Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
File: kKfL8X0LoKJqsBpkBgFBEUziudE.mft (raw, json)
Hash identifier: kMNKHpjOMT33w8pG1RS8PVPKQebRZh/ZWNbFRC/32J8=
Subject key identifier: 54:7A:46:52:05:8E:90:75:A6:FF:55:F9:EE:22:1D:52:0C:C6:21:86
Authority key identifier: 90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
Certificate issuer: /CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Certificate serial: 0196537FF22210728B816B5E5E433FC6E9C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
Manifest number: 0788
Signing time: Sun 20 Apr 2025 14:00:15 +0000
Manifest this update: Sun 20 Apr 2025 14:00:15 +0000
Manifest next update: Mon 21 Apr 2025 14:00:15 +0000
Files and hashes: 1: kKfL8X0LoKJqsBpkBgFBEUziudE.crl (hash: Jxnf3feGNMJk2kk0sGEuLdrpvM1DyNacHqBwl3sD9bQ=)
2: rzOwmj7yNxYTqaPlre3nKadsFUw.roa (hash: DAKc4JSGHKnobmz2nOoFMUFGL3C1Ey22s4rc8SfdlJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:7f:f2:22:10:72:8b:81:6b:5e:5e:43:3f:c6:e9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a7cbf17d0ba0a26ab01a64060141114ce2b9d1
Validity
Not Before: Apr 20 14:00:15 2025 GMT
Not After : Apr 21 14:00:15 2025 GMT
Subject: CN=547a4652058e9075a6ff55f9ee221d520cc62186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:7f:d1:b7:89:6a:60:58:d1:4b:11:19:e9:
4b:fb:aa:8d:bf:a9:b1:ca:2d:94:d5:c9:60:01:7f:
4d:01:03:d8:94:a4:ac:b7:5a:20:b5:6a:12:8c:9f:
07:95:9c:1b:62:41:e0:8a:7a:e8:a1:3b:41:0d:50:
42:3c:f0:4e:f4:4c:13:9e:da:50:bd:68:c1:55:63:
25:30:bb:7a:9f:a0:f0:48:8d:b3:a1:4b:f0:65:6d:
41:64:83:c7:19:ab:c1:9b:19:51:26:2b:fb:d4:82:
28:0b:f9:c1:ff:9d:ad:de:13:00:3c:79:98:26:d3:
47:ce:bf:ad:1f:bf:3d:a4:c9:3b:bb:fb:7d:12:8c:
55:3a:1d:f8:e3:da:7f:ea:1c:65:02:fa:6c:67:7f:
db:e1:f5:18:28:e0:0c:26:5d:a5:df:2e:d6:84:c9:
f1:1f:2c:c5:f4:b0:f9:d4:a7:ec:0f:71:bf:74:81:
38:42:8e:ff:1f:97:0d:34:0f:ff:be:dc:02:4e:8f:
1b:c8:ab:ee:29:b2:ab:03:19:24:30:e5:92:4a:78:
ca:de:41:2c:27:e5:28:12:b4:7c:d1:2e:54:3c:3f:
87:ae:1b:f9:38:93:44:5d:9c:f9:31:0e:1f:bb:b8:
c5:2a:a5:9e:dd:26:45:55:4c:a5:95:48:99:39:80:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:7A:46:52:05:8E:90:75:A6:FF:55:F9:EE:22:1D:52:0C:C6:21:86
X509v3 Authority Key Identifier:
keyid:90:A7:CB:F1:7D:0B:A0:A2:6A:B0:1A:64:06:01:41:11:4C:E2:B9:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKfL8X0LoKJqsBpkBgFBEUziudE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/90ed8d-f91e-44b6-a84f-edfbfee70af5/1/kKfL8X0LoKJqsBpkBgFBEUziudE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:fb:83:ec:92:80:4f:8c:8f:f3:20:f0:7a:3b:0f:f9:42:ff:
69:b4:55:db:88:e2:12:13:69:83:cf:fd:f5:ea:a2:19:ae:f5:
88:e9:18:29:31:d3:a6:cc:ef:a6:6d:e2:25:a4:b2:02:c6:0d:
e0:cb:0a:7d:b8:25:54:3d:cd:ef:f5:3c:14:76:34:77:aa:02:
8b:d6:5d:18:9b:a3:42:e4:a8:76:1c:1d:2d:74:8b:a9:c0:10:
2b:85:a1:cc:b4:2e:5f:02:03:15:62:ef:2f:a0:bf:e0:e1:a0:
9c:cc:77:2f:72:20:32:06:4c:8f:19:7f:87:d7:17:17:75:a8:
91:ef:6c:b8:ec:cd:06:f2:9f:61:70:23:7f:0b:ea:9e:27:05:
dd:40:cb:62:be:9b:6a:e7:87:47:00:9f:26:03:87:16:8d:d6:
99:d2:45:7b:9c:42:5c:be:71:9b:43:77:70:8e:e5:0b:94:36:
f7:d3:61:40:54:b6:be:a7:48:f0:26:93:58:cd:84:6b:73:85:
8d:7a:3b:37:a4:1d:47:fb:9a:0f:c2:5b:95:5c:0f:9a:0a:c4:
36:37:0c:15:3a:b4:66:03:9e:f8:1f:46:bd:89:d3:bd:b7:26:
fd:6c:7a:a8:fb:be:22:fb:c1:51:e1:11:fa:4e:67:9e:ce:24:
6e:d8:d8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:55:43 2025 by rpki-client