Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
File: kVVkGgex5FW3iSuS2A1gkSORsg0.mft (raw, json)
Hash identifier: 3KojkSRfyGjNm/uGiaJQlYgvCvAAW8YyfBxgoobQDgg=
Subject key identifier: D1:9E:E5:E5:56:29:5D:F8:88:31:87:01:B3:63:A5:7E:8D:1E:B5:1E
Authority key identifier: 91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
Certificate issuer: /CN=9155641a07b1e455b7892b92d80d60912391b20d
Certificate serial: 019644B209AE62B77CDB7D590CF8B505B565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
Manifest number: 0502
Signing time: Thu 17 Apr 2025 17:00:40 +0000
Manifest this update: Thu 17 Apr 2025 17:00:40 +0000
Manifest next update: Fri 18 Apr 2025 17:00:40 +0000
Files and hashes: 1: kVVkGgex5FW3iSuS2A1gkSORsg0.crl (hash: h+QMIWwYrZ338basjfg5jF3lrJCiR6IwGV6zv1BNDeA=)
2: ynCtEcXqVCBeEil-xI3WvK_dPRE.roa (hash: 0SptmV2vPd6kYrXF10jAqlyhF9V/f+S3u2RzwXs1PmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:09:ae:62:b7:7c:db:7d:59:0c:f8:b5:05:b5:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9155641a07b1e455b7892b92d80d60912391b20d
Validity
Not Before: Apr 17 17:00:40 2025 GMT
Not After : Apr 18 17:00:40 2025 GMT
Subject: CN=d19ee5e556295df888318701b363a57e8d1eb51e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:17:56:e8:dd:86:eb:fe:8f:09:6e:99:00:
e4:29:e6:34:56:cc:05:14:35:e3:a3:dd:0a:46:8d:
fe:ff:e3:00:66:43:26:6e:cb:01:46:34:86:cd:b6:
2f:f5:18:2c:ac:1f:c1:a1:09:22:bd:f0:8d:d3:6e:
c2:a9:bf:f4:9c:a0:97:91:b3:85:f0:82:e7:d8:14:
2d:db:b5:4d:9f:a8:df:27:6d:1a:b7:79:91:12:56:
7e:e4:c0:02:67:2c:90:9e:f2:34:85:24:df:c3:28:
da:d8:6b:82:79:5c:aa:b7:66:06:06:2b:90:d2:80:
82:81:20:1f:5f:6c:2a:d4:7f:0b:48:c9:2a:30:cc:
26:d6:45:60:be:96:c6:f1:12:fb:8b:e2:c8:fd:83:
ad:8c:e0:fb:f2:52:97:6e:40:e4:79:59:cf:b8:25:
ec:01:78:94:d6:6a:80:19:2e:5d:41:c7:80:5d:17:
25:d3:bb:02:2f:0a:11:60:da:36:be:0b:aa:26:64:
a7:af:76:b5:ad:13:c8:f6:03:9c:a6:a2:b3:5b:2b:
65:f9:79:ee:96:04:79:f3:6d:42:81:b2:ad:5c:52:
1b:8f:31:a0:8c:3b:ac:94:6c:d1:a6:9f:4a:80:a2:
0e:23:a3:2f:71:59:21:2a:ba:7d:b0:ca:18:04:ca:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9E:E5:E5:56:29:5D:F8:88:31:87:01:B3:63:A5:7E:8D:1E:B5:1E
X509v3 Authority Key Identifier:
keyid:91:55:64:1A:07:B1:E4:55:B7:89:2B:92:D8:0D:60:91:23:91:B2:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVVkGgex5FW3iSuS2A1gkSORsg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/aa5d8b-3ec9-4176-83e1-bcbfb217bc8f/1/kVVkGgex5FW3iSuS2A1gkSORsg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:bf:40:3e:ae:3a:58:79:07:39:79:c9:41:67:e9:27:be:b8:
ee:e9:49:01:de:15:c4:0c:3c:02:b8:17:83:9f:e5:f7:f2:81:
a8:33:cd:8c:7f:63:71:94:80:fd:17:93:1e:24:a8:94:18:28:
8e:79:5c:72:6d:74:62:a8:55:2e:ed:dc:db:ab:f8:9b:3f:d9:
f9:75:b7:20:3d:eb:59:c8:9a:ef:b3:65:37:16:1e:de:ba:42:
14:9c:e0:09:25:19:64:3e:1f:de:1f:7c:95:ef:b9:d1:08:74:
4f:ef:0b:92:63:13:fc:52:9f:6d:8b:ab:82:3d:5c:2b:3a:97:
b7:c2:cb:4e:bb:bc:c5:44:f4:a6:c2:e0:5b:48:d3:34:e3:65:
45:76:81:22:e6:e8:6c:10:7f:fa:6a:13:0c:f7:b7:e2:89:64:
b2:8e:cb:a6:59:29:b7:8f:e0:a7:35:a7:11:9f:ed:b2:4a:a1:
67:e1:60:6d:27:b2:94:bf:5a:dc:ce:9c:d7:b1:aa:d6:fd:ea:
3d:60:90:ad:3e:bf:c4:95:ea:50:e5:fc:3c:91:d1:bf:55:91:
51:c2:2c:40:6e:c6:c7:e8:c3:db:cd:d8:cb:26:55:58:dc:17:
25:11:e3:37:d9:64:7b:63:fe:ee:1e:ed:18:d4:26:7f:a3:7e:
41:4d:c4:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 01:02:50 2025 by rpki-client