f:38:68:df:d2:cb:88:f4:1e:
14:e6:53:0e:2d:2b:54:71:88:a6:b0:d3:7d:30:0a:a5:a6:8a:
53:33:13:d6:48:6c:ad:1c:d3:9f:8b:68:8c:ef:da:12:b0:e0:
fc:94:27:fe:e1:c7:17:1d:a1:0e:14:ec:3e:9b:c2:0f:e6:d8:
e7:1b:35:34:44:fa:de:b3:b2:67:af:2a:80:7f:ac:8f:65:36:
69:60:0f:38:95:c7:59:cb:99:aa:71:5c:e0:84:4d:a4:a9:92:
ae:5e:1b:6a:05:20:11:ee:55:5b:8c:7f:cc:8b:12:6f:28:2f:
73:3a:13:be:21:86:56:e6:e0:78:2b:13:ac:8e:4a:3f:e3:ec:
52:6b:84:15:dc:e7:71:9e:ba:ba:14:bb:a0:a9:e4:ae:1c:18:
f2:af:c2:46:50:f7:9e:f3:d7:91:34:64:9f:79:94:c7:0a:90:
93:1c:93:a7:e7:56:f2:f7:41:61:f1:2b:ea:32:5e:3f:53:5f:
c1:15:3d:9b:c6:f7:30:21:38:45:ca:3f:87:9d:7e:2c:4c:70:
cc:9d:0f:91:ef:8d:14:74:ec:65:55:f4:3c:86:89:71:c4:c2:
5a:48:a6:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:27 2025 by rpki-client