Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File: kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier: NR1AqWqH3WD7pkKa7OEr1ciTogK5sTla2/P+Uk0f9Fs=
Subject key identifier: 9A:21:68:11:49:79:E4:67:CA:62:3B:0B:A0:E8:2B:7E:B8:65:02:CF
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer: /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial: 019657266CA7F02940F4AE79876CE425EBB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number: 1491
Signing time: Mon 21 Apr 2025 07:00:58 +0000
Manifest this update: Mon 21 Apr 2025 07:00:58 +0000
Manifest next update: Tue 22 Apr 2025 07:00:58 +0000
Files and hashes: 1: 3onxhQW4_iFcT0AIPYrLYgqTYV0.roa (hash: Mu7Xz4DaWXehDK3cRMePZg9doIVwsj8HrvkMJvgs9bM=)
2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: Cc/eKmbLjRCwUbfwDEPL2P9QtCyqkStjY3qHVvpiDdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:26:6c:a7:f0:29:40:f4:ae:79:87:6c:e4:25:eb:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Validity
Not Before: Apr 21 07:00:58 2025 GMT
Not After : Apr 22 07:00:58 2025 GMT
Subject: CN=9a2168114979e467ca623b0ba0e82b7eb86502cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:93:5f:56:1a:4f:e2:50:9a:5e:3c:49:24:
1b:b5:2f:52:cf:bf:d1:c1:43:7f:03:19:34:64:21:
0b:b2:8f:1c:1b:38:cc:ae:3f:d6:f2:a3:19:41:f7:
65:91:57:9a:3e:2f:6a:db:a4:fa:fe:0e:88:e5:8e:
28:3e:fc:ad:83:07:7f:d5:4d:88:a6:58:b4:a0:86:
0b:15:1b:35:35:64:a5:b3:d3:71:c2:f9:a5:93:c8:
f6:3a:59:21:d5:4d:4b:47:c7:45:32:78:c4:85:37:
58:3f:57:55:1d:88:36:2e:16:d5:2d:8f:86:35:df:
2a:3f:53:ff:d4:d6:d4:a9:92:c5:d5:64:e9:4f:15:
2f:14:fa:23:62:24:ef:2b:d5:1f:f6:a2:5c:85:56:
0d:b1:21:4a:02:c1:31:83:e6:50:70:64:18:18:83:
c2:7a:06:72:23:a2:df:da:d7:46:fe:58:b1:d0:0a:
e9:58:3a:dd:8c:56:d9:21:c4:b8:80:dc:c5:13:53:
67:d0:12:ed:96:0f:d8:aa:8e:d8:13:36:d3:83:92:
46:ea:8f:9d:29:e4:47:cc:5f:0e:0b:d5:dc:82:f5:
95:f9:9a:46:99:f3:79:6e:f0:ba:49:e2:1a:c2:21:
4b:6b:7b:08:c4:75:2b:3c:c3:0e:7a:5e:3e:5a:4d:
9b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:21:68:11:49:79:E4:67:CA:62:3B:0B:A0:E8:2B:7E:B8:65:02:CF
X509v3 Authority Key Identifier:
keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e3:8b:64:16:c4:0b:7d:29:a8:b1:e6:e3:50:9e:92:cb:99:
aa:1f:c4:1e:49:cc:15:d4:eb:1d:21:48:8f:f8:eb:04:bf:89:
cd:11:56:0d:92:da:3b:ec:10:b6:cf:57:1c:21:60:9c:21:17:
2f:45:9b:6a:87:e1:29:34:13:9b:b3:23:08:5b:2f:69:06:e8:
cb:24:59:ae:0b:3b:73:bf:e8:36:85:71:92:d7:12:4b:ca:64:
40:1c:7b:af:e1:97:ef:e8:95:f3:1a:b0:63:04:63:a1:cd:a6:
38:fe:67:23:a8:d1:2b:36:ff:0b:47:a2:d5:ce:f3:30:65:78:
dc:70:a1:58:a5:4b:72:53:a7:4a:f1:44:f6:be:77:bf:eb:61:
da:9a:e2:33:2e:02:b6:e4:63:06:8e:2e:83:7d:f1:7b:f1:57:
04:52:66:fe:9b:b1:97:91:0c:c2:da:04:73:e7:f4:12:f6:ed:
12:c3:01:c0:61:1b:11:8f:83:4a:0b:c7:86:19:3c:59:ce:02:
33:6c:70:ad:4a:51:82:27:c1:5c:20:55:27:0a:bd:cf:45:6b:
34:b3:20:39:70:31:08:fb:34:54:12:85:db:83:f3:29:d7:f5:
ee:9e:0a:8d:3e:71:0b:c9:be:0a:78:37:68:1d:67:a7:3e:b2:
8e:29:92:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:39:59 2025 by rpki-client