Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: LDWTxwX6G9m4OUGTDauBlIrQzVs15uRBUBfThKPsedY=
Subject key identifier: E2:96:73:FE:C4:06:FF:F1:F4:D9:4D:52:6A:EA:D9:86:2B:A3:4D:18
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 019620DCEE0E467CBE9358E9E1F1F27D4B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 03D6
Signing time: Thu 10 Apr 2025 18:01:11 +0000
Manifest this update: Thu 10 Apr 2025 18:01:11 +0000
Manifest next update: Fri 11 Apr 2025 18:01:11 +0000
Files and hashes: 1: URATm4jCOgD3H4rtfNMfks3a2e4.roa (hash: nWiO/SjK1FVtNWytxucXj9X6RnD6dSqkVKhRqQz1kHk=)
2: hOs9nIaVlgbTGSRX2cF-L9A292Q.roa (hash: 2H7Eh3LEgJqf2jRLorxXZOs950af5ymfMFZuDGRu8KE=)
3: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: kMiIj7mraYVsKBd6Wqyh8PXA9mDtdiDwhVNwC9w+msU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:20:dc:ee:0e:46:7c:be:93:58:e9:e1:f1:f2:7d:4b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: Apr 10 18:01:11 2025 GMT
Not After : Apr 11 18:01:11 2025 GMT
Subject: CN=e29673fec406fff1f4d94d526aead9862ba34d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6b:77:e1:13:13:d6:1e:b5:88:1e:b2:2b:54:
d2:e5:0f:c2:c6:30:4e:25:9c:5c:29:23:20:a0:a7:
8f:25:af:72:26:00:a1:df:a2:e5:32:d4:01:b5:c9:
2a:2c:18:b6:3e:29:6b:79:e8:80:30:8f:77:3b:31:
1f:db:cb:42:7a:07:9b:48:c9:4a:7c:f0:2a:62:d5:
3b:52:e6:5b:df:01:b3:27:5a:57:a9:4a:5a:2e:c9:
ce:b5:d8:16:2f:e5:f3:6f:12:20:a8:06:11:c4:81:
52:e2:34:c8:4a:b9:f2:3d:f1:41:80:9e:80:d8:fa:
98:ac:d8:c1:d0:98:3f:8f:57:53:59:3a:95:e9:da:
02:81:40:cc:d1:dc:f0:b6:f5:be:27:7b:f9:e8:b1:
90:45:ac:3a:a4:aa:af:65:bd:db:ef:54:09:4f:a3:
26:5a:80:1b:c4:c6:8a:68:f4:41:e4:ad:6a:37:3b:
b0:40:00:12:ff:64:5d:e2:49:57:22:e7:b6:f7:1a:
fc:b3:59:c2:c5:f8:99:84:64:a5:01:27:78:95:e4:
09:e4:a7:2e:0b:75:f8:e5:d3:a6:ea:71:18:99:bd:
c0:df:0b:aa:35:25:9b:58:21:d1:d6:cd:15:d4:fd:
43:dc:6c:02:a2:26:bf:d5:7e:2e:ee:d4:68:2a:2d:
04:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:96:73:FE:C4:06:FF:F1:F4:D9:4D:52:6A:EA:D9:86:2B:A3:4D:18
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c6:1d:a7:9b:7d:37:a3:a7:3b:52:96:5f:40:75:7f:b4:e5:
ee:c0:17:45:57:f9:f6:b7:1d:c7:cd:7e:12:d4:63:63:a7:76:
93:2d:eb:83:29:8b:8b:70:32:50:2b:db:60:b4:c8:7c:85:47:
5e:19:b9:03:44:b5:8b:36:d3:b0:a5:8a:f1:85:c7:44:84:99:
70:d4:40:33:0d:7f:e7:0b:20:4a:02:71:a4:4c:e1:6c:ca:c2:
62:ff:d6:27:5c:8f:9f:e3:e1:de:e7:21:c4:b9:2a:eb:d9:d1:
18:3b:87:33:42:73:19:13:aa:b6:3d:2e:01:4d:f5:3d:e9:f2:
bf:83:e9:1d:4b:1b:57:03:63:86:18:af:29:1b:62:c0:cc:98:
f3:ae:40:53:d1:87:66:fd:6f:e0:26:f6:b4:6f:35:ba:c8:9c:
dc:5e:d6:cf:13:f3:63:81:f1:04:29:cd:cc:57:ed:cc:71:19:
90:f0:ff:36:58:a5:ad:dc:43:d3:4f:1d:b3:11:4e:34:99:20:
b8:2c:86:f9:f2:d4:70:3a:a8:12:f5:61:65:56:b3:aa:2b:b7:
22:7d:aa:45:8b:2c:7a:41:25:34:1d:10:24:5e:aa:8f:5f:27:
5d:4b:9b:3a:6c:ec:45:c7:15:72:63:31:fc:32:72:4c:8c:0b:
f9:00:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 02:41:59 2025 by rpki-client