Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: a+rSZCcYJAFp1F6pHNk4Np0qu/MI9P1HXZRceGQnBmg=
Subject key identifier: 6A:7F:FB:2A:AE:CA:34:62:08:9F:19:50:05:5F:61:3F:11:7F:B9:D0
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 01963D6676FCA08FAAC0A5C0C636084C42D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 0C92
Signing time: Wed 16 Apr 2025 07:00:47 +0000
Manifest this update: Wed 16 Apr 2025 07:00:47 +0000
Manifest next update: Thu 17 Apr 2025 07:00:47 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: +O3QEnqffcTM6u7uyXWnZypjxMPategpohxcBXVmp4M=)
2: 39Bk5qZTsKQMFFHFGYz2jXcUTL0.roa (hash: yuPdwUCFZLhlTho5KUzDTwTUnjWxu1cEHPF0b38FGK8=)
3: AzSrLJFmfeHq4hW1Qf7AEyHb8Pc.roa (hash: eCVsXCjLEvLJa9+iW+ysDbya4Y+X231ugmswa/aHdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:76:fc:a0:8f:aa:c0:a5:c0:c6:36:08:4c:42:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Apr 16 07:00:47 2025 GMT
Not After : Apr 17 07:00:47 2025 GMT
Subject: CN=6a7ffb2aaeca3462089f1950055f613f117fb9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:0f:3b:27:91:95:53:94:77:f9:30:26:2c:
1f:fe:74:8b:68:f4:b8:b7:b5:54:56:a8:d3:e4:4d:
fe:96:b9:78:1a:20:cf:22:e4:a8:f1:08:9f:0a:88:
c5:74:04:cd:0e:8d:0d:e3:d4:31:bd:6c:a4:6a:d8:
42:cc:98:c4:62:c6:ee:94:c8:42:d7:d0:64:4c:47:
f3:94:f2:3e:8c:c0:c6:c3:45:63:32:a0:85:e2:0b:
41:87:f4:90:61:ed:89:3d:18:7e:d5:de:69:38:1a:
07:75:72:98:65:e9:08:87:50:a7:be:c0:67:46:19:
74:0d:85:a6:d6:49:89:71:01:95:ed:a2:e5:43:b9:
43:a4:5e:3d:d7:f4:5b:a7:43:13:8f:77:7e:9b:d0:
de:da:fc:05:8c:5c:46:29:7d:0a:c7:ca:42:e7:32:
c6:4d:2f:e8:bf:10:ad:72:68:4c:14:d3:89:da:09:
f0:34:ad:79:d7:ea:8b:4f:3a:d8:31:4a:a4:2f:f5:
fe:47:7d:9d:5f:08:a1:51:a2:01:eb:33:5a:2f:83:
18:18:76:8e:b1:81:59:36:6a:3a:48:30:a2:7f:75:
f0:48:2b:5d:3e:0e:86:e5:f5:8e:08:84:43:24:9a:
0f:94:12:f3:23:d3:1f:82:30:0b:3a:55:11:00:de:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7F:FB:2A:AE:CA:34:62:08:9F:19:50:05:5F:61:3F:11:7F:B9:D0
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:53:08:97:79:b4:e3:05:91:42:a1:8b:87:7a:93:79:1d:62:
d2:56:b0:ef:22:9b:bc:e4:c9:5c:1f:9d:7e:99:45:d8:6a:e3:
31:85:ec:dd:87:a6:ff:6f:dd:2e:9c:8e:b1:6f:3c:35:ca:73:
2c:43:34:74:58:5b:a6:53:db:21:03:0a:b6:bf:3c:eb:15:29:
ed:a6:c5:51:cb:e1:bb:14:a0:50:09:10:f8:b6:2b:e5:ac:d3:
a3:47:d2:03:98:3a:c2:93:58:b0:78:90:28:06:3b:0f:30:63:
78:24:44:7b:67:a4:0f:6d:f7:51:ba:a5:05:e4:ac:80:20:ac:
e0:eb:d9:ce:d3:82:39:fd:e8:e4:f6:f9:97:71:cc:21:a6:8f:
9e:74:83:be:29:fb:d9:5f:77:b6:3e:a0:69:f4:44:39:a1:20:
b3:2d:40:2c:1a:cf:2b:c5:85:37:d3:e8:78:6f:ef:d7:d9:0d:
92:7b:d5:1c:f2:5c:78:64:37:81:32:e6:d1:06:96:ec:2b:58:
8a:95:ea:af:c8:64:b1:d8:48:83:32:3b:0a:15:fb:10:ae:6a:
11:15:ba:7e:e2:82:3f:7f:c3:93:20:1d:3c:28:ea:b3:28:61:
95:d8:5a:e1:e3:5f:f2:ef:33:5d:37:4d:f9:55:bf:df:fa:d2:
84:88:d8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:19:17 2025 by rpki-client