Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
File: KT4M2LPgRO24I672iKr7C3XehnU.mft (raw, json)
Hash identifier: xNYoaeQPElraSRbRtxyJLYTnGEYBxGRVmMjDBp+qIos=
Subject key identifier: 6A:94:96:9D:79:EF:B5:4C:E6:55:B3:CB:31:98:8A:CF:04:07:49:64
Authority key identifier: 29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
Certificate issuer: /CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Certificate serial: 0196410C21FA2AC21FEA4E85A82EF66D5866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
Manifest number: 1251
Signing time: Thu 17 Apr 2025 00:00:36 +0000
Manifest this update: Thu 17 Apr 2025 00:00:36 +0000
Manifest next update: Fri 18 Apr 2025 00:00:36 +0000
Files and hashes: 1: 1-ecgLM9Ei9k4oVFiF4_4nYtHj5o.roa (hash: WRYcSDPy+48O3h5FVEkLg3Iy70hWglPF/KiTfUTP0D0=)
2: 4TAvnt0eG7JuKsSMWZUEgsGMvao.roa (hash: n2Kdbh6aM1gzVM7r4e4o1E7EcRngRjFAuhxJZjUQisg=)
3: GGRSsytPMsehyIvT0Ks7HBxoCsU.roa (hash: cnh4oBPVR37nXyxbz0cYq9xtEn4YLbLofR4YLwkw1Ts=)
4: I5vHd7lVuPhXCFCVsngGzRiZCQ8.roa (hash: w6dB9/2/3Ylmx4FqH2XdUEpGWNbQcgKGdMRT0Ysa7sA=)
5: KT4M2LPgRO24I672iKr7C3XehnU.crl (hash: 11EV6csNmIJUyolimUeMq+S4AjJNlEgHZXmvRmI8LWw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:41:0c:21:fa:2a:c2:1f:ea:4e:85:a8:2e:f6:6d:58:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293e0cd8b3e044edb823aef688aafb0b75de8675
Validity
Not Before: Apr 17 00:00:36 2025 GMT
Not After : Apr 18 00:00:36 2025 GMT
Subject: CN=6a94969d79efb54ce655b3cb31988acf04074964
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:7a:1d:4c:58:5b:34:80:a8:68:45:3c:94:
7c:8e:9b:7f:70:56:45:39:1b:d6:0b:41:51:90:7e:
d6:65:b9:9d:a4:73:7b:3d:0f:0f:b5:b3:26:63:df:
d6:ee:23:09:48:f1:b6:d8:32:b2:4e:a1:20:19:a6:
73:6f:f3:e8:85:41:ca:58:5e:9b:2f:1a:bd:75:4c:
f6:22:72:31:19:d5:68:fd:60:15:74:91:22:c8:f0:
0c:7f:01:f7:67:62:e7:d1:31:68:14:40:3a:11:ca:
36:41:e4:78:02:17:99:05:0f:b1:bb:0f:c1:07:cb:
2f:1a:46:51:6d:6f:93:89:49:92:75:89:24:e8:f9:
07:77:6f:45:a9:a6:e8:98:63:6d:3d:3e:69:6c:cb:
24:7c:9e:89:78:c6:7d:e7:2b:84:ff:08:9d:29:1e:
69:f1:90:b5:41:da:9a:8b:81:4b:ea:f0:2e:97:3f:
4c:52:8a:0f:1e:6c:7d:f1:9a:ed:81:35:54:36:86:
70:af:46:81:b7:e9:74:b6:29:e4:84:6e:f7:dc:77:
58:a2:f9:1a:2d:fd:4c:f6:82:e6:5d:65:9d:82:87:
40:2f:8f:b7:82:19:b8:33:7a:fd:02:45:48:d7:d2:
03:42:27:5e:e3:eb:37:60:04:d4:53:03:e0:12:77:
f6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:94:96:9D:79:EF:B5:4C:E6:55:B3:CB:31:98:8A:CF:04:07:49:64
X509v3 Authority Key Identifier:
keyid:29:3E:0C:D8:B3:E0:44:ED:B8:23:AE:F6:88:AA:FB:0B:75:DE:86:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT4M2LPgRO24I672iKr7C3XehnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/6da1c2-252d-4bd2-b56c-bb217cc3b78d/1/KT4M2LPgRO24I672iKr7C3XehnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:75:1e:dc:a2:5e:67:6c:d4:f2:27:d8:8f:29:d8:e5:dc:
87:b3:e6:55:1e:a3:2f:54:85:a5:bd:fa:5b:8e:5a:e0:2f:85:
03:ec:03:10:84:ea:4f:8d:bd:0f:4c:90:53:48:1c:22:71:d7:
1b:5a:c5:21:83:29:3e:f3:18:00:63:38:f4:f8:b9:c4:70:5f:
a1:2d:c4:a2:0b:38:e9:16:9b:6a:d4:32:44:67:59:05:97:32:
c0:ea:5d:04:0f:ca:b9:13:b7:fb:9c:30:b9:68:d2:b6:94:fe:
75:d6:6f:50:ff:48:e2:6f:46:cf:14:fe:ed:fa:8c:3c:b5:84:
e4:33:df:45:1d:02:c3:10:4d:3e:be:cc:ec:34:a1:23:69:ad:
95:b4:d2:5f:f5:24:c6:ac:a8:61:e1:05:2d:33:76:bc:72:6a:
3d:ef:28:87:db:5f:b0:07:bc:83:52:df:1f:90:62:fb:bd:15:
ab:58:ca:fd:53:4d:d1:61:58:4f:0e:fa:18:54:cb:0f:4e:44:
2e:37:32:e9:d6:f8:53:26:55:a8:e7:2f:fa:97:67:af:e5:80:
13:00:5a:82:91:7b:90:3a:5f:4b:84:b0:03:7f:d9:87:59:20:
22:ec:99:59:07:f0:7a:36:0d:24:cf:73:e2:01:86:f5:af:71:
0a:36:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:06:27 2025 by rpki-client