Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
File: kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft (raw, json)
Hash identifier: VeHVOE4Pkr+PbHgIl3eYr5HH1sVTncU1b4KbbeuxzO8=
Subject key identifier: 64:17:D1:F7:77:C6:B2:88:CF:74:84:5E:10:68:CD:9F:17:C4:B5:92
Authority key identifier: 92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
Certificate issuer: /CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Certificate serial: 01962ABCD49CD7CE9CD9D5E94BA3E7C4EBB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
Manifest number: 14F5
Signing time: Sat 12 Apr 2025 16:02:20 +0000
Manifest this update: Sat 12 Apr 2025 16:02:20 +0000
Manifest next update: Sun 13 Apr 2025 16:02:20 +0000
Files and hashes: 1: L3kS7Jn1yhF9Sq1B0Zxhnxy-UmQ.roa (hash: 7USsx/75CcWYYXOpIrJthPZ+SLbNDigaF6/K5IzHy04=)
2: L3xdjIH2zy7v5Cj6gtkLDE8Ij7M.roa (hash: Q+o3qtQDOHZiPtx1qsjKwH4+/xbmKCsf4LWPeNV0Toc=)
3: Te7YHi2pfVF9zbo2M3FU6X9QFw8.roa (hash: iefxuR6cCSeQuUVD7gHNM5oNj3aGdVfsEjg121b/nwY=)
4: U18SPSBUf3dwumuu9FyNIqHDXLw.roa (hash: V5VQUyBsrAGopRO8qXTISlE1ORxyujJueAvt5anuNoc=)
5: YbdTZXXJ_bhou-ns1MRKdw7L4Hs.roa (hash: Yu99aBSHIFLARWNtpLmDu4XobT/yupAF1F7TMAyI2tE=)
6: Z82XkiOXgkgyHP_qUTQtV9ipAQI.roa (hash: Pcm+DnawQak47wg3O3tVgdWOq8t4gYDBeT6sBFXXJVE=)
7: kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl (hash: rweDCwwRsXdtwamlACD6dgHuWS49Z09zhWYuv7FWU5g=)
8: xzAOimHDia6u9KEZ2lcYuzbmUh8.roa (hash: twU3Zu+3OA4eLfmXFSTTDjCKPfrJ6o8S1Q+yF0JIdC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:d4:9c:d7:ce:9c:d9:d5:e9:4b:a3:e7:c4:eb:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929352a8d2dd70c91ffcec8e323fe69f1e9a4139
Validity
Not Before: Apr 12 16:02:20 2025 GMT
Not After : Apr 13 16:02:20 2025 GMT
Subject: CN=6417d1f777c6b288cf74845e1068cd9f17c4b592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:83:f1:16:5d:6c:0e:38:6c:e4:8f:91:99:31:
ea:52:52:43:93:87:5a:d7:de:c5:1b:db:d4:53:f5:
7e:30:b0:5b:67:22:eb:01:27:67:6a:8c:4b:c7:07:
f1:6d:be:3a:38:50:8f:eb:0c:b9:79:06:af:6d:72:
fb:56:2b:e7:20:6a:d0:2a:58:40:ce:5a:72:e1:37:
cd:b5:5d:5a:77:26:35:47:b4:91:ca:89:46:4f:88:
9e:57:ef:be:8b:a0:ff:bb:9d:41:bd:69:18:7a:78:
be:8b:9e:f3:69:fb:d2:e2:2b:f0:f9:79:21:21:54:
7f:ea:d2:db:a9:d5:30:b3:81:b0:c0:e5:53:cf:7d:
08:df:db:c6:4c:4a:ac:ba:c5:17:9a:75:aa:e0:43:
4d:0b:43:d2:d3:f1:fc:2a:22:4d:c6:ec:0c:47:8e:
0d:9c:20:53:20:09:6a:62:99:9c:6f:96:73:49:e6:
7d:a5:07:d2:32:a4:53:a4:09:e1:21:b5:ce:de:68:
ae:02:df:c8:6c:56:8a:d2:39:0b:aa:9d:c3:0f:9b:
87:c9:ee:6a:41:e5:fd:b1:54:35:a1:e9:53:61:0e:
1e:47:80:77:41:d6:5a:b7:a5:51:a0:31:02:fd:2c:
68:78:bb:3d:12:c1:46:30:df:c1:30:ca:33:5c:3a:
1b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:17:D1:F7:77:C6:B2:88:CF:74:84:5E:10:68:CD:9F:17:C4:B5:92
X509v3 Authority Key Identifier:
keyid:92:93:52:A8:D2:DD:70:C9:1F:FC:EC:8E:32:3F:E6:9F:1E:9A:41:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpNSqNLdcMkf_OyOMj_mnx6aQTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/7b6edc-ad23-4d73-ab56-0a1a35897f10/1/kpNSqNLdcMkf_OyOMj_mnx6aQTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:60:7b:a1:a1:51:53:87:25:a6:19:63:ac:c6:c9:4b:ad:31:
db:06:cd:a3:65:26:75:4c:1c:0e:50:40:84:39:21:93:b0:f3:
c3:aa:c9:f6:9c:ae:cf:58:12:ea:ae:93:0f:db:dc:06:0c:a4:
c2:7c:74:27:8d:7c:d9:ac:e4:cc:63:55:96:a6:f3:fa:a3:00:
fb:4e:37:22:51:4f:61:0b:3c:4f:92:d8:62:03:4d:a4:ee:72:
fe:08:61:2c:1d:d4:56:ff:89:dd:5f:d6:18:6c:e4:05:d6:aa:
20:6e:4c:92:fa:27:03:1f:73:3a:e3:60:7a:18:53:21:61:1b:
d5:26:62:56:f2:34:cc:20:a6:99:af:e7:fb:21:a5:e3:89:6a:
39:49:d8:d9:f2:14:a4:6a:c0:9c:95:94:77:82:69:c6:c1:ee:
35:76:00:dd:d0:e5:b1:ef:b0:20:10:19:e3:f2:04:7c:db:3f:
c0:be:d2:03:c5:d5:e1:f5:6f:16:b9:58:29:d2:17:a3:da:0b:
f3:35:54:17:a5:ae:58:4d:e5:c3:4e:68:d9:a9:c1:e1:92:2a:
2c:10:bd:3a:35:9d:5a:cf:07:10:d7:d8:44:32:db:b3:12:a7:
49:74:4b:d0:ba:48:61:43:7e:0c:fe:2e:ad:56:26:fa:63:57:
a6:4c:5b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:42:25 2025 by rpki-client