Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
File: rKL3dI_jY9xZOem4VPwAQDEw66U.mft (raw, json)
Hash identifier: WTM8oediXA1cHOjkqRH146RaMtha29dgbC/Kb4CROp8=
Subject key identifier: B1:6A:E3:6B:22:BA:EA:2F:A2:4D:32:1B:2A:FC:81:F5:5C:BA:05:0F
Authority key identifier: AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
Certificate issuer: /CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Certificate serial: 0196564A0816C77F7205942D2D458859286E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
Manifest number: 1174
Signing time: Mon 21 Apr 2025 03:00:14 +0000
Manifest this update: Mon 21 Apr 2025 03:00:14 +0000
Manifest next update: Tue 22 Apr 2025 03:00:14 +0000
Files and hashes: 1: j1MFNSh109TR4xhuIO7hEIzzLx0.roa (hash: m4Zoo8iLf6w6vYmDzKqVKXqfQB+bfWM+4JfQ0Ih+lSM=)
2: rKL3dI_jY9xZOem4VPwAQDEw66U.crl (hash: zXECCOmtVNU3YuQjqIDCQThFYge1BpbkZwkkcy4rn7w=)
3: u7VG8MqdZGcH4gUtF3RkiJXAbmg.roa (hash: 2LYlYxgKHIzR/5x4DJBXFV3DllJcEY1kUeTRo0v7v2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:08:16:c7:7f:72:05:94:2d:2d:45:88:59:28:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca2f7748fe363dc5939e9b854fc00403130eba5
Validity
Not Before: Apr 21 03:00:14 2025 GMT
Not After : Apr 22 03:00:14 2025 GMT
Subject: CN=b16ae36b22baea2fa24d321b2afc81f55cba050f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e5:c4:bf:c5:14:2e:e9:b4:64:95:14:a7:31:
4b:c1:2d:40:ea:01:84:24:19:1c:17:8f:43:8e:ef:
f0:c1:d1:cf:54:aa:09:35:e5:4e:c5:d2:4e:4b:e9:
5c:81:8a:79:f6:1e:d0:fe:a2:74:b8:d3:37:f8:de:
18:ab:01:e4:0e:80:e4:17:a3:1c:fd:e5:25:b7:14:
4b:37:17:18:ee:06:55:e8:85:aa:f4:27:97:ac:7f:
06:93:96:62:c5:67:7e:25:72:fa:e0:52:ef:af:5e:
a6:d9:d9:72:4e:ac:ad:a6:22:f2:48:4e:a2:88:90:
83:04:b9:f7:a5:60:22:37:f2:4c:3c:84:b6:fd:cc:
8a:a1:a2:28:f4:20:4f:6b:a6:dd:f2:ca:c6:71:e2:
e9:c4:ab:f2:47:3b:a6:f3:0e:18:30:27:2b:7f:8d:
8c:49:cf:c8:83:6b:a2:37:8f:0f:93:26:c9:b6:60:
2b:3d:56:70:e7:81:c9:1a:d6:fb:a9:c4:0a:11:59:
a1:67:f8:71:cb:ed:33:c0:bd:d7:ba:b7:24:f4:41:
2e:f3:67:f0:d1:a9:4f:8e:c0:ff:5a:0b:88:d6:50:
73:ab:07:46:8f:87:b3:3a:ef:ef:a7:d1:e6:c1:58:
96:d5:35:f9:e4:8d:fb:fc:39:20:0f:6c:40:01:6a:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:6A:E3:6B:22:BA:EA:2F:A2:4D:32:1B:2A:FC:81:F5:5C:BA:05:0F
X509v3 Authority Key Identifier:
keyid:AC:A2:F7:74:8F:E3:63:DC:59:39:E9:B8:54:FC:00:40:31:30:EB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKL3dI_jY9xZOem4VPwAQDEw66U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/cccc41-dd2c-41f0-82bf-e92dd8fa6abb/1/rKL3dI_jY9xZOem4VPwAQDEw66U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:dd:c9:a8:70:c8:78:86:77:8b:3e:d1:b1:2e:70:10:ee:
80:6a:b3:6b:c1:d4:25:b5:36:62:2a:82:ce:f8:78:22:18:f1:
46:ff:4e:20:07:ba:cd:5b:00:be:1c:d2:f6:85:59:cd:09:dc:
fc:c8:9c:56:a0:a1:0e:89:3f:3b:9a:af:19:a0:3d:2e:17:77:
5d:5f:5b:cc:51:83:f8:53:59:da:f4:07:bb:5d:79:eb:be:d0:
e9:c6:5b:e3:86:ce:d5:ae:cc:b4:dc:86:a6:57:42:b3:12:60:
d6:7f:47:3d:0a:86:c2:46:e5:27:0b:5c:b5:8c:60:46:fb:7f:
88:93:99:dd:f0:56:b7:17:ab:95:41:8c:0c:9c:4e:0a:86:8c:
41:67:31:d7:bc:8c:ef:50:7c:f9:39:70:46:24:1d:af:45:6f:
b9:61:00:31:7c:b2:78:a9:fd:91:64:6e:32:7f:a4:37:39:47:
c5:40:50:c4:4e:c4:38:31:cd:2d:bb:26:a3:68:a2:41:de:ba:
ad:79:85:3e:e7:4f:00:ae:f8:2d:6c:3f:10:b4:ff:e2:a0:82:
cb:3d:64:02:96:e2:74:87:24:bb:58:56:cd:82:17:8c:78:29:
d5:bd:e9:31:fd:7b:fc:78:9e:33:de:a8:c8:7d:53:8f:4f:9d:
d0:19:6f:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:58:03 2025 by rpki-client