Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
File: kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft (raw, json)
Hash identifier: ctuCmcDHFibSZURdID3vNQ46Zea0Kg7yqjoS820jUdA=
Subject key identifier: 23:CA:49:8D:72:90:AD:02:F8:5C:02:BC:07:D2:B0:6F:AF:42:DB:D2
Authority key identifier: 90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
Certificate issuer: /CN=90f76537ff745893e3142fa0984f449b725b8fd3
Certificate serial: 01964CD903C826828A46C7FDA4EE695FD60C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 07:00:12 +0000
Manifest this update: Sat 19 Apr 2025 07:00:12 +0000
Manifest next update: Sun 20 Apr 2025 07:00:12 +0000
Files and hashes: 1: 4h8beUu4miiEn1n13esJcxX7gpc.roa (hash: 33+qj2eaRd7O8N5EQLS3e9QL955CTXDuq4VOYW0my7E=)
2: kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl (hash: SNnIiiCwolU0FNbPUQh4FEqPEYJDijD5YYVkjM3bJzM=)
3: zcJuMPKqinNoidJ9rHaaDdmdVvA.roa (hash: 9UsWhn4/INB/JJvJuTs6CMag+GLrqc1ZuXSO78kkqu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:d9:03:c8:26:82:8a:46:c7:fd:a4:ee:69:5f:d6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f76537ff745893e3142fa0984f449b725b8fd3
Validity
Not Before: Apr 19 07:00:12 2025 GMT
Not After : Apr 20 07:00:12 2025 GMT
Subject: CN=23ca498d7290ad02f85c02bc07d2b06faf42dbd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fb:df:7f:ff:d2:f0:80:44:07:15:a1:b2:a3:
67:73:d2:99:d6:63:e0:dc:0d:93:1c:b1:c4:59:2b:
a9:0b:03:64:ce:dd:55:9b:61:8e:06:94:67:a7:e7:
1a:80:8e:24:b2:10:09:7b:42:07:f7:e8:1f:95:2f:
b0:e6:5a:82:0f:b5:5b:77:a7:76:2b:96:83:61:00:
bb:4d:48:68:c5:d4:a2:98:f9:a3:40:ba:09:83:da:
c4:41:80:4e:96:e1:3e:eb:95:9e:ca:e7:17:36:c4:
9f:9c:7a:ff:37:31:ac:67:f6:cc:96:47:c4:1a:b5:
d2:43:bb:87:19:ac:46:d4:39:31:96:73:d1:2f:45:
2f:40:55:b3:f1:26:0b:c4:9a:b5:ca:ad:04:aa:95:
7e:87:e6:0c:d6:d1:86:91:aa:79:ec:81:8a:e7:1c:
74:20:8a:77:f9:af:4a:ed:ee:68:34:96:67:aa:04:
de:b0:48:c9:3e:80:0b:06:c5:e9:c0:c8:22:a0:d3:
19:94:7a:12:04:ab:c3:56:8e:a7:8d:3e:6b:bd:c5:
6e:30:b9:2d:46:dd:60:92:2f:73:92:db:85:d9:92:
6c:5b:66:be:fd:a6:a8:65:db:fa:45:00:5a:a1:ce:
8e:57:c1:41:d2:cd:1c:34:b2:05:e6:3c:ce:63:55:
84:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:49:8D:72:90:AD:02:F8:5C:02:BC:07:D2:B0:6F:AF:42:DB:D2
X509v3 Authority Key Identifier:
keyid:90:F7:65:37:FF:74:58:93:E3:14:2F:A0:98:4F:44:9B:72:5B:8F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPdlN_90WJPjFC-gmE9Em3Jbj9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4f7680-81ab-4c1f-a07b-7c62d5c315bf/1/kPdlN_90WJPjFC-gmE9Em3Jbj9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:16:d0:56:03:c7:eb:85:3a:b3:9a:9b:8e:c3:7a:cf:f5:eb:
b8:46:0b:84:30:d8:56:c2:97:1e:7c:bb:5c:0f:41:10:a6:59:
d6:fa:22:e9:32:14:fb:79:49:dc:56:40:3d:f8:33:ce:bf:12:
0a:05:57:00:76:06:cf:fd:c6:d2:d6:d6:ae:c6:3c:77:45:64:
34:33:97:8c:ac:c9:b2:c2:94:30:15:07:37:71:9d:62:fc:d2:
2e:3a:aa:3c:bd:39:51:d3:3b:12:82:95:59:7b:04:df:39:14:
e3:7d:d0:87:fa:76:0d:8b:4a:64:99:5d:09:aa:5d:9b:37:02:
aa:1e:63:38:68:61:5f:c5:da:e6:1b:99:6b:44:17:6c:27:9f:
8e:3f:91:63:9a:09:e2:3b:fd:bc:f6:c3:fc:ba:62:f3:55:25:
b2:bc:1a:59:6f:cd:ef:f0:89:df:72:e2:d6:6e:e3:b6:a5:2d:
07:ac:eb:18:7c:b5:a5:27:c0:33:da:50:88:1e:cd:52:8a:8a:
39:94:fb:60:dc:ae:e6:69:32:e8:11:ea:4d:dc:08:ec:f6:75:
a0:6c:9d:b5:3f:30:86:dd:bc:dc:85:9f:07:f2:0c:1b:e3:8e:
e9:c3:f6:7f:fd:d2:ba:50:ef:db:12:09:ab:a7:8a:45:52:a5:
89:66:a8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:15:53 2025 by rpki-client