Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
File: KEQn3OurQOvBmDny0l7qLOClYv8.mft (raw, json)
Hash identifier: eaO9ZS+xrfKyMVc783BFwnouj2Eb7aw7p7QpcGQEhDA=
Subject key identifier: 24:0F:EC:08:16:73:13:38:F1:B1:49:2B:B6:F4:07:51:3B:4A:54:F3
Authority key identifier: 28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
Certificate issuer: /CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Certificate serial: 0196545C14F8E17AD30D5D64267C62E10DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
Manifest number: 03C6
Signing time: Sun 20 Apr 2025 18:00:42 +0000
Manifest this update: Sun 20 Apr 2025 18:00:42 +0000
Manifest next update: Mon 21 Apr 2025 18:00:42 +0000
Files and hashes: 1: D46Ir3fESQdKV4ntE1MciVCeNwY.roa (hash: ND9cgWv5J0hNtKyrA/zDulukUC/W3FHSN0hW88QXa3s=)
2: KEQn3OurQOvBmDny0l7qLOClYv8.crl (hash: v9YI43EEUpFmbQemaLZK2NFSGCM+FR/4wOMeQvcrww4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:5c:14:f8:e1:7a:d3:0d:5d:64:26:7c:62:e1:0d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=284427dcebab40ebc19839f2d25eea2ce0a562ff
Validity
Not Before: Apr 20 18:00:42 2025 GMT
Not After : Apr 21 18:00:42 2025 GMT
Subject: CN=240fec0816731338f1b1492bb6f407513b4a54f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:1e:03:75:f2:03:99:98:a1:2e:a1:4b:99:
71:d6:25:0a:71:12:51:62:fc:e8:ab:a7:d7:e4:51:
77:51:72:a3:98:82:a1:dc:e4:5c:03:ad:3e:e0:f7:
c0:10:e4:13:7a:3f:34:d3:19:3f:8e:a7:3b:b7:ed:
c2:3a:c7:eb:54:b1:c1:47:cc:ba:6b:66:c3:fc:d6:
64:2b:0b:99:f1:7c:93:3b:98:14:f6:09:ee:c9:05:
4c:bb:ff:47:a4:28:a7:8e:10:c0:0d:b1:b7:ca:0f:
26:f5:96:ca:3a:1e:12:a8:98:73:4f:fc:0b:2f:2c:
40:90:60:c4:9b:a6:b5:bd:bd:83:f1:60:dc:9b:5c:
61:92:ce:1e:ba:11:47:a8:c6:86:e3:78:db:56:45:
5c:af:74:c9:93:a3:c1:12:3a:d0:1a:29:4f:0b:dc:
36:ef:8d:1b:80:91:1d:60:7a:33:f7:75:61:5a:11:
96:4b:49:cc:7b:60:62:34:d4:78:32:7e:51:29:ea:
6f:fc:c3:35:d1:f7:09:7e:a9:91:46:31:31:a1:ce:
95:bf:43:db:15:25:41:2d:64:99:b2:c5:41:2a:4b:
03:91:73:33:e2:9b:2a:eb:04:25:c9:d1:c4:98:9a:
74:0a:53:76:26:db:85:33:bc:6f:65:ca:d2:5b:d4:
32:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0F:EC:08:16:73:13:38:F1:B1:49:2B:B6:F4:07:51:3B:4A:54:F3
X509v3 Authority Key Identifier:
keyid:28:44:27:DC:EB:AB:40:EB:C1:98:39:F2:D2:5E:EA:2C:E0:A5:62:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEQn3OurQOvBmDny0l7qLOClYv8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/46d8b4-8f47-4e93-acc2-50d005782fab/1/KEQn3OurQOvBmDny0l7qLOClYv8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:32:f9:89:bf:2c:41:91:94:42:9e:c6:e9:78:79:46:70:f8:
e7:da:10:c5:c1:9c:2a:8c:0f:05:c9:91:92:ba:49:58:9c:87:
2f:e2:3d:14:c3:5a:d5:30:4a:6a:16:95:da:8e:ed:be:57:02:
d8:73:74:3f:eb:06:b9:8a:f8:41:8a:74:07:64:0b:d3:3f:1a:
ff:a1:15:09:08:b2:d4:3f:f0:ba:9e:de:b3:cd:ae:d4:f5:c4:
67:78:c0:68:01:fb:89:6b:0f:54:b9:16:d5:0e:a0:16:f7:81:
4d:63:b5:5f:40:d0:a9:cd:6f:0d:d8:98:61:09:7c:dc:95:6a:
89:66:6e:47:ac:59:55:a1:90:4a:41:89:fe:54:0f:a8:62:34:
f4:68:2f:73:b2:83:f1:ea:fe:c9:09:fe:8a:1e:f3:8b:75:24:
5a:d1:21:c8:11:ab:50:bd:c9:3a:c3:64:3e:b3:20:1a:05:6e:
03:3a:13:b7:76:35:dc:b2:84:d4:f8:5e:08:47:38:b1:32:80:
95:39:ef:90:f0:e6:cb:35:be:78:a7:a5:27:97:83:2f:af:bb:
51:97:fd:76:43:24:e1:1d:24:2b:21:2c:7e:73:a7:73:62:2c:
bf:44:02:49:83:e9:35:18:64:60:c7:99:2d:95:28:ee:ed:b9:
f4:91:78:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:53:17 2025 by rpki-client