Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: 5W+UP4eT0StQkBbr2ruUP+lMisefY8+qubOZxgM+HB4=
Subject key identifier: D7:0B:72:C8:C1:D0:17:A1:DC:4A:FC:E7:C3:F1:FC:0F:29:F2:D0:76
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 019612B3641DB19DE90364131414FAE62939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 0497
Signing time: Tue 08 Apr 2025 00:01:08 +0000
Manifest this update: Tue 08 Apr 2025 00:01:08 +0000
Manifest next update: Wed 09 Apr 2025 00:01:08 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: qDsTVAabHqan8MBkG+xhS+AlxgK4zJ5jkiRqLnu6Lxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:b3:64:1d:b1:9d:e9:03:64:13:14:14:fa:e6:29:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: Apr 8 00:01:08 2025 GMT
Not After : Apr 9 00:01:08 2025 GMT
Subject: CN=d70b72c8c1d017a1dc4afce7c3f1fc0f29f2d076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:e9:ea:71:e5:be:66:97:39:56:d4:4f:44:c7:
25:51:69:d8:65:d2:ec:d1:ea:2a:c2:6e:70:54:f1:
5f:f4:f6:d9:4f:74:9c:ea:f7:d4:ac:df:64:61:ff:
24:8a:f1:a7:72:e4:db:f2:7f:d8:99:77:ff:33:2f:
59:21:ee:1e:90:bf:af:c8:77:2f:ee:3f:a5:d7:8b:
74:32:f3:e0:2e:9b:67:bd:82:ae:b3:8a:f1:4a:cd:
65:c2:32:8a:1f:3b:df:5f:6c:ed:2a:f6:1a:5c:2a:
2f:d8:be:ff:91:a0:dc:29:ac:f2:8d:f8:e1:7d:aa:
b1:f6:da:ba:ff:4e:41:2e:f4:9d:a7:70:b9:25:bb:
6f:de:2f:11:6b:83:d2:db:93:81:33:4d:49:36:08:
55:e0:95:45:0f:2b:aa:54:d2:31:31:d1:31:8f:ea:
f9:22:fe:23:1e:62:57:34:47:c3:45:2f:e4:70:e2:
05:ea:00:2e:d7:c1:9a:48:1c:31:39:f9:55:62:fc:
07:87:c9:4f:16:f4:7e:ef:60:4c:be:e9:a4:87:f4:
b2:20:92:38:21:dc:eb:d6:86:eb:54:88:3f:6f:0f:
f6:56:a6:bd:16:5b:91:3b:1c:17:cc:9f:62:ef:cc:
f9:6d:f3:a0:7c:93:ca:ee:32:74:7f:91:c7:0e:d8:
a1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:72:C8:C1:D0:17:A1:DC:4A:FC:E7:C3:F1:FC:0F:29:F2:D0:76
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c4:a4:61:42:05:0b:e7:b7:4a:d2:80:f6:de:5a:0f:e3:3a:
a3:cc:a9:61:ed:1d:d8:47:60:9e:a1:d9:4b:bf:6e:9a:7c:f2:
1c:4a:c2:f0:08:6d:f2:e2:0a:3b:a1:76:70:01:f5:67:19:01:
15:3c:5b:1c:79:ed:e3:52:49:e1:50:f0:9a:79:6a:46:e5:11:
25:dd:24:60:4d:5d:3f:ca:b5:33:3e:81:74:f3:06:5d:62:68:
14:c6:8c:e3:e0:b5:ca:fd:a5:c3:35:cd:eb:f6:12:b0:06:94:
ae:00:60:61:4b:23:81:09:99:29:cc:33:65:41:bf:ba:30:74:
ed:57:9f:80:1c:1c:c6:a5:cf:11:22:46:60:11:cc:9e:9c:6a:
f8:a4:5e:eb:6c:bd:5f:3a:38:d9:20:94:58:18:9b:9f:5c:aa:
b3:f9:28:b4:18:4e:99:18:4f:99:41:63:5b:ab:e0:9c:9a:94:
3f:c2:59:91:de:f6:90:3f:90:4d:22:e2:37:fb:e7:d3:0b:c5:
42:84:2a:70:cc:b8:53:55:53:bd:ea:cc:bf:42:c9:73:5d:bd:
cc:aa:fb:57:de:70:5e:84:71:33:7f:35:d4:ff:97:15:8f:90:
20:7f:51:cd:70:96:4c:49:f1:44:4d:c5:f6:74:f2:a1:be:29:
f2:03:7e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:56:07 2025 by rpki-client