Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
File: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft (raw, json)
Hash identifier: IJiDpw5eTNkJYHp+3WdDgslQVF1Io3IO83d0DmugSOs=
Subject key identifier: 92:AD:96:E3:D7:BA:96:00:89:8A:3E:21:1D:A1:74:2F:86:D0:36:73
Authority key identifier: 90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
Certificate issuer: /CN=90c3cae86555687324319d1226938c703ee4edc1
Certificate serial: 019653121CB574B6F65EF98CC0F4F8C2DFA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
Manifest number: 0554
Signing time: Sun 20 Apr 2025 12:00:17 +0000
Manifest this update: Sun 20 Apr 2025 12:00:17 +0000
Manifest next update: Mon 21 Apr 2025 12:00:17 +0000
Files and hashes: 1: 0uXZsIzOuGlbguIFz3Zkl5De9lU.roa (hash: YNeeVSttuQ98olLv+5aLbTyXkKQvSMcGX+VvVs9cMAQ=)
2: kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl (hash: IUL9gpD2e5GcURk7U545mY+RIMEgtkoVK8JbPskEO9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:12:1c:b5:74:b6:f6:5e:f9:8c:c0:f4:f8:c2:df:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90c3cae86555687324319d1226938c703ee4edc1
Validity
Not Before: Apr 20 12:00:17 2025 GMT
Not After : Apr 21 12:00:17 2025 GMT
Subject: CN=92ad96e3d7ba9600898a3e211da1742f86d03673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:55:8b:d0:e9:f9:8f:77:58:91:91:c5:5d:9e:
65:58:48:03:7b:de:ea:c1:11:ac:b6:fa:9c:c6:b9:
64:77:d7:12:f1:98:50:c4:bb:a8:76:4b:a4:a7:8c:
b9:8a:01:36:5e:a0:22:64:8b:75:5e:f2:6f:e5:c5:
20:9f:00:f5:b9:65:6b:35:32:46:59:ed:ab:95:19:
9e:d2:75:5a:55:82:9d:c3:05:50:ed:b6:52:66:62:
54:7a:f5:4b:ae:26:09:fb:1d:1d:0e:a9:1c:c8:29:
ec:da:c8:64:f1:55:d0:9b:ad:28:0a:3b:1b:ac:0b:
8a:44:36:6e:63:14:e0:ad:06:87:5f:e8:ae:e0:a3:
c4:b0:e7:c1:b2:a8:fa:9f:84:ba:bc:a6:f2:a1:8e:
e4:a7:a9:c1:36:31:a6:c6:9c:0e:e2:92:ad:ba:26:
09:3b:4e:a4:e8:14:79:02:f7:a1:9e:3e:5f:2e:62:
0a:29:7f:de:5f:51:75:8b:d9:db:b0:67:4d:5c:5d:
c5:4d:1d:17:30:f2:34:36:20:a9:42:6f:e0:d0:d6:
5a:5f:74:79:51:9d:95:ec:ae:21:3d:a6:e2:e3:a5:
fc:05:62:ff:04:31:f1:7c:17:a9:d7:6c:ca:e7:07:
87:96:d7:e5:a5:f3:56:48:0e:bc:eb:96:9c:39:0c:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AD:96:E3:D7:BA:96:00:89:8A:3E:21:1D:A1:74:2F:86:D0:36:73
X509v3 Authority Key Identifier:
keyid:90:C3:CA:E8:65:55:68:73:24:31:9D:12:26:93:8C:70:3E:E4:ED:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/64db24-bc36-4ca1-ab02-b139b2a3fe49/1/kMPK6GVVaHMkMZ0SJpOMcD7k7cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:eb:95:e1:57:d3:54:f2:9c:8b:e0:88:c3:f4:7e:a4:51:b2:
24:f0:5c:23:8f:ae:b2:6b:18:a3:ee:c5:5d:11:39:aa:ee:65:
96:b2:86:6a:4b:ad:4a:89:ab:4e:08:87:75:21:8f:19:78:ae:
a8:b1:d4:15:50:bb:ad:ee:b7:7a:16:03:fb:24:62:fb:e6:bc:
58:08:76:6c:c5:ca:e8:19:08:ec:8a:9d:3d:61:21:77:96:1c:
b8:2c:59:43:4c:cd:ad:af:6c:51:41:41:02:8f:83:4f:19:07:
03:72:89:8f:90:ed:8c:83:ea:f1:e7:90:10:8e:af:8c:0c:32:
e7:57:55:fe:39:43:e0:67:58:d5:36:67:a8:72:58:62:99:c5:
0d:05:93:07:a1:bb:ca:92:6d:87:31:56:a1:9c:4e:ea:3a:cf:
6c:89:b1:f9:1a:1d:d2:1f:70:e4:1e:c5:89:c0:26:cf:9a:c3:
8f:78:d2:1a:0e:69:1d:4d:e7:e6:56:53:21:1d:13:ee:31:be:
c1:9c:f3:ec:ac:70:72:0e:2e:84:98:35:d6:68:c8:18:0e:48:
03:f1:05:73:a4:d1:d5:34:cc:76:41:3a:cb:90:95:57:fb:c7:
da:d4:02:20:ad:62:42:3a:97:a7:fd:61:60:20:e6:60:5f:8f:
3c:fa:95:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 21:38:39 2025 by rpki-client