
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier: jsDZgwjS50wIRYCNJrP1BRuaKvdAwEImvPFrgrBwB+0=
Subject key identifier: 37:6C:F1:CB:64:53:C0:BB:1A:8F:BB:A4:FE:0D:54:1C:58:9B:BC:F6
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer: /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial: 0196138FBF19FC8403951D7A46559E6C04E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number: 0248
Signing time: Tue 08 Apr 2025 04:01:49 +0000
Manifest this update: Tue 08 Apr 2025 04:01:49 +0000
Manifest next update: Wed 09 Apr 2025 04:01:49 +0000
Files and hashes: 1: 6w2zju3MQesL2h0kBvZh3fnqTpk.roa (hash: qFtRm28NJGQNJhvYD72+GzqZcewOHcDC5+790w2uIjw=)
2: Va4lT4dcegb6wAxu5d6hAtZ0sPc.roa (hash: V2GzO75KrR6j8wTx9v/Qqyh9ekhgpMjeYEsEM94WE4M=)
3: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: HwnUgsi1cG/4KKMPdx3t+ZV1dgc737++1b05GRlNpbY=)
4: f5zZHfnsAaopf1GoZf4uBje2t0Q.roa (hash: stYfXchqDnkN91Nt8UqXVM+bMk/Z/wzqFhIgpOKs0pk=)
5: j3K4X35kfjEUhm8UmbEuSZuRvvY.roa (hash: uk+5aj7HJZZkakM6PdHtx3JuETeBBl+0lL4mUEVaQ90=)
6: oFLSLxTROTSIlscGjGR0gR901FM.roa (hash: WRbdNPDyjk05klC3/AGlx6tP1ckSGAuLYeSpiKLvrT0=)
7: un7aOLvVH0DQuSmGP1vDBl9I7QA.roa (hash: iVhFcj6hdZp2lh837gdlgVnJ4rMcKoq6PbO5cfW5HHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:bf:19:fc:84:03:95:1d:7a:46:55:9e:6c:04:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Validity
Not Before: Apr 8 04:01:49 2025 GMT
Not After : Apr 9 04:01:49 2025 GMT
Subject: CN=376cf1cb6453c0bb1a8fbba4fe0d541c589bbcf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:68:63:4b:94:31:0f:58:ec:63:8a:81:25:66:
2c:58:8b:08:64:d4:2b:f0:81:5a:e5:e9:dd:ed:2f:
13:a1:5c:90:3a:31:2f:b0:7f:e2:bf:29:24:b1:c7:
0a:54:78:b2:92:aa:17:53:68:81:61:4e:8f:06:e2:
a4:03:f4:15:74:52:88:81:e6:5a:f7:73:2f:7f:79:
48:c0:c5:44:95:69:3e:1c:5e:f1:56:47:20:a1:17:
83:18:53:0c:19:60:ad:28:a1:f2:93:c9:db:35:27:
f3:14:12:74:8d:e6:97:37:10:b5:0d:ee:22:b2:47:
f9:56:a9:e0:0d:27:17:29:7a:8c:72:29:40:ad:54:
8f:32:31:2f:d3:87:0b:a5:1b:81:e5:cc:c8:0c:65:
39:e4:47:c7:d6:c0:db:db:ad:5d:37:14:87:a3:32:
e4:f5:21:bd:25:7e:dc:ab:4e:12:85:0e:be:6f:72:
8b:cc:52:37:f4:72:1b:73:90:28:d4:d5:45:18:eb:
41:7d:97:1b:aa:97:e5:c3:09:f3:7f:56:df:24:cb:
30:30:bc:73:29:6c:a1:c6:1b:54:08:d8:6e:e3:31:
da:df:73:f1:5d:a1:b7:c1:82:7e:62:9d:a4:fb:48:
94:3e:11:6a:e2:06:68:c1:92:0b:5f:cf:26:67:51:
04:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:6C:F1:CB:64:53:C0:BB:1A:8F:BB:A4:FE:0D:54:1C:58:9B:BC:F6
X509v3 Authority Key Identifier:
keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:5d:d3:47:3f:77:8c:39:30:c5:da:36:eb:29:8b:52:7f:98:
2c:fe:57:5e:29:43:eb:39:cf:5b:47:9e:65:51:2e:97:0a:e1:
2e:2c:f6:55:84:35:3a:e1:e8:ee:e0:0f:16:83:3f:85:ec:40:
75:a3:2f:92:9d:9e:f9:93:54:07:ba:d5:87:12:71:5c:2e:dd:
54:ce:fa:56:00:3a:84:39:9c:89:33:39:77:34:d0:2e:17:02:
be:98:1a:66:85:f2:0e:a5:63:e0:e6:81:6c:9e:d9:84:4f:12:
aa:5e:a8:12:82:84:b3:3b:64:5c:66:20:c4:d2:4c:29:10:67:
85:5f:e2:35:7e:2e:01:b4:d1:3f:66:64:f3:67:9f:a7:ad:0d:
55:6c:3d:12:96:66:09:00:d5:02:d9:2f:a7:08:09:8e:3e:29:
a5:be:e0:15:ca:fa:9b:d5:90:ba:88:0c:a8:aa:ef:10:50:dd:
46:4f:e0:26:1f:1a:7d:b4:fc:f4:21:d7:3d:28:7d:d5:f4:50:
1f:96:6d:20:ee:51:1a:34:87:7b:73:33:8e:4b:9a:28:36:11:
3b:4a:12:52:d5:d8:9a:3e:08:9b:e4:c3:f9:ab:4f:e7:84:8b:
1c:a2:48:c7:da:04:9a:76:64:1b:b2:71:fe:3d:76:01:5f:dd:
70:e7:64:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:21 2025 by rpki-client