Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: +mkxcZ6mtw1lN32botUCxO6aP8v7r6PHkD9vdnAjHOc=
Subject key identifier: 6B:47:EB:21:AB:58:34:60:38:59:4C:58:92:80:E7:F9:04:8B:EA:5A
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 01964AB440024CEC835242B015B61F41D0EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 14F8
Signing time: Fri 18 Apr 2025 21:00:48 +0000
Manifest this update: Fri 18 Apr 2025 21:00:48 +0000
Manifest next update: Sat 19 Apr 2025 21:00:48 +0000
Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: xq+bmbJfkapVvVYUoVXJx5QW/FYj5EDL3QOacSya45E=)
3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:b4:40:02:4c:ec:83:52:42:b0:15:b6:1f:41:d0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: Apr 18 21:00:48 2025 GMT
Not After : Apr 19 21:00:48 2025 GMT
Subject: CN=6b47eb21ab58346038594c589280e7f9048bea5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:6a:e6:52:c6:4b:2b:ff:8e:2c:03:90:ff:
04:55:3b:e4:db:29:4d:19:21:3b:31:5b:02:e3:52:
87:23:13:da:c5:bf:98:d9:51:4a:d3:f7:b3:cc:d2:
f8:e8:65:b1:12:ee:4d:4a:8a:2f:66:e4:5a:ab:03:
89:77:53:39:86:2c:b2:6e:ad:98:dc:f6:62:e0:07:
99:66:2b:41:b0:7d:2c:54:d1:12:d9:6a:ed:d4:1c:
d8:f5:3a:0d:c5:1b:2d:96:9d:f6:09:bf:1f:d6:3f:
2d:c5:f3:b0:27:3a:df:a6:45:22:89:10:b3:1d:db:
33:09:7b:c9:fd:1c:7d:5b:49:96:68:0e:69:ff:fa:
99:1a:85:cb:be:cb:e9:bf:ed:d1:16:c5:93:c3:a6:
07:04:1c:63:15:c5:07:1f:5b:de:21:6a:10:dd:41:
06:fc:f8:27:23:b3:43:df:8f:80:d9:80:81:78:8e:
4f:3b:bd:da:b1:13:dc:34:30:f1:95:a1:98:4b:fc:
88:24:cb:a8:1a:77:5f:66:ce:c5:2d:18:ea:4b:24:
c3:80:1c:ef:51:f8:c9:87:37:99:2c:e8:b4:9d:d9:
f6:0e:dd:30:02:a9:35:0c:2d:f0:05:97:5f:2c:ed:
6d:0f:a8:5e:22:5a:23:0a:90:60:45:32:7b:40:f9:
d1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:EB:21:AB:58:34:60:38:59:4C:58:92:80:E7:F9:04:8B:EA:5A
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:47:ab:e8:8c:63:ef:b5:05:79:5a:c8:8c:47:ce:6c:81:9b:
9e:3a:54:3e:33:ce:3d:4e:14:87:e5:40:8f:5b:86:12:77:ba:
21:95:39:82:a6:6e:b6:18:0b:d7:68:41:1e:ea:48:c4:ff:c4:
93:bf:69:1e:3c:84:47:58:8c:c1:8d:3d:60:7e:ae:d8:ba:88:
7e:aa:b3:e6:2b:8d:45:0c:87:ac:7e:2a:ed:b5:12:85:d1:ff:
dd:fd:13:69:e3:66:cb:1e:ed:9a:54:41:b6:01:f5:af:71:d8:
95:27:97:91:b6:d1:1c:ae:c9:b2:74:62:d0:3a:8f:1f:24:8a:
91:3f:91:5f:d5:9f:cd:6d:a3:cc:b5:53:42:84:fd:e8:27:04:
ee:a2:fc:54:3d:9d:b4:8d:69:6a:da:3a:76:ad:c8:4c:52:9b:
b1:18:cb:32:49:9b:4b:0d:db:e1:8f:18:80:66:9a:a4:b5:14:
4c:10:61:18:29:01:03:9d:19:0c:41:4b:0f:89:a3:11:3d:ea:
16:d4:2a:54:be:c5:1b:a0:7a:31:59:f8:b8:12:cd:87:d6:69:
2d:2f:c4:ab:c4:18:20:8c:90:85:15:1a:fb:65:17:c0:a9:47:
0b:32:50:a7:b3:f0:19:5e:5d:26:03:04:cd:27:d4:50:0d:f1:
d0:e2:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:48:43 2025 by rpki-client