Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
File: kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft (raw, json)
Hash identifier: /DMxi9LnAjv3XkIyTQTPFVIc2KW7HLXnus+HG0GPPjw=
Subject key identifier: C1:F8:D9:BD:56:5D:BC:02:16:D2:BF:06:97:6B:CC:61:C3:2D:24:3A
Authority key identifier: 90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
Certificate issuer: /CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Certificate serial: 0196526D891062618BE4B9420EDF50F02C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
Manifest number: 07F9
Signing time: Sun 20 Apr 2025 09:00:32 +0000
Manifest this update: Sun 20 Apr 2025 09:00:32 +0000
Manifest next update: Mon 21 Apr 2025 09:00:32 +0000
Files and hashes: 1: NfRATxtwxdk8t5k10NmnaIEBcI8.roa (hash: 48zogp0gFyhuprEhPJDieZAGrOKDhLcNh+8XpGM82yA=)
2: kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl (hash: mPxd6JheKI3i8Kj9IM2OVHS+YXwtEgdlUzQ0odKk8J8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:6d:89:10:62:61:8b:e4:b9:42:0e:df:50:f0:2c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f8fafcf7c441ae49c1cef95c518b28228c7c62
Validity
Not Before: Apr 20 09:00:32 2025 GMT
Not After : Apr 21 09:00:32 2025 GMT
Subject: CN=c1f8d9bd565dbc0216d2bf06976bcc61c32d243a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:52:99:02:1f:8f:21:34:47:29:21:c7:67:
ba:4c:42:be:76:8a:9c:d0:3f:8c:1c:e6:31:4b:f9:
34:eb:1a:e5:1e:66:bf:0f:76:40:3b:4f:fb:af:2e:
91:9c:5b:f2:cc:25:e4:da:71:65:cf:4b:ce:4d:36:
ea:7c:b7:cc:c7:66:69:25:14:9f:e3:a5:c1:e7:a5:
05:ce:54:a5:9c:8e:b1:7f:a8:e3:34:37:6d:2d:c0:
54:d2:57:c6:8f:9e:cb:98:53:8d:b7:d2:b0:4e:5f:
94:07:dc:10:31:39:1a:82:b7:dd:7f:ea:38:c0:7f:
e4:ae:26:cb:6f:11:61:27:ea:75:73:bd:3d:c8:10:
93:86:69:33:b8:d6:de:c0:2b:8c:eb:b3:05:ea:79:
23:03:a4:4c:c0:6c:db:36:f6:63:b7:f8:2c:41:6a:
a2:1c:2f:cd:cc:35:5d:a8:99:8e:9a:88:45:82:68:
74:43:ee:ac:2c:a1:87:47:85:f7:4f:45:7d:3a:cb:
08:7b:e1:5f:f5:ac:92:a1:e4:6f:05:bd:3a:b9:ab:
51:c1:a5:59:1c:97:34:8c:b0:60:10:3e:66:26:6f:
e1:87:0a:53:73:92:59:c0:d3:de:ac:9a:3c:8b:2e:
68:27:24:aa:f4:50:0d:98:78:d0:cb:e9:a8:36:80:
33:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:D9:BD:56:5D:BC:02:16:D2:BF:06:97:6B:CC:61:C3:2D:24:3A
X509v3 Authority Key Identifier:
keyid:90:F8:FA:FC:F7:C4:41:AE:49:C1:CE:F9:5C:51:8B:28:22:8C:7C:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPj6_PfEQa5Jwc75XFGLKCKMfGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b78e69-29dc-4e5c-ac47-8aa4ebad4e65/1/kPj6_PfEQa5Jwc75XFGLKCKMfGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:8c:53:48:ec:30:47:5f:d6:88:2b:13:11:8c:72:b7:ef:
46:9b:2d:e9:e9:ac:d9:79:78:0a:f2:e6:6c:c3:8a:ce:9c:19:
7b:eb:ab:15:be:08:7f:df:3a:69:ee:99:4f:b0:95:bb:e8:bb:
42:7c:8f:58:5b:58:0a:d1:7c:17:12:60:26:73:ea:76:5c:8c:
c8:55:45:89:25:94:df:75:4f:8d:a4:57:07:f2:32:d3:e4:d5:
fa:55:ae:c3:f6:a6:06:9a:63:83:1d:03:20:91:d8:16:d6:d5:
aa:91:7f:bd:cb:b9:27:92:81:83:80:2b:ed:70:c1:64:e8:89:
6b:04:5d:19:b5:08:7b:b1:be:eb:f5:dd:04:b2:fd:24:e3:49:
1f:4a:ab:37:2c:57:88:96:59:6d:55:1d:7c:e2:8b:c3:40:15:
f6:d7:f7:a2:5a:b0:af:66:55:3d:e7:ea:1d:ca:36:0d:de:30:
a3:92:bc:c2:dd:c2:0c:db:1c:5e:ef:f0:16:06:5a:1e:9b:fb:
77:5e:fa:e2:a2:af:ba:72:4b:39:8c:31:bb:9d:b4:6e:9f:4c:
29:c9:24:4e:55:ac:cc:42:17:88:cf:38:14:61:13:47:f6:a1:
d3:b3:e8:1b:99:a3:d3:24:9c:ca:34:fd:d7:37:6f:4d:2d:ef:
bc:aa:7a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:13:16 2025 by rpki-client