Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: F/PtohMz47aRhT9ErfSgaaCx2ob2CKnyLqheDcWUmbo=
Subject key identifier: 14:1D:99:69:0E:A6:3E:D6:C2:60:38:CB:2A:01:56:CE:EF:F9:66:2A
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 019578A241E13B325C8CBD215AFF12FE1B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 1232
Signing time: Sun 09 Mar 2025 02:00:54 +0000
Manifest this update: Sun 09 Mar 2025 02:00:54 +0000
Manifest next update: Mon 10 Mar 2025 02:00:54 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: LOTM3NLqcylX67kFjWxX63AojQ11AehOpHvHzyAdYdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:78:a2:41:e1:3b:32:5c:8c:bd:21:5a:ff:12:fe:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Mar 9 02:00:54 2025 GMT
Not After : Mar 10 02:00:54 2025 GMT
Subject: CN=141d99690ea63ed6c26038cb2a0156ceeff9662a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:7a:80:65:d2:55:3a:23:c5:12:b1:37:92:27:
c9:49:c4:f3:da:a5:e0:44:fe:89:0f:63:cf:8e:d9:
5e:90:53:37:0f:7d:c0:13:ac:3b:33:17:a4:1e:8e:
d6:27:a6:99:3a:aa:a8:38:ef:87:80:f6:26:bd:90:
45:92:d7:d6:1c:fd:27:aa:54:95:cd:63:f3:15:a3:
71:b3:17:18:57:eb:f5:48:fa:60:b3:a6:56:43:7a:
4e:3c:18:57:c8:db:60:64:d1:15:07:f3:60:23:c2:
45:61:27:ee:9f:d0:80:c7:1a:99:31:aa:69:03:4b:
1f:c7:82:94:db:45:4d:bf:fe:44:e7:54:71:87:60:
cc:8b:63:a4:c0:c1:58:dd:7c:bb:54:de:a8:5c:19:
e7:a2:65:56:fd:56:bc:16:03:6d:ea:5c:4c:e2:e3:
dd:a2:d8:0c:03:0f:21:12:d1:14:bf:6c:68:f1:56:
ad:08:50:d3:8c:ee:63:56:53:52:de:0c:2a:e7:31:
26:98:e1:2f:9a:03:3e:7b:9b:8d:90:7d:0f:86:16:
4d:34:0a:ca:43:9c:65:3c:0b:e5:6b:8c:61:d5:27:
2f:35:96:88:00:6f:6c:01:7c:5c:fd:d8:b4:ed:0c:
2d:48:16:ef:61:b8:09:53:c2:6c:27:9a:9d:c9:ee:
1b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:99:69:0E:A6:3E:D6:C2:60:38:CB:2A:01:56:CE:EF:F9:66:2A
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:1e:8f:7c:05:8c:20:7c:3d:be:97:b5:16:98:7f:15:ea:f0:
12:32:de:c0:c9:38:78:eb:60:fb:d4:58:fb:71:d7:41:09:5d:
36:db:13:32:4e:12:0a:e8:0b:0e:7b:72:e8:37:0d:30:37:c4:
30:36:52:f7:84:e2:51:19:68:ff:09:5e:38:67:94:3b:df:3a:
00:4a:ee:df:fd:05:e6:a7:a7:2b:29:34:0b:ed:ad:c8:e7:7b:
51:f5:f5:33:63:03:75:f4:33:7c:dc:cd:49:c7:ab:da:9c:da:
53:76:a5:f8:da:58:b3:a6:f8:59:79:3f:6f:01:dc:f8:7d:59:
13:69:aa:3f:e8:48:a8:66:13:31:5f:d7:94:dc:d2:2c:d8:66:
36:72:59:9d:48:21:9e:ef:8c:4a:72:d6:8a:a6:43:6b:66:c5:
22:f4:d8:bd:c9:04:83:dd:df:3f:0f:0a:a8:1d:e9:9e:a6:85:
54:f9:5f:22:0a:36:28:51:74:77:f6:11:cc:48:76:91:4b:9c:
ac:5d:31:f9:c6:7d:84:d3:03:49:f5:4b:29:12:d2:fa:d2:66:
f2:90:54:69:32:9e:14:5f:03:92:d8:a2:c6:80:58:99:74:6b:
a2:08:80:f4:b8:79:74:55:d0:34:16:6d:e9:cc:b8:4d:cc:17:
ff:9e:e8:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:36:17 2025 by rpki-client