Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
File: KB1PRjcTq5qSe37joQEFKxS6zDE.mft (raw, json)
Hash identifier: v2jBHTH8qmD7bUaABBEj8kAK99GT0lJBH9ugSEkk8wM=
Subject key identifier: 46:54:F0:BE:47:83:10:E3:30:26:E8:60:DB:20:D3:84:92:C4:9A:BA
Authority key identifier: 28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
Certificate issuer: /CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Certificate serial: 01963F8B925FFF0A729E9C18B5AB58520F70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
Manifest number: 04E5
Signing time: Wed 16 Apr 2025 17:00:33 +0000
Manifest this update: Wed 16 Apr 2025 17:00:33 +0000
Manifest next update: Thu 17 Apr 2025 17:00:33 +0000
Files and hashes: 1: 8xc5T7ury5KMF2VHztRlqOAeusg.roa (hash: x55hxfreszTrIIkybXdPS6uk26DUagMuBTackSU0wLE=)
2: KB1PRjcTq5qSe37joQEFKxS6zDE.crl (hash: Jjbf8CYjU3in6e7xkAK4/Z/5Go3sV9fZxVtpzTgp+UE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:8b:92:5f:ff:0a:72:9e:9c:18:b5:ab:58:52:0f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281d4f463713ab9a927b7ee3a101052b14bacc31
Validity
Not Before: Apr 16 17:00:33 2025 GMT
Not After : Apr 17 17:00:33 2025 GMT
Subject: CN=4654f0be478310e33026e860db20d38492c49aba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:00:bc:85:a6:c1:9b:3a:9e:2b:2b:b3:81:
90:25:f7:bd:4b:09:67:53:0b:5b:14:42:ea:68:16:
a2:37:3c:2e:3c:96:5e:7d:e3:e0:e5:4a:a6:24:d9:
be:27:30:9c:21:28:03:d8:03:a4:3d:ee:68:90:02:
89:72:7a:6d:b4:1e:98:7f:68:78:49:bf:b5:b1:a3:
21:0e:ae:26:c8:33:51:5e:2e:ad:36:dd:94:cb:33:
67:05:7d:67:20:74:c5:df:e3:4c:92:7d:d2:01:83:
d0:d3:ad:2e:e1:c1:9a:fb:c1:11:1f:db:0c:bf:5d:
84:e3:6f:f3:31:f1:72:7a:1e:e1:bd:a2:05:0f:03:
f8:21:d8:ec:cb:8a:21:3c:9a:51:e7:e6:8b:b0:a8:
e9:d5:ed:52:97:a7:f8:96:2a:7b:c0:eb:ea:5d:27:
42:f0:b8:d0:d5:9d:aa:9b:9a:e3:ae:8d:1e:3b:40:
71:42:a4:47:39:cc:e7:93:18:3e:e1:b1:14:a5:5a:
42:58:60:f7:bc:fb:02:11:e8:59:36:77:25:e1:b9:
05:f6:5d:4c:bf:71:20:d3:a0:cc:99:3f:3a:18:5f:
ed:9d:4b:31:dc:80:14:b7:53:c0:97:b6:3b:48:67:
fa:ac:0d:1f:fa:8f:bf:24:0f:cd:6f:9a:ee:7e:db:
bb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:54:F0:BE:47:83:10:E3:30:26:E8:60:DB:20:D3:84:92:C4:9A:BA
X509v3 Authority Key Identifier:
keyid:28:1D:4F:46:37:13:AB:9A:92:7B:7E:E3:A1:01:05:2B:14:BA:CC:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KB1PRjcTq5qSe37joQEFKxS6zDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ffff6c-c444-427e-8716-2ed2fea21e3e/1/KB1PRjcTq5qSe37joQEFKxS6zDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0a:0f:29:32:69:14:d3:df:37:ab:bb:5b:9f:c8:09:ba:35:
43:19:07:0d:4f:04:2e:ca:26:4e:5a:d6:15:0b:a4:1b:51:fa:
ea:b6:52:a3:d7:48:19:f8:c3:69:01:f1:25:e4:bb:ff:87:85:
6a:55:23:84:ef:b7:10:49:9b:99:ee:d0:88:79:96:d0:3d:45:
51:e3:8d:f0:2f:3d:05:64:9f:df:67:6a:b1:8c:f3:ac:2d:dc:
17:c7:06:2f:9b:ae:78:cb:31:ae:3e:81:ea:04:13:6b:ec:1d:
21:86:a0:35:6e:ac:34:b4:d3:1a:e2:c8:1b:50:68:70:c9:4c:
53:e2:88:81:54:96:d9:80:c9:34:00:ad:fc:ae:8a:fb:36:e6:
dd:03:ba:1b:dc:8f:c4:fa:be:7f:6f:7f:a6:dd:44:b4:b4:5c:
55:0d:0e:0d:c7:50:59:a7:e4:34:30:ea:f4:10:45:54:ad:e4:
61:e7:81:b6:31:59:a1:ec:22:c8:8a:0b:74:f6:1b:b4:71:a7:
6c:87:26:48:24:fd:36:18:6f:3d:7d:d9:fc:80:bc:17:67:25:
67:d3:7e:48:d0:e7:ab:04:22:46:fe:64:9d:bc:82:b6:9e:c7:
2f:35:aa:35:db:83:21:cc:fe:45:f4:52:f2:33:34:91:8c:e6:
9c:3f:71:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:56:06 2025 by rpki-client