Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
File: kioaZ-LacRLUVZzY29gUH48yd-g.mft (raw, json)
Hash identifier: fx3vCNTFTU0joR4y0C8ckiLFYGn1ddGVqfy+AeFDTKI=
Subject key identifier: 7C:E6:67:4C:8D:B9:11:26:8E:63:3B:2B:99:08:88:F9:AB:94:77:E0
Authority key identifier: 92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
Certificate issuer: /CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Certificate serial: 01965236950DED8624928CF2423E0C044BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
Manifest number: 1500
Signing time: Sun 20 Apr 2025 08:00:30 +0000
Manifest this update: Sun 20 Apr 2025 08:00:30 +0000
Manifest next update: Mon 21 Apr 2025 08:00:30 +0000
Files and hashes: 1: kioaZ-LacRLUVZzY29gUH48yd-g.crl (hash: A+xH62b/lEuY6iSe6ohmbefuPBSzddISWsHFNk3lFlc=)
2: q7WZGuRVxVy-2pf3zBIUBRQeEL8.roa (hash: /Mga5oX8Op4TctH5TWu+rLivpwbBRAO4KpJeZeXs2ec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:95:0d:ed:86:24:92:8c:f2:42:3e:0c:04:4b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922a1a67e2da7112d4559cd8dbd8141f8f3277e8
Validity
Not Before: Apr 20 08:00:30 2025 GMT
Not After : Apr 21 08:00:30 2025 GMT
Subject: CN=7ce6674c8db911268e633b2b990888f9ab9477e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a4:34:b4:e0:c6:5f:82:9d:1d:22:e2:4c:dd:
9a:59:bc:31:a7:c6:b6:a3:46:ac:f3:96:73:56:88:
86:08:72:e7:5d:87:22:c3:85:ad:1f:c2:43:85:62:
98:68:1d:da:40:9a:6e:7f:a1:41:ac:e1:ee:11:b3:
85:22:45:45:af:77:ae:8f:52:99:89:12:d4:b3:20:
cf:d5:d3:ca:d7:41:0a:28:41:33:73:01:a5:a0:be:
ea:7c:65:0c:2d:11:e6:1c:60:df:a3:ea:f3:61:b4:
88:f9:e6:38:58:bb:ab:2d:a1:33:f2:9e:fa:e2:6d:
1c:e6:17:e9:0b:03:81:a9:7d:9d:57:6e:4b:56:72:
a8:18:96:e9:4e:f3:e0:16:d7:86:ff:61:7a:e2:29:
42:de:02:e7:04:19:54:65:ed:06:1b:7b:83:20:63:
a2:fc:59:c5:2e:d4:60:d0:6a:54:27:d7:57:65:b6:
a6:1b:38:df:8f:b5:30:00:9a:d5:28:55:99:6b:ae:
1f:5d:03:dc:0a:6d:5b:cc:b9:98:ae:ea:4e:a7:03:
e1:66:3e:77:f2:78:05:35:5c:86:d4:e9:f7:eb:f7:
af:a1:75:79:36:c9:73:16:82:76:3e:d5:4e:86:03:
e9:04:b6:e1:09:b4:26:70:2b:cf:9f:00:b2:88:61:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E6:67:4C:8D:B9:11:26:8E:63:3B:2B:99:08:88:F9:AB:94:77:E0
X509v3 Authority Key Identifier:
keyid:92:2A:1A:67:E2:DA:71:12:D4:55:9C:D8:DB:D8:14:1F:8F:32:77:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kioaZ-LacRLUVZzY29gUH48yd-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5dac30-8570-47b2-b26a-7f3a428171c7/1/kioaZ-LacRLUVZzY29gUH48yd-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:62:39:98:33:8f:ad:17:c8:06:d6:2f:fc:6a:a0:e0:61:38:
16:dc:6f:e1:6e:c1:e4:ef:d9:db:47:da:5a:94:50:c2:c0:6f:
d1:50:47:b5:e1:48:91:2b:85:e2:4d:69:dc:b4:70:2c:3e:e3:
ca:da:e1:b3:dc:97:2f:f4:57:a7:ae:85:c7:7b:48:d5:df:ef:
ca:5b:ee:f8:2b:49:33:2a:83:9e:76:0f:20:11:9a:e5:00:b6:
99:de:a9:8a:40:a5:ae:ad:3a:ff:71:32:fc:05:9a:08:d8:8c:
3c:c6:62:ba:03:f7:90:6c:24:dd:1a:f3:50:48:50:99:ab:90:
ad:e1:f5:1a:d3:b4:a8:a7:5b:25:46:20:16:92:d0:23:2b:3d:
8c:6a:91:33:3d:44:48:67:b1:f9:e6:39:6a:38:91:1d:4a:63:
95:df:c1:d3:3d:69:06:e0:c8:ff:a4:ad:a7:b2:56:d4:15:6e:
f7:e0:29:44:5e:4f:b5:70:c3:1a:79:fc:76:9a:f1:65:68:1a:
c7:16:ac:93:bb:58:31:68:6e:79:b2:e3:79:e4:cd:77:26:44:
45:3a:43:e7:a2:23:ee:6c:d3:b3:64:1f:61:cc:72:b8:64:11:
8b:a3:c3:c3:9d:a8:67:84:a7:ac:f7:44:fe:61:76:69:cf:4f:
4f:2a:3e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:28 2025 by rpki-client