Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
File: ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft (raw, json)
Hash identifier: pObmKsh/JIHvNUIQQMUyUC17e+s8mTWsHn/I6iqlcWU=
Subject key identifier: 24:4C:F5:9E:85:15:E5:AD:7C:51:80:90:C8:3B:6C:DA:10:E4:42:B8
Authority key identifier: 92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
Certificate issuer: /CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Certificate serial: 019655385A498C010FC60B6A043D186EA978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
Manifest number: 0194
Signing time: Sun 20 Apr 2025 22:01:18 +0000
Manifest this update: Sun 20 Apr 2025 22:01:18 +0000
Manifest next update: Mon 21 Apr 2025 22:01:18 +0000
Files and hashes: 1: jOZUYryfotd3VTVGeBf6KTjWoz0.roa (hash: JyJSKW3JZ65ZSPqlG2CxfcAq5uNzQ++VbUTzOkT80MI=)
2: ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl (hash: gTMB+/Azwlp+AvQxe0I3V6ISoO8/ShO+bSXkRyygGug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:5a:49:8c:01:0f:c6:0b:6a:04:3d:18:6e:a9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c42484d75ad7a427dcf61b5ac9ac56543e9f33
Validity
Not Before: Apr 20 22:01:18 2025 GMT
Not After : Apr 21 22:01:18 2025 GMT
Subject: CN=244cf59e8515e5ad7c518090c83b6cda10e442b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:4e:e9:02:b2:0f:3d:c9:9e:43:e5:d6:21:
bb:eb:c2:3c:2e:9f:5a:fc:b9:43:2d:15:86:e9:de:
bf:67:a2:8c:c1:88:f6:84:84:e7:5a:01:9e:dd:ef:
1e:ad:85:b3:b9:23:41:39:d7:ce:38:20:fe:c4:c1:
a2:38:35:4a:fd:09:f0:0a:fb:80:61:f8:83:13:8e:
bc:6a:2e:e5:2a:86:37:7a:8d:53:13:5e:2b:44:5e:
c9:20:56:5b:29:74:63:a1:e1:14:e7:16:1e:5b:a5:
a6:18:44:54:c8:18:9c:21:9c:a6:eb:89:15:3e:df:
50:56:74:45:0d:a6:ce:8d:3f:fe:ca:31:10:85:16:
31:b4:27:74:e1:4b:c4:67:3a:c5:99:c2:23:5e:59:
b7:20:9d:91:a3:99:e2:82:5d:66:8d:43:bb:75:69:
19:22:e5:93:50:d7:2d:11:a4:be:cd:9f:48:6c:87:
66:54:89:a2:16:49:1a:20:84:88:86:e9:68:d4:af:
fe:92:6e:16:23:ad:7b:6f:7b:03:f3:53:58:89:37:
56:21:2b:9c:b8:af:96:a7:61:17:f3:27:15:bb:15:
79:5f:af:87:a5:d3:0a:cd:37:c5:07:63:ea:a7:ac:
41:88:4f:6c:d1:32:5f:52:19:b7:ac:81:3f:56:0c:
40:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:4C:F5:9E:85:15:E5:AD:7C:51:80:90:C8:3B:6C:DA:10:E4:42:B8
X509v3 Authority Key Identifier:
keyid:92:C4:24:84:D7:5A:D7:A4:27:DC:F6:1B:5A:C9:AC:56:54:3E:9F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksQkhNda16Qn3PYbWsmsVlQ-nzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b92d0d-36f1-46f6-a661-292fead12d59/1/ksQkhNda16Qn3PYbWsmsVlQ-nzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:64:78:cf:53:0c:4e:65:c8:ab:d3:dd:42:77:f7:59:0c:46:
c9:8a:89:d3:24:26:a3:82:66:d5:f8:a4:f1:31:53:87:90:aa:
54:00:fd:28:97:82:f3:e0:27:49:93:59:90:74:76:2b:6e:eb:
97:45:7a:72:7f:1e:96:04:e4:96:9d:78:a1:0f:99:a4:5e:7f:
58:ca:01:91:a1:7b:7c:0e:a6:44:1d:63:b8:27:da:d4:6c:cb:
d5:02:f7:2f:18:f6:49:68:ef:28:a0:7f:b9:4f:29:d1:2c:5d:
cc:ce:eb:33:de:23:1a:fd:99:dc:a7:d9:03:6c:f7:3d:73:54:
6c:90:6b:0b:84:58:2b:b8:21:6b:c6:b1:62:3f:a8:19:e5:3e:
e8:cc:ee:f7:2d:6a:bd:04:4a:d6:89:4d:4e:d8:8d:1c:de:b4:
d6:0a:c2:bd:e9:6c:6f:99:4d:bb:1a:72:9f:1f:4a:54:95:10:
2a:63:4f:14:8a:0e:e2:92:77:c1:0c:cc:aa:7e:6a:27:2a:12:
56:93:f5:c5:8f:27:64:72:f7:f9:b4:f6:58:4e:7d:9b:7c:fa:
f8:6e:26:9d:6d:14:b9:a6:28:ae:89:3d:40:69:d0:a1:03:74:
46:bc:26:fc:a5:b5:18:82:17:ca:9b:51:d3:ed:83:c7:0b:19:
d8:22:68:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:46:24 2025 by rpki-client