Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
File: kp8HacY4g1c_JwPXZkYlcK9VkPM.mft (raw, json)
Hash identifier: uwhDh8Wkb2SqDjLHVSQHH4hmfjaCqeESjHfcOiKV5ao=
Subject key identifier: 3D:C8:E8:6A:15:50:4D:CB:3F:E6:16:42:47:53:08:38:19:A6:32:E4
Authority key identifier: 92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
Certificate issuer: /CN=929f0769c63883573f2703d766462570af5590f3
Certificate serial: 019643D71B08E1DC6DF01E594C66B39EE65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
Manifest number: 13D3
Signing time: Thu 17 Apr 2025 13:01:32 +0000
Manifest this update: Thu 17 Apr 2025 13:01:32 +0000
Manifest next update: Fri 18 Apr 2025 13:01:32 +0000
Files and hashes: 1: 64T0ThntK_T_XpMgojpC9XD428A.roa (hash: IOm91WRA7m29s//pvbAOHwECZ0iF5k9Wr7VRSaUENC8=)
2: kp8HacY4g1c_JwPXZkYlcK9VkPM.crl (hash: yx0XPGmmPJTy49YmcS4h4Cfbpdbsscpwv65uhsvQgSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:d7:1b:08:e1:dc:6d:f0:1e:59:4c:66:b3:9e:e6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929f0769c63883573f2703d766462570af5590f3
Validity
Not Before: Apr 17 13:01:32 2025 GMT
Not After : Apr 18 13:01:32 2025 GMT
Subject: CN=3dc8e86a15504dcb3fe616424753083819a632e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f6:45:cf:28:1a:2b:be:d0:e6:8a:fa:d9:dd:
d5:d1:cf:08:8e:31:43:bb:0c:1b:a2:35:f2:2b:a2:
68:df:ff:a6:da:08:48:f5:16:f6:b8:c8:f8:6b:27:
21:cf:c6:7d:d5:4c:19:44:20:3b:e2:c3:d4:94:d9:
d8:31:19:50:09:92:9a:71:cd:33:ea:cc:e9:1b:52:
3a:60:54:99:a5:26:34:27:97:a8:90:67:4a:5d:07:
df:cf:8c:dc:99:15:3c:c8:a3:27:10:35:4a:b5:51:
1d:12:ac:b9:b6:88:41:1a:8d:77:4a:1a:9a:d9:e6:
11:fb:ef:fc:27:55:53:a3:8f:b0:91:10:86:5c:e9:
7a:d6:04:c2:b2:f6:65:be:5c:c4:56:c5:32:b3:95:
2d:c3:3f:a7:51:e9:c4:3d:93:f8:9d:5f:b4:da:f0:
7c:4b:57:a0:fb:13:01:10:df:80:52:2a:13:9f:cc:
b7:6f:e3:90:e2:ff:13:71:7e:bd:0a:d6:3e:53:b2:
b8:0e:9e:34:73:44:2e:8a:5d:28:f4:ee:e1:bc:d2:
93:e9:61:35:4f:8c:03:d3:cc:ad:98:50:da:35:d1:
76:56:22:42:76:48:b4:54:02:db:1b:3a:da:04:26:
eb:dc:1c:87:28:3a:ca:5e:5e:1f:e3:58:8d:da:a0:
8e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C8:E8:6A:15:50:4D:CB:3F:E6:16:42:47:53:08:38:19:A6:32:E4
X509v3 Authority Key Identifier:
keyid:92:9F:07:69:C6:38:83:57:3F:27:03:D7:66:46:25:70:AF:55:90:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kp8HacY4g1c_JwPXZkYlcK9VkPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/861d39-f8d4-4aa3-9d4b-5d8069c4a657/1/kp8HacY4g1c_JwPXZkYlcK9VkPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:44:6e:b5:dd:fc:3a:3b:83:1d:4d:92:18:1a:3b:9d:01:0d:
14:ab:0c:69:c1:c2:cb:ff:2f:ac:9b:0d:32:39:8f:e2:79:f6:
34:d4:5b:f4:41:9c:18:a3:51:6a:5f:b3:8d:38:77:cd:69:fd:
23:7b:09:8d:a9:c8:9e:fd:6a:0f:72:03:12:02:ba:2b:e5:39:
4b:67:29:ce:0a:99:d6:41:a2:26:d2:9a:a5:9a:81:96:f1:0b:
3c:6d:d7:82:7a:f7:d7:93:26:be:06:34:9b:84:67:b8:f7:63:
60:11:03:73:f8:5e:91:f7:56:53:c0:51:e0:9e:3b:17:03:cc:
aa:6e:85:f9:6b:ec:a4:18:43:93:a5:08:2d:3d:a1:c6:90:1e:
33:9a:ad:14:88:5a:b3:12:2f:6a:13:fa:c9:21:be:fb:d1:f0:
4e:b4:af:5a:58:68:bc:bd:c9:40:c4:d3:45:0e:b7:82:2b:e9:
94:4f:1d:99:62:a2:e7:59:1d:4f:83:5c:2d:bc:d2:21:82:a0:
84:85:48:45:2b:55:04:e0:e3:9b:1c:da:8b:2a:e6:33:51:37:
89:d5:11:fe:f7:db:cd:56:b2:fc:82:35:7e:e2:71:d7:c5:5e:
4b:ba:9a:51:01:b9:c3:f8:3c:fd:75:ca:60:64:16:01:a2:d3:
e0:4f:a3:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:53:59 2025 by rpki-client