Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: eMuAklIlVUmjmAgji7EudP1xgTx1rzi8Aqh+MP27H/w=
Subject key identifier: 79:71:84:78:FA:19:5C:C4:7F:0B:D6:B1:C8:AB:76:8D:CD:B2:CE:10
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 0196451FB00961CBC7205815F2C6232AF700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0E04
Signing time: Thu 17 Apr 2025 19:00:26 +0000
Manifest this update: Thu 17 Apr 2025 19:00:26 +0000
Manifest next update: Fri 18 Apr 2025 19:00:26 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: no3vaU4c4ozdJZBLYYjhWfpYk21gKO+we7MDRGmyfC8=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:b0:09:61:cb:c7:20:58:15:f2:c6:23:2a:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Apr 17 19:00:26 2025 GMT
Not After : Apr 18 19:00:26 2025 GMT
Subject: CN=79718478fa195cc47f0bd6b1c8ab768dcdb2ce10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bc:66:12:6e:86:b1:24:b2:69:47:08:f2:e0:
09:75:d3:e4:f7:bc:dc:b6:60:e3:08:88:0d:84:eb:
f1:ae:c7:5c:38:20:60:21:77:90:a2:e0:b5:73:59:
4e:ec:7d:67:36:0c:46:43:ff:bb:a1:b3:43:6c:6a:
a7:8c:10:be:b9:f1:d6:69:bb:95:ea:c7:b9:ca:3c:
44:61:12:67:9d:e1:db:17:59:18:f2:e8:85:a5:fb:
1c:0e:03:0c:b9:f3:b0:0d:95:af:fb:98:ac:c3:bc:
ea:c1:af:62:35:fb:a7:9a:1c:54:f3:cf:70:b3:ed:
37:c2:90:fb:5c:54:3d:3e:d8:c5:ab:af:a2:6d:d6:
7e:58:fe:20:37:d5:45:c2:11:7c:6a:37:8f:1c:38:
77:de:3c:d2:c7:0e:94:43:e5:a9:70:a2:16:37:3d:
a2:21:a0:1b:5b:18:4e:0c:06:0d:9b:4e:12:c1:87:
c6:b7:54:fa:fd:dd:0c:ec:03:3a:35:4e:6c:91:f9:
4b:23:ef:f3:cb:60:ec:9f:be:55:3b:d8:47:2f:18:
d8:6d:80:81:23:ca:a4:a7:3b:c3:45:a0:47:b8:92:
f7:71:ae:e5:1a:df:39:f6:7a:18:90:2b:51:2a:c2:
ec:82:32:31:38:7d:cc:48:ca:e5:48:0d:b9:de:f9:
95:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:71:84:78:FA:19:5C:C4:7F:0B:D6:B1:C8:AB:76:8D:CD:B2:CE:10
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:11:57:0f:80:c9:6d:60:e5:f1:b4:f6:d3:5e:7d:6b:1a:8e:
7d:6e:79:01:01:39:c8:cc:de:15:6e:c0:43:bd:2c:b2:4b:5f:
f4:a0:79:8a:6f:83:c8:76:85:32:b5:ed:61:43:db:90:41:87:
a5:39:18:2f:a3:04:b5:53:e3:13:17:df:c1:25:33:c0:d4:71:
26:02:a5:b7:07:87:ca:c6:b1:5c:00:98:c1:75:89:99:45:45:
ea:8c:f9:e0:14:c6:10:40:ac:83:c5:87:8e:4f:1d:d9:db:a8:
15:93:e2:de:77:e2:9f:6c:fa:0a:0e:2a:68:ed:ea:a1:33:05:
a2:53:bb:8e:7c:ee:88:d7:74:8d:b1:2f:16:eb:62:08:12:98:
4a:bd:1f:df:34:4c:f2:f7:76:ae:e3:05:b8:0a:7a:88:af:3f:
77:bd:81:b5:45:0b:2e:27:06:43:78:29:6b:df:a8:c7:9c:ef:
f3:e0:73:05:bd:b4:c6:bb:ac:34:3b:d0:8c:b1:ae:2a:c3:9e:
5b:69:5d:d7:f8:1a:c2:28:2d:26:c9:2c:c0:eb:76:25:47:20:
a1:45:c5:07:97:c3:06:cf:92:fd:cb:f0:ef:ba:77:2d:07:85:
f9:62:eb:31:b8:60:8a:c4:1a:95:ef:a2:0d:24:3f:7e:66:89:
ce:20:75:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:33 2025 by rpki-client