Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: DmWxiAYOqAfW12em++jKtvJ8hRFMIipnfMQruEC0uKs=
Subject key identifier: BC:DB:5C:F5:34:9B:10:66:67:94:AC:E3:51:44:62:DE:C2:28:A2:F1
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 0195907413CA4DEBCD9C72F727D048F7F49B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 01A0
Signing time: Thu 13 Mar 2025 17:01:21 +0000
Manifest this update: Thu 13 Mar 2025 17:01:21 +0000
Manifest next update: Fri 14 Mar 2025 17:01:21 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: hA54MHpZBWxFjGUisZlqp5xdZsZbRuZZPBXl6ycx77Q=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:74:13:ca:4d:eb:cd:9c:72:f7:27:d0:48:f7:f4:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: Mar 13 17:01:21 2025 GMT
Not After : Mar 14 17:01:21 2025 GMT
Subject: CN=bcdb5cf5349b10666794ace3514462dec228a2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:14:4f:74:6f:f5:d3:09:0f:06:d4:fc:e4:68:
58:2b:e1:1e:ce:99:50:18:30:38:8c:77:29:3e:36:
96:24:96:be:d9:85:dc:b8:df:ac:0e:04:b8:3c:ae:
9b:de:f0:55:c6:c3:f2:1d:91:d8:c1:07:57:26:ad:
c9:95:e9:77:f6:73:6a:00:59:6c:a6:3d:c3:ba:ab:
b0:69:34:e1:fd:7b:5f:6e:7e:94:c1:93:81:42:d4:
dd:8d:bd:75:5d:3f:b4:8a:48:91:3a:7c:6e:2e:02:
46:0b:2f:13:55:a4:01:16:23:7d:3d:33:85:c8:a7:
b1:04:7b:d8:51:a5:fb:ee:3c:55:02:3c:15:2a:8e:
83:36:25:34:5f:99:c3:1b:06:03:80:0d:0d:a1:7e:
48:68:2f:de:9c:5d:5c:f7:59:77:6e:29:41:64:2d:
19:65:92:b5:6a:88:c0:bc:fa:7e:c5:66:a6:3e:86:
7c:e7:2e:ef:91:01:ba:84:7c:2f:e1:da:33:89:90:
cf:60:2e:28:04:d3:49:c7:fa:e3:50:27:fc:d3:34:
8b:6f:f2:bd:62:0d:55:05:83:f0:4d:24:89:12:26:
bf:77:6f:bf:3d:90:3c:5c:e0:c6:65:0e:6d:f2:2f:
e6:5d:3d:3a:fb:69:d6:1e:cb:be:b7:ed:7f:44:d6:
0f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DB:5C:F5:34:9B:10:66:67:94:AC:E3:51:44:62:DE:C2:28:A2:F1
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:39:cb:3f:c6:02:e8:c8:df:db:d0:d7:10:87:f6:1a:b4:a9:
03:df:92:1a:03:62:98:96:4a:64:59:1f:7f:78:47:5c:bb:cb:
47:79:3c:da:49:a1:f6:89:a9:e5:b2:14:ad:82:63:4f:59:be:
0d:80:2a:d2:d9:a0:59:8f:9f:99:d6:ae:e3:07:d8:97:b4:68:
02:81:da:a8:ae:48:99:74:50:e8:fd:f0:dc:8e:3d:50:98:3c:
f5:fe:15:fb:d5:c3:57:08:a1:f9:fa:b0:89:7e:6e:b6:36:c2:
76:32:fb:98:e3:db:a3:52:11:dc:91:7d:34:c3:ba:23:60:f7:
e4:9a:3a:1d:c7:55:0f:e4:2d:87:e6:cf:5e:47:4d:5c:26:5c:
c0:5f:59:cb:e7:cf:b4:bf:8b:cb:4c:9c:f5:8c:39:80:04:56:
37:e8:f6:00:0d:d2:fa:c0:75:ab:e4:10:78:6e:f0:43:e7:e3:
67:7c:e1:64:0b:3f:e7:87:33:d6:6d:98:e0:5c:c2:f8:c5:01:
90:02:1e:f6:ab:b6:a9:6b:f5:7c:4a:41:e2:45:18:00:c0:b2:
06:ee:22:c5:c1:bb:11:e8:50:74:cd:be:70:5f:f0:88:64:9d:
d3:f7:94:f8:f1:8d:80:7a:9a:04:43:5f:18:6c:e4:0f:8e:1e:
7a:b6:f0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:17:29 2025 by rpki-client