Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
File: kNPlNxtkq5QtbcugSt_yrnq3xxI.mft (raw, json)
Hash identifier: pH5Rq5fclkT3sM1uHMjBzGB6q15K7N1q8QKJdvSP3Dc=
Subject key identifier: 7A:E0:F8:67:5A:F3:5E:D8:8A:9D:5A:7E:58:91:21:88:CE:3C:F4:C4
Authority key identifier: 90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
Certificate issuer: /CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Certificate serial: 01964F6CE6BB1E1D466B935CB8E2603859C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 19:00:59 +0000
Manifest this update: Sat 19 Apr 2025 19:00:59 +0000
Manifest next update: Sun 20 Apr 2025 19:00:59 +0000
Files and hashes: 1: 8qr5TNtGc99EM-QMiEzlHX-eukY.roa (hash: dcTHPs/n6VDmLIgcktF37rlPg3cwpYptx2bPoNDPRlM=)
2: kNPlNxtkq5QtbcugSt_yrnq3xxI.crl (hash: ssm2ZU7GsIcBCxxwedIKbsYiKSn2BC8C40/vF6ItvYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:e6:bb:1e:1d:46:6b:93:5c:b8:e2:60:38:59:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d3e5371b64ab942d6dcba04adff2ae7ab7c712
Validity
Not Before: Apr 19 19:00:59 2025 GMT
Not After : Apr 20 19:00:59 2025 GMT
Subject: CN=7ae0f8675af35ed88a9d5a7e58912188ce3cf4c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7a:fb:18:55:b3:bb:72:8c:af:d1:28:ee:b2:
57:68:e1:52:29:a0:7d:ef:e2:13:79:98:7d:63:78:
49:8b:79:2b:ab:be:d6:92:60:70:b1:b4:db:a7:95:
01:3e:6c:75:fd:2a:dd:ec:be:21:64:42:37:f8:e0:
66:13:6a:ff:90:a2:87:03:43:b5:04:75:8a:39:eb:
24:3d:e4:ed:0f:45:14:1a:7d:4b:2f:d2:c7:e6:b0:
54:b9:54:f5:93:89:3c:ca:d7:6e:e4:51:e1:47:88:
02:ac:ce:c4:1e:d3:1d:5f:07:47:5d:3f:22:65:47:
05:b5:d5:96:cc:c3:ce:91:a1:a8:47:9c:16:e9:ba:
dc:8e:73:1a:fb:d2:a2:b3:4c:54:43:ee:a7:cf:44:
06:6d:f0:24:a6:2d:20:3b:b6:54:a3:9c:81:db:79:
46:0a:69:c3:78:1b:72:c7:dd:90:c3:50:1c:78:e6:
5c:b7:4e:1e:f8:fe:29:b7:f8:13:38:53:c2:bf:07:
f9:1a:92:96:31:6e:67:89:49:e0:88:bc:87:fa:d9:
3d:5f:ef:d3:34:af:b9:6d:69:63:57:04:68:23:43:
31:6f:67:1f:32:f7:b2:76:33:0b:ae:ee:06:38:69:
32:4b:94:51:bc:3e:00:45:ff:bf:46:54:8b:80:6c:
dd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:E0:F8:67:5A:F3:5E:D8:8A:9D:5A:7E:58:91:21:88:CE:3C:F4:C4
X509v3 Authority Key Identifier:
keyid:90:D3:E5:37:1B:64:AB:94:2D:6D:CB:A0:4A:DF:F2:AE:7A:B7:C7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNPlNxtkq5QtbcugSt_yrnq3xxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/c139a4-6da2-4329-aae2-a17882b926a0/1/kNPlNxtkq5QtbcugSt_yrnq3xxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:a8:fa:12:91:79:74:d8:b4:7a:1f:fa:3c:f9:9c:2c:04:3f:
cb:ea:15:f4:e8:de:4f:6c:6d:ad:57:d4:de:8b:8b:26:a0:c8:
64:56:c0:ce:32:d8:c7:04:a9:90:16:19:40:e7:fa:ed:73:e4:
86:10:db:fe:02:22:ad:95:35:1c:ba:9a:f8:86:0b:a8:03:34:
90:c0:55:42:a4:d5:f3:be:28:97:a7:ac:ff:c0:e6:55:6c:67:
19:86:01:81:c0:e3:ba:d2:ad:2a:83:92:9c:59:a7:5e:da:d8:
2d:2f:68:9d:57:99:55:4f:84:a4:05:5e:3c:f6:01:5c:66:ae:
3e:b1:b6:69:88:34:66:87:6b:98:14:65:c1:2a:91:67:a0:59:
1e:0d:f4:d7:e7:da:2c:21:40:cd:e8:f2:43:a2:4b:30:f9:ab:
42:77:15:56:22:fe:8d:64:f3:62:b6:71:ed:3a:04:e7:66:e1:
52:58:1f:d3:9c:0b:63:15:27:06:ad:ab:44:2d:a8:e5:e2:f5:
38:46:b3:bb:03:ff:e9:3c:d7:96:57:7d:82:41:4d:9f:65:cb:
0b:7a:db:c9:03:d8:37:81:9c:4a:4a:9f:d6:02:30:73:bf:bd:
de:4f:d8:11:9b:87:6b:b3:22:22:71:45:19:d5:1c:e1:fd:74:
3a:55:0b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:13:55 2025 by rpki-client