Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
File: KXNk9QJTTodxoMYll5TCbibUvKQ.mft (raw, json)
Hash identifier: FhRcRexxa1GgNjwASWE0ipATDZpYm/hZUqq+J5P9WHg=
Subject key identifier: 0C:95:04:3E:40:DD:00:56:11:F0:D6:58:63:FE:EB:67:92:54:08:CA
Authority key identifier: 29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
Certificate issuer: /CN=297364f502534e8771a0c6259794c26e26d4bca4
Certificate serial: 019609B066EECA9E9CA3210D1FA96E6AE8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
Manifest number: 1342
Signing time: Sun 06 Apr 2025 06:01:17 +0000
Manifest this update: Sun 06 Apr 2025 06:01:17 +0000
Manifest next update: Mon 07 Apr 2025 06:01:17 +0000
Files and hashes: 1: 2Cp_JC-1gSdENPjM_UWn9lNVG7o.roa (hash: +35xjqek9Nhlc/Z0+VDCYx/DAJw10REdvRuvu6t5M3s=)
2: 30p15OIB4xzHle9tD78XYhbRDYI.roa (hash: 9HVb43mRInURyExw74+VWFanW5TCiRHL7zKkRNQfWwc=)
3: 46l3zcDNK_2V63AreaLMsQrAgaE.roa (hash: yY63fb353nPGfB15WkNs5SfqIg+XAt04c2yklxwzqUk=)
4: DrQJgIgCadGbo__38qvLm4f2buQ.roa (hash: Wx23py7fw++y8qecqXEe1C97qUaOVg6INU3OjKvg+YE=)
5: KXNk9QJTTodxoMYll5TCbibUvKQ.crl (hash: 0FuPNjZVonUt97LQ36NqQxd9G+l78XfQKH/zmzRzbPM=)
6: Kc-1Z4R9k1b9QbprK1lrnIRFuzo.roa (hash: mIf5b4mKVeZgEr7VsdotpcNIdYch/DFkBdwgO8kit9A=)
7: lTAav4yQpZ87qw_zIchzIsq-5gM.roa (hash: 3b9+qDTSwpfJP/SrqHspJoxR/TN3seQEWvBLhEVGMW0=)
8: x8RX4rKBNmZcMpsvt4Nm7APSjAM.roa (hash: zc30VoGi96Z1iHoOnbaFFXszAPpJE3UJpyJWRy15Byo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:09:b0:66:ee:ca:9e:9c:a3:21:0d:1f:a9:6e:6a:e8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297364f502534e8771a0c6259794c26e26d4bca4
Validity
Not Before: Apr 6 06:01:17 2025 GMT
Not After : Apr 7 06:01:17 2025 GMT
Subject: CN=0c95043e40dd005611f0d65863feeb67925408ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:74:d7:e4:73:bb:80:96:20:44:67:56:bb:3d:
8f:c8:d3:e7:ed:2a:00:fb:8e:31:e5:ef:2c:22:a4:
fc:1b:84:6d:d5:fc:b5:0a:4d:4c:2e:1a:f0:72:08:
83:9f:e7:5c:9f:68:63:a8:ff:cc:e3:bc:93:a3:8b:
92:71:e6:dc:a5:6b:ec:48:ae:95:86:98:a7:a8:5f:
8c:f6:24:e2:8d:b7:79:bd:4a:b0:8d:c3:80:6f:06:
a7:38:b8:76:03:2c:07:eb:f9:cc:b1:d1:bd:b4:4a:
b5:5d:0b:25:1f:16:90:86:69:49:83:c1:1c:c7:e4:
4b:9e:cf:17:64:14:91:40:41:c4:95:2e:c8:8d:38:
bc:46:9b:7e:82:dd:1c:48:9e:d6:9b:62:d0:83:86:
d9:dd:6f:1f:35:db:bf:b4:7b:90:a9:e7:86:e5:3a:
5f:12:00:73:ea:f1:d2:a3:bd:54:e6:1a:b7:86:ab:
89:76:9a:b7:08:a0:9c:39:b1:8b:77:b6:e8:a3:e5:
bb:02:9e:90:ef:e4:62:44:06:96:dc:0f:88:92:58:
68:37:0e:33:ae:99:bc:5a:a8:2b:32:50:aa:a2:49:
bd:7a:e3:f7:65:f7:3d:35:7f:b2:c8:56:fb:14:01:
60:f0:e7:25:af:69:2e:4d:a6:a9:6a:97:f7:87:0a:
69:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:95:04:3E:40:DD:00:56:11:F0:D6:58:63:FE:EB:67:92:54:08:CA
X509v3 Authority Key Identifier:
keyid:29:73:64:F5:02:53:4E:87:71:A0:C6:25:97:94:C2:6E:26:D4:BC:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXNk9QJTTodxoMYll5TCbibUvKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/045820-3546-407c-83a5-0a0f3e78a493/1/KXNk9QJTTodxoMYll5TCbibUvKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2b:7b:d8:71:da:f1:f5:a9:82:36:86:54:04:af:0f:81:9b:
32:14:3b:4d:f1:aa:e5:98:6d:4c:a4:1f:7c:be:b3:a3:77:0f:
f9:3d:bd:b6:39:cf:98:fb:70:dc:5f:c4:cb:29:2d:a5:d8:a4:
ba:f1:e9:97:12:ef:a4:59:65:a9:5c:a5:e5:9e:0f:30:4f:c8:
9b:26:2e:6c:b9:f3:7d:55:30:97:87:26:e7:78:f6:99:76:76:
4c:d0:34:2a:42:1a:d4:15:77:c9:94:d8:9c:a5:bb:af:bb:75:
95:7b:8c:d1:29:39:c0:8b:6f:9b:5b:09:cc:dc:ac:c9:de:5a:
67:00:b6:c6:80:0d:4e:a6:68:c0:cb:15:2b:61:cc:95:46:c6:
b5:5e:cc:66:fd:6f:5d:81:9a:e5:c7:7f:c8:96:36:f6:01:8d:
e6:ce:b4:7f:07:fc:0c:23:04:c4:1b:c6:b7:c6:c9:d1:b8:0d:
10:f9:4f:de:da:5d:ae:41:37:1d:e8:8a:6a:ac:47:16:9f:fe:
f7:be:af:74:3a:23:ae:07:58:a8:fb:17:0e:a7:1c:fc:7b:cd:
d3:c8:04:cf:db:22:e8:65:f6:a6:99:55:44:50:d5:a4:45:00:
e9:f9:f3:36:2e:5e:77:dd:26:92:69:24:bf:89:07:53:be:2a:
a7:dc:71:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:17:23 2025 by rpki-client