Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
File: kNzOkQAEUUlMQ8FdFy2i651beVY.mft (raw, json)
Hash identifier: ZD5pK6TifFiZIdXUUN3tqW2f5PmfYTozjHcoNychTrM=
Subject key identifier: E8:ED:BF:82:FC:A5:63:83:FE:CB:DF:F4:8A:33:E7:C4:21:21:5C:B7
Authority key identifier: 90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
Certificate issuer: /CN=90dcce91000451494c43c15d172da2eb9d5b7956
Certificate serial: 01964CA230D5FC67E5E168835F524A5BD947
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 06:00:19 +0000
Manifest this update: Sat 19 Apr 2025 06:00:19 +0000
Manifest next update: Sun 20 Apr 2025 06:00:19 +0000
Files and hashes: 1: 4COA7EoK---RVhokcyyZ55j8IXE.roa (hash: 7qjze9UZTxm2x0zZOdskcsGbC7b8KEyBHHGZAVSSicA=)
2: kNzOkQAEUUlMQ8FdFy2i651beVY.crl (hash: j8lVzygkA+Om2USSXE4Qjj+cd2N4tg1wZxN3lcrTrLQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:a2:30:d5:fc:67:e5:e1:68:83:5f:52:4a:5b:d9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcce91000451494c43c15d172da2eb9d5b7956
Validity
Not Before: Apr 19 06:00:19 2025 GMT
Not After : Apr 20 06:00:19 2025 GMT
Subject: CN=e8edbf82fca56383fecbdff48a33e7c421215cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f2:51:68:47:cd:0d:9d:02:66:9d:25:ba:a3:
23:17:e5:9a:e8:97:25:8d:64:fc:de:44:ac:c8:d3:
ec:cf:51:75:c5:fb:c6:d0:02:6a:83:59:ed:55:55:
91:bd:f3:0a:7f:f0:ed:65:f7:c3:14:e9:3d:65:19:
35:38:09:f7:7b:9f:91:78:36:ce:b3:1c:91:66:0f:
6b:2b:e9:7d:57:a4:01:be:3e:1a:8d:e9:2e:02:85:
ae:8b:b6:1a:1a:5c:57:9a:1a:03:fb:d3:f4:34:15:
64:4a:85:ad:9b:0b:a8:b5:08:40:c3:b0:21:f9:18:
93:d7:55:4f:06:2b:7b:7a:a3:12:f4:72:55:7b:a7:
b9:bf:62:66:2c:19:00:e0:6a:69:04:0c:77:da:83:
0c:69:20:9d:d1:53:8a:2f:2a:e5:26:3b:a6:f0:3c:
64:92:0c:7c:e2:d0:e1:2d:2d:00:f4:c9:f4:00:3d:
cc:dd:77:78:0f:50:3a:5c:a6:0d:51:0a:da:82:c9:
dd:68:14:95:91:9e:2f:1c:2b:cd:2e:2e:1a:b7:7e:
93:85:b3:22:fc:c8:25:6f:25:81:7a:4e:c3:9b:81:
71:fe:9f:ef:65:9f:42:02:f8:ba:0a:41:5d:ef:d8:
8e:12:8b:a7:e6:d8:b1:8e:28:a8:a0:42:47:7f:a8:
32:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:ED:BF:82:FC:A5:63:83:FE:CB:DF:F4:8A:33:E7:C4:21:21:5C:B7
X509v3 Authority Key Identifier:
keyid:90:DC:CE:91:00:04:51:49:4C:43:C1:5D:17:2D:A2:EB:9D:5B:79:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNzOkQAEUUlMQ8FdFy2i651beVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/51fdbb-8ba2-4b7e-980f-ee60b0ddbdaa/1/kNzOkQAEUUlMQ8FdFy2i651beVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:1e:a7:fc:a3:79:f1:27:48:03:23:96:a2:22:39:ec:cb:a9:
f6:fb:61:6c:86:9d:c7:54:f6:b4:6c:e3:71:7b:ea:ce:2c:bf:
19:43:4d:27:39:43:cd:cc:7c:68:88:f7:61:ee:cf:c5:7d:7c:
73:c5:16:d9:c6:af:7a:5e:cf:13:01:f8:10:ef:3c:16:5f:68:
7b:f2:2b:8a:16:69:0f:b4:85:7e:a8:c0:fc:4a:7b:f4:15:7c:
f3:44:b9:e3:00:ac:60:4e:21:90:0e:73:18:4b:1d:28:de:81:
bf:04:bd:59:c8:1f:57:48:dc:cd:04:3e:d8:fc:9a:5d:ad:fc:
54:b1:7b:7a:8b:c8:3f:84:71:27:b2:5c:44:85:df:bd:ab:ab:
bd:0b:1d:b6:a3:5e:33:e9:5a:1c:95:e2:ef:e4:51:21:93:d0:
00:d3:6d:30:5c:c6:53:e9:84:2e:7c:1e:d9:e1:9d:0a:94:a5:
9f:e8:f9:99:aa:9f:a1:ce:24:5e:f5:90:1c:11:de:92:e1:f2:
cc:c7:45:3e:6a:0b:95:5f:2b:0d:a0:be:6b:f8:60:bd:09:5b:
bd:03:9e:64:c1:19:0d:80:28:15:69:95:57:6d:87:04:3a:7c:
e3:04:8a:3a:79:28:e8:f7:4c:ec:23:dd:e5:33:28:ea:70:e3:
ce:6a:b0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:19:49 2025 by rpki-client