Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: 2AsTCNjlVB07uYXyxsntuqWUVvzlINwGXLzalMaAFjA=
Subject key identifier: CB:44:61:DC:13:48:7B:06:01:5D:2A:A1:B6:A3:E0:30:93:EE:1E:C0
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 019653B70AF3468080E313A155D65BC0F892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0D4A
Signing time: Sun 20 Apr 2025 15:00:26 +0000
Manifest this update: Sun 20 Apr 2025 15:00:26 +0000
Manifest next update: Mon 21 Apr 2025 15:00:26 +0000
Files and hashes: 1: L4yOlESI8fdR9WjrNj0pt8bvOiM.roa (hash: PjGLNOQOqdRe8JNO68TKc2teWeNxY1n93CJQ5L6+wdo=)
2: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: hd2cM9N0Tie9/F4vQWQ9G8dTs3ybMYjHbpAXNP6jxBs=)
3: r3p8XMwcqAmXyonA67gG5KyDMk8.roa (hash: W3LtjBTfw8JpwVLfBSb4wvoIcLS8m9n94Jp8osd+AvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:b7:0a:f3:46:80:80:e3:13:a1:55:d6:5b:c0:f8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: Apr 20 15:00:26 2025 GMT
Not After : Apr 21 15:00:26 2025 GMT
Subject: CN=cb4461dc13487b06015d2aa1b6a3e03093ee1ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c1:ca:f0:83:69:88:b7:90:82:e7:49:45:05:
dc:5c:fb:98:ce:c4:00:71:e6:3f:b6:31:fa:b0:fe:
56:e3:da:05:e7:6a:37:9b:34:89:17:43:10:d0:29:
14:6d:56:cb:3b:62:98:10:d9:14:85:ab:12:70:ef:
0f:13:af:cc:19:12:12:fb:a4:7f:37:5f:3d:34:27:
17:63:c5:72:c6:b0:ba:f4:d6:59:78:5e:b1:23:dd:
d1:cf:4c:d0:0f:80:70:70:6f:87:0e:5f:51:03:83:
d2:61:9c:d9:a3:df:4c:60:7a:d9:b4:bc:92:e6:d1:
11:e7:d5:90:26:c7:16:c8:b7:19:63:9b:ea:50:d9:
2e:ca:92:8b:41:ac:3e:d3:ba:e4:c9:33:7a:ad:38:
6e:a3:a7:8c:7f:2a:f6:be:51:38:d1:9f:55:74:79:
8f:c4:4c:e7:7f:ea:f5:48:f0:a6:a2:2d:07:b5:cd:
c1:e0:81:52:eb:53:01:f9:72:14:b0:40:0b:4f:0a:
ad:1f:08:18:b6:9f:1f:5f:f9:11:b5:e3:d6:4a:b6:
c8:f7:23:2f:09:f6:08:12:f2:0c:34:ff:68:51:dd:
98:85:01:f3:aa:34:75:06:48:8d:fd:8b:3c:b8:69:
b9:7e:45:df:96:23:26:1d:7c:aa:20:f5:c5:87:9c:
17:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:44:61:DC:13:48:7B:06:01:5D:2A:A1:B6:A3:E0:30:93:EE:1E:C0
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1e:02:ee:25:d5:84:22:4c:19:06:e3:7e:c2:e5:67:50:b7:
b1:1c:f1:64:94:7b:b2:0a:13:41:1d:c1:b0:c1:f0:7f:e6:a8:
9b:e8:37:8c:91:4b:2c:2c:aa:ce:a5:56:dd:39:af:f1:d4:db:
40:fa:8d:bb:d9:df:15:5c:ec:c2:a2:71:53:49:69:aa:ee:3d:
72:28:1b:7a:9f:17:25:1f:ac:52:aa:8f:93:c2:07:24:a7:90:
ce:ed:7a:fe:81:f8:7a:72:28:19:36:bc:a1:95:12:cd:87:dd:
88:a3:89:3f:d4:51:9d:b0:af:49:83:0b:e3:1b:0a:b3:55:29:
f8:e0:35:e8:72:24:fd:73:37:35:c6:7c:c7:48:e7:9c:94:0a:
1b:97:70:9f:25:7c:3a:47:73:5e:ce:11:d2:56:b7:10:90:1f:
82:8d:d7:61:3a:98:be:8f:91:60:53:1f:a4:36:a5:71:7e:3e:
d6:00:ab:37:95:5d:fe:69:ac:7c:17:65:dc:61:a6:2b:d4:d9:
77:06:c5:26:22:e9:58:4c:a1:ce:48:8f:32:8e:e5:6e:7d:82:
2b:f9:d8:6b:2f:0b:24:80:d0:e2:a4:1c:65:fb:be:e4:30:af:
87:7d:a2:13:39:e0:6b:a3:5d:ab:c4:ee:ed:54:ce:71:dd:9e:
81:af:38:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:02 2025 by rpki-client