Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: Cj3NoyzOLRsRqAaAsr/GqsgRkxs5X8kzj4Qb0rK/AHg=
Subject key identifier: 80:7B:45:E1:BC:E4:4E:BC:DE:55:E2:08:4F:E4:03:BE:04:FC:18:F6
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019647B2A2091482E7D0A9CB0C50303CE435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 04B4
Signing time: Fri 18 Apr 2025 07:00:11 +0000
Manifest this update: Fri 18 Apr 2025 07:00:11 +0000
Manifest next update: Sat 19 Apr 2025 07:00:11 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: JYBk4VuuadmwafYk/8Gbkqr01FCOBSndrKmxenhE2jM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:47:b2:a2:09:14:82:e7:d0:a9:cb:0c:50:30:3c:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Apr 18 07:00:11 2025 GMT
Not After : Apr 19 07:00:11 2025 GMT
Subject: CN=807b45e1bce44ebcde55e2084fe403be04fc18f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:15:11:d6:97:1b:ab:cf:80:e3:30:f1:61:9f:
65:65:30:83:8d:b2:7e:d7:52:62:15:32:33:3c:b8:
9f:55:e0:6d:0d:33:12:4e:c3:38:c0:31:79:b5:af:
d6:f9:9f:f8:99:19:94:07:bf:d7:0c:fe:27:05:69:
08:49:bc:55:3f:af:97:42:f8:89:53:a0:f5:03:04:
4a:58:2b:d0:58:27:1b:c8:84:d7:ea:87:8c:e9:d9:
55:6d:60:f6:ca:31:30:e3:9f:dd:2e:8b:b6:54:a5:
27:63:c3:a6:87:65:01:fd:a0:d3:c5:8d:c8:55:32:
6d:2b:da:ec:9f:02:77:b8:25:49:50:61:04:14:8f:
8d:94:5a:32:db:5b:a0:45:2b:4c:0f:50:c4:40:06:
0a:92:3b:a5:03:da:c1:cf:0d:b6:14:f8:30:39:04:
69:97:fb:c4:1a:66:a5:86:41:ad:1b:a5:5b:6d:b8:
4f:c0:76:f7:9d:46:2f:e5:af:71:5a:56:b3:cb:0c:
d5:5e:d4:2a:00:ed:86:a9:fe:c3:38:50:f9:7b:6d:
21:58:3c:69:8d:15:e1:a8:86:9e:e4:9f:82:3b:04:
c1:28:a8:b2:03:09:10:fb:f3:5a:98:74:64:44:19:
36:e0:67:48:e6:3c:ab:04:90:e9:2b:6c:20:10:db:
24:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:45:E1:BC:E4:4E:BC:DE:55:E2:08:4F:E4:03:BE:04:FC:18:F6
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2e:f6:db:08:6a:4a:8c:96:97:be:0e:8a:2e:51:ee:7f:e4:
02:f4:2b:ba:cb:47:a8:cc:0a:68:ae:f3:92:4f:93:73:75:7c:
40:5c:a6:b4:c0:86:3e:02:47:29:1b:6b:61:57:3e:2a:8c:52:
8f:37:19:b2:3d:01:c9:f1:f9:25:1d:6a:cb:7b:c6:3b:f2:08:
27:a8:0d:19:f0:c8:ce:4f:40:de:16:4e:e9:8e:5c:63:b9:f7:
f3:d8:6e:11:22:91:2f:6e:cf:8f:a7:f9:ff:c6:9f:f4:89:f0:
b8:c3:71:5f:0f:9c:57:d8:cb:67:63:f7:c5:e8:bd:e3:51:68:
97:7b:18:8f:5f:f0:e0:25:97:b6:41:b8:3d:b2:51:78:31:ed:
65:af:43:9d:81:2d:84:31:ab:04:3b:73:3f:96:1e:5d:94:46:
fc:f3:99:44:34:41:5b:1c:9c:18:27:92:a6:eb:0b:19:cc:d5:
ca:81:8e:d7:77:2d:39:f2:af:48:2d:21:5c:a5:35:13:79:57:
d5:0b:23:14:43:58:80:8f:6d:3e:11:07:86:b6:9a:1e:72:79:
7d:0e:cc:3e:d3:8b:95:f3:9f:a8:1a:b1:21:61:91:1b:31:7c:
a5:ac:66:22:94:8d:a4:bc:d8:ca:b8:18:fc:5d:29:ff:83:46:
b4:e8:f9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:36:28 2025 by rpki-client