Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: dWi9oNinOv2h2xCtTll8nVuxzdoVt3hzGhOIXxp3p7E=
Subject key identifier: 01:76:45:C0:C4:E4:81:3E:F8:D1:15:BF:18:27:E5:20:DF:C8:7B:1D
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 019651C9114D3BA6CB75ECFC7D782F244364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 06:00:53 +0000
Manifest this update: Sun 20 Apr 2025 06:00:53 +0000
Manifest next update: Mon 21 Apr 2025 06:00:53 +0000
Files and hashes: 1: du_2ZQg8yAJTgrrcsRgGTQ2XG_8.roa (hash: N5/CsUBVJG9ccVWuK1sk9cFhzshfMejmNQXFk3ysFrU=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: V9N9yAkU9z4ZKRxHcBHy0R9H7T0XqorN8UjAd7kk2Gk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:11:4d:3b:a6:cb:75:ec:fc:7d:78:2f:24:43:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Apr 20 06:00:53 2025 GMT
Not After : Apr 21 06:00:53 2025 GMT
Subject: CN=017645c0c4e4813ef8d115bf1827e520dfc87b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:84:a9:cd:5d:52:1b:4c:b7:b4:1d:99:04:59:
33:32:4e:3f:a7:88:ff:49:14:17:48:59:57:f1:41:
86:27:b0:87:35:e5:9e:0d:13:31:05:88:8d:73:d3:
76:22:62:6f:c6:61:c4:14:3a:83:06:df:34:08:4e:
f8:89:b0:d0:1e:3e:13:14:ad:55:15:a5:82:67:49:
7a:5c:0a:dc:ea:52:98:25:46:0e:7d:86:82:10:f4:
e6:d5:c2:fb:38:38:80:2b:e4:37:6e:64:5f:1f:44:
47:f9:55:46:f7:b3:bc:a8:a2:48:d7:0a:10:df:14:
2b:27:85:ce:bb:f7:30:ce:8d:da:b5:f6:ba:8e:cd:
57:3d:f0:56:6e:c9:e7:85:6d:24:96:d5:55:07:03:
8f:c1:2b:22:5d:b1:5e:1d:97:12:56:2b:84:ae:34:
e8:77:4a:14:6c:9e:2b:b9:44:e8:d6:25:28:c0:65:
c9:46:33:0a:63:53:a7:d5:63:48:22:6d:09:6a:7a:
b8:2e:7b:6d:e3:f1:7a:80:4c:b1:20:df:15:88:87:
91:3b:48:9b:8b:f3:d1:ec:22:99:1e:1c:ec:81:8f:
05:e0:49:b2:d2:22:c1:05:91:ef:85:2a:42:6e:9f:
35:25:76:8d:c2:c5:5c:69:c7:b9:e4:8e:5f:be:f5:
ca:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:76:45:C0:C4:E4:81:3E:F8:D1:15:BF:18:27:E5:20:DF:C8:7B:1D
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:7a:94:a8:1d:41:d0:b1:a9:40:f0:b7:f3:bb:64:36:e7:f8:
fc:fc:4b:ab:6c:70:f9:ff:57:94:a0:68:96:86:cd:58:11:03:
e8:ed:7b:73:b4:5e:06:b3:2a:e9:e4:e7:5e:e9:8d:86:11:ab:
48:67:40:a4:59:49:0f:51:a8:78:5b:df:74:0f:fb:11:52:bd:
80:8f:ab:41:a4:01:f7:86:ff:36:cd:c6:07:95:5e:5a:1f:ae:
94:9f:ba:f0:e9:cf:bf:b2:fe:28:23:18:4e:b3:f0:f0:fd:7d:
51:57:5b:7d:84:91:26:e3:02:f6:88:53:59:a1:a0:ca:dd:cc:
b9:ed:ae:af:a1:4a:0a:c4:e1:33:f2:49:7e:78:30:f6:ed:68:
19:d4:26:bf:75:93:ff:8b:18:c2:6b:8d:d0:af:2a:b4:85:1a:
13:00:68:71:6e:90:9a:da:cd:1b:96:02:f3:88:45:84:62:1b:
59:9d:cf:a5:7e:06:e2:1b:ee:ed:45:e9:87:fd:75:da:95:36:
ac:c7:58:57:3f:2f:6c:90:dc:24:38:77:38:f3:db:fc:12:2b:
ab:52:94:69:25:10:99:85:28:ea:f8:c2:1e:48:0c:47:b1:b3:
6b:e6:fb:28:26:37:04:9c:85:10:16:db:57:5c:7d:00:a3:de:
5e:f6:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:20:59 2025 by rpki-client