Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: z5s0oEfP7KWIEOtBEqWc5U9dKvPJgXXWLoxPDX/cpBA=
Subject key identifier: 2D:70:F9:34:22:4F:3B:DA:A3:F1:D3:3B:F1:58:15:6E:E5:8A:6C:6D
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0196526D60B2660BFB036D847714A73C4385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 09:00:21 +0000
Manifest this update: Sun 20 Apr 2025 09:00:21 +0000
Manifest next update: Mon 21 Apr 2025 09:00:21 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: unnqtRQDwk59lOtQqVj6X/Sh7DONyN08fmVbgbSurrA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:60:b2:66:0b:fb:03:6d:84:77:14:a7:3c:43:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: Apr 20 09:00:21 2025 GMT
Not After : Apr 21 09:00:21 2025 GMT
Subject: CN=2d70f934224f3bdaa3f1d33bf158156ee58a6c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:3c:ce:1d:23:21:37:2b:ce:bf:ee:e3:36:
36:8e:be:6d:12:2d:7e:b4:89:cd:9d:6b:ed:b4:5e:
9f:b9:12:9b:f7:73:ec:14:b0:d7:de:9b:b4:8c:4b:
7a:3f:e7:d3:df:ad:3a:29:4c:63:df:0f:30:64:ff:
ce:1d:21:d6:11:25:7f:b7:4a:86:4d:72:e4:8a:ec:
97:e1:8b:48:fb:3c:9c:b1:f1:ce:ad:eb:aa:df:5f:
be:40:29:33:4f:c1:52:ab:b2:4a:49:dc:2b:5e:ac:
fc:ea:7e:c6:85:5c:5c:c9:61:01:21:a5:74:9d:db:
36:59:b9:11:a3:97:5e:ca:ec:ad:65:58:89:d3:c1:
4b:06:79:5b:c8:ac:22:5f:de:3d:72:0f:25:00:ef:
9d:4b:a5:75:03:49:eb:e3:4b:ac:a9:7b:20:a6:a0:
b4:26:43:4a:1f:36:23:a6:bb:c5:de:22:8e:25:49:
ed:25:2e:1a:a2:4b:68:92:d9:43:eb:5f:9f:06:86:
3a:2d:53:19:5b:c9:4e:eb:49:ca:95:85:ef:cb:d0:
d3:ce:45:80:04:ed:7c:56:7f:50:5b:59:cd:81:5f:
10:af:a7:e0:58:87:64:9b:dc:f0:d4:11:6b:d8:47:
00:22:db:8a:24:9c:e2:c5:94:3d:2f:84:0a:29:14:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:70:F9:34:22:4F:3B:DA:A3:F1:D3:3B:F1:58:15:6E:E5:8A:6C:6D
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:56:6a:d9:6e:d1:40:35:00:c8:dc:8b:66:30:80:dc:b9:3e:
b5:35:f7:d4:4d:7d:6f:bc:03:19:49:23:1c:8b:3c:a2:0b:83:
5d:61:2e:d7:06:9c:66:d2:97:39:2f:3c:35:a5:b8:ff:d0:66:
7c:63:cf:e3:96:84:08:f8:6a:1b:25:03:d0:88:19:6f:84:ce:
19:94:4a:e4:8b:8a:fb:93:14:9e:65:7b:80:83:a1:99:8f:ef:
8e:ad:f7:28:b2:e4:86:c5:9e:ab:ab:8d:cc:c3:05:d1:57:60:
70:d8:c8:b8:f7:82:41:1a:16:2e:c6:d3:e7:39:6f:21:8d:c9:
32:5e:03:41:66:63:67:9c:17:ba:c5:0f:5b:de:6d:7f:6b:85:
12:a3:20:f7:f1:ca:d8:65:b0:e1:3e:db:f7:d0:6a:54:e4:62:
f1:bb:6e:75:a2:ac:11:18:f7:91:c4:ad:92:8c:07:42:42:46:
26:fc:db:4b:e2:8f:85:1c:11:d3:2d:cb:06:64:4d:49:f5:75:
7d:a5:32:a3:c3:a3:f3:00:7e:11:f6:19:0c:87:6b:04:5d:a3:
8c:20:fa:51:2d:58:9c:69:74:eb:6c:b2:46:5d:cf:69:fd:4c:
66:ad:df:db:ce:de:39:0d:5d:9c:68:6f:3e:1e:85:e7:fc:27:
be:32:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:40 2025 by rpki-client