Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
File: kN_zHRsERNQgTeFYTQDd-WjQsBI.mft (raw, json)
Hash identifier: ue6+jv4du0hrVwnE+4EIoQOZDC969JYGp7B7Lu8FlPk=
Subject key identifier: 98:26:24:E8:09:35:18:CC:9E:BF:81:D5:05:13:85:D4:B5:E9:86:12
Authority key identifier: 90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
Certificate issuer: /CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Certificate serial: 01960E3202B73840FA73A2679C42FC323F7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
Manifest number: 094E
Signing time: Mon 07 Apr 2025 03:01:20 +0000
Manifest this update: Mon 07 Apr 2025 03:01:20 +0000
Manifest next update: Tue 08 Apr 2025 03:01:20 +0000
Files and hashes: 1: fhqhrm_dY2gYWI5oCp04pibtM_o.roa (hash: s8FH9ikZ8P5QdYR5uDaZwWuPJb6gYAb8hHHjeN9RXKc=)
2: kN_zHRsERNQgTeFYTQDd-WjQsBI.crl (hash: WsTOqU3e1JEaRS5kL/Jjwg+qRxyaIYzl71ELM29jdWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0e:32:02:b7:38:40:fa:73:a2:67:9c:42:fc:32:3f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dff31d1b0444d4204de1584d00ddf968d0b012
Validity
Not Before: Apr 7 03:01:20 2025 GMT
Not After : Apr 8 03:01:20 2025 GMT
Subject: CN=982624e8093518cc9ebf81d5051385d4b5e98612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8c:a7:78:20:15:29:2c:fc:d7:a4:66:a0:f7:
94:d5:a2:4e:c2:0b:d1:5c:04:f5:ef:72:17:39:70:
d5:09:03:cd:44:ab:90:9d:cc:a2:7d:05:87:41:3e:
0d:07:83:d3:bd:c1:4f:7c:cf:92:55:77:eb:dc:e4:
ab:8b:11:06:8e:84:6a:83:c5:0b:67:02:f3:30:eb:
93:01:1f:55:62:d9:87:c6:3c:f7:b7:0d:4d:90:4d:
74:21:e0:15:ff:e4:0e:4c:0d:8c:14:20:55:6d:f2:
0b:89:ae:2a:97:70:34:aa:4c:71:5c:66:64:21:ac:
36:74:88:9c:d7:da:1f:2f:72:b0:66:dc:4e:ba:45:
c5:01:ad:9c:9a:32:71:08:b5:83:2e:36:f9:42:0d:
29:e6:b4:86:ba:0d:20:16:3d:c2:73:5a:aa:b2:84:
dc:99:90:8b:23:c8:44:f8:6b:a4:10:c9:c6:c3:65:
3e:b2:8a:1f:f9:f8:03:54:d2:f5:77:fd:8d:d1:2a:
8d:dd:2c:68:36:ea:34:b0:33:aa:6b:1d:a0:8e:51:
d9:d6:b6:ef:d3:65:6a:be:28:fe:82:00:02:4b:5d:
a6:33:b2:4e:c6:9a:b6:fd:70:92:12:08:2b:90:7a:
11:2c:84:f6:32:94:c7:fb:f1:ed:8f:8b:29:14:3b:
5f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:26:24:E8:09:35:18:CC:9E:BF:81:D5:05:13:85:D4:B5:E9:86:12
X509v3 Authority Key Identifier:
keyid:90:DF:F3:1D:1B:04:44:D4:20:4D:E1:58:4D:00:DD:F9:68:D0:B0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kN_zHRsERNQgTeFYTQDd-WjQsBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/99a3ca-7e5c-48d4-b975-9f214d1ba934/1/kN_zHRsERNQgTeFYTQDd-WjQsBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:06:41:9d:3d:65:22:bd:fa:ab:fe:88:ba:8f:63:b3:3b:b5:
37:5a:53:7c:2c:68:1f:02:4a:c1:a8:a9:45:80:22:96:a3:75:
48:0b:3c:ee:b8:6e:77:8b:3a:a8:10:d9:67:0d:dc:72:c5:62:
71:74:f9:06:01:c2:62:97:8b:af:fb:dc:b9:35:b9:01:ff:82:
c3:90:21:12:87:f8:44:68:03:0b:a6:f6:cc:4e:56:3b:ca:53:
ce:23:2b:ca:e6:37:a6:fb:f3:9c:90:88:aa:8e:ae:e7:ba:1f:
79:8d:37:76:59:09:ec:90:43:f9:d9:2e:19:0b:06:c7:c6:f1:
f2:d8:68:56:c8:47:99:bc:ea:29:42:42:05:b6:a2:88:6b:ad:
d5:e9:fe:11:e6:6a:0e:03:a6:a4:44:0f:b8:f8:ff:61:0a:f5:
f3:5c:67:67:e7:21:3d:75:27:a6:c3:f5:7d:7e:6f:0d:91:d2:
95:88:56:86:30:5c:17:94:82:5f:38:ad:4c:c7:ff:8d:99:91:
0b:18:eb:6a:92:cf:9d:db:f1:88:7b:2b:f6:db:a8:e8:bf:1a:
c7:00:6b:38:fa:89:22:55:3e:27:15:ef:8c:ba:df:3a:30:94:
74:59:50:30:ca:80:b8:38:26:e7:93:d6:2c:5f:a3:8e:6c:f7:
bf:01:e7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:32:42 2025 by rpki-client