Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
File: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft (raw, json)
Hash identifier: aZltVRYEgvtPNUXbwfhEvsmz/yWbug0WkYvMHj8pobI=
Subject key identifier: 6D:1A:90:5E:EE:25:F8:3D:47:68:3C:B1:9B:B0:2B:60:66:0F:6D:B2
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 019642556D198858C5AE1E313EA6D2CE399C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
Manifest number: 14F4
Signing time: Thu 17 Apr 2025 06:00:16 +0000
Manifest this update: Thu 17 Apr 2025 06:00:16 +0000
Manifest next update: Fri 18 Apr 2025 06:00:16 +0000
Files and hashes: 1: 1-BYmurPr5LAEsZbg3IkqQQ8bTE.roa (hash: gSRreBFbCS0pgQwKCm4p7z2bTAJn0+Iu8NoE2w5inzM=)
2: KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl (hash: GeQz3BdyGggbqQ8vTaI9bUpVX8ZzUBvis8f1myW20WQ=)
3: LkIHKYAztrvXyS2uvM19nitM_J8.roa (hash: bSmM4xvjjm+xIUvcYXqsQ49ZAFIaGh2KEBGQ0EzdDJQ=)
4: YZbRz0TPn2AkN3pts4pehGKPFCQ.roa (hash: +Ns94ZDDFJ4TJopF8u7U1uG56GwRweZl/hjdoUef2a0=)
5: _vdRTtZt9JtL5ja2GczGggJ0SbM.roa (hash: lAHlgKcde7+6Ag5a4YHN2NUrJtyFsbjpueclzD4vqNA=)
6: cPcxLO1mqeKGQGyRnW90EvAI0HE.roa (hash: k9JzzhuzIaxECEDTAdASrMOBk8mvIm/aEbc0qToiokc=)
7: dx0WinCfMz9mrqqCW13H5COmXU8.roa (hash: ljXXTzc+Ws09xCBJIxWwoc/Db/5IEktc/whbot/5Ato=)
8: fx8MLGTxK80dTB_4NJYiocZMPwQ.roa (hash: ktdhmccH0NnIum2PWLW59Gn98yD870nWte0K3STRnHs=)
9: uwiEBGof-KAkpEFhZy-WaLfAvIs.roa (hash: ZnbTLkj0SeUC00zQu5XoWyUlIHf81vfWL1Buec+9xEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:55:6d:19:88:58:c5:ae:1e:31:3e:a6:d2:ce:39:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Apr 17 06:00:16 2025 GMT
Not After : Apr 18 06:00:16 2025 GMT
Subject: CN=6d1a905eee25f83d47683cb19bb02b60660f6db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:69:6c:e1:44:66:2a:23:ed:bd:f0:c0:33:
40:22:1c:76:ca:49:8b:59:d9:4c:9b:c9:1e:ac:01:
34:50:c6:af:67:cd:2e:49:fd:6c:4a:43:43:3a:85:
63:c9:31:13:2f:3e:cf:f5:fb:5e:89:57:7b:f7:4b:
e9:eb:ca:f8:08:47:2a:04:bd:21:7e:60:ea:83:28:
ab:9e:b4:9a:ca:32:ae:78:b2:3a:79:67:54:d4:f2:
05:29:22:41:32:2b:ba:24:e8:6e:f9:45:22:99:86:
5a:cd:51:d5:91:36:2e:60:95:3f:46:5e:d6:97:9a:
d5:3f:37:fb:b4:96:8f:fb:4e:f2:b5:0b:a9:72:07:
73:57:b5:38:64:5a:5b:98:80:be:5b:28:6c:15:f5:
96:b8:36:e6:ef:6a:39:80:5e:a1:66:f1:65:ec:9a:
b3:37:22:9a:5d:19:bf:50:6e:13:8a:c2:6d:4f:07:
1b:7f:56:cc:56:c3:32:81:93:5d:c5:eb:be:d6:84:
a6:56:9d:6a:f9:5b:3a:ee:45:47:13:6f:84:51:50:
b1:38:72:66:b2:27:c2:92:cf:6e:27:d3:8b:7a:ef:
7c:50:9e:9a:ad:42:11:e8:ee:2c:9d:fa:c3:03:74:
83:2e:7e:03:8b:f9:6b:12:a5:e8:ce:f0:53:7a:4b:
52:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1A:90:5E:EE:25:F8:3D:47:68:3C:B1:9B:B0:2B:60:66:0F:6D:B2
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:5d:52:8e:96:15:94:ba:44:32:a7:96:68:b5:54:50:19:69:
2f:a0:dd:c2:34:d5:d5:92:dc:56:fa:d9:84:b8:cb:dc:b1:e6:
d9:9d:41:c7:ef:81:16:16:53:d7:e8:5a:af:a1:78:e0:00:d9:
22:04:12:fc:5f:84:ac:72:81:4f:38:2a:fa:cc:0b:46:24:33:
ba:40:b6:ee:05:2b:9b:6c:7a:7a:97:35:ac:54:e3:32:7b:c2:
a1:c4:22:b8:50:83:f7:26:4c:d5:69:c6:3c:81:dd:cb:27:3e:
d0:94:b2:0b:74:7d:4c:bf:fb:93:c9:4a:77:a3:66:da:37:1b:
cf:cf:80:7f:fd:27:21:e2:37:46:c7:ae:9b:be:41:07:d5:ee:
ac:dc:7a:5c:8b:05:c1:d0:45:03:af:e7:47:07:6c:7f:73:54:
c6:1c:e1:3d:d5:16:44:40:5f:0e:76:ff:0a:db:33:11:1e:bf:
93:c8:02:65:cd:80:54:9e:1a:8f:c9:07:e8:83:02:80:92:a7:
a1:eb:32:25:eb:b3:19:02:31:11:b4:e4:87:69:98:0a:0c:55:
59:58:59:23:b6:a2:df:ad:14:cb:08:b6:4a:54:83:46:2a:29:
25:ba:41:aa:99:c4:1c:81:4b:4c:71:b6:af:93:5d:e3:58:65:
f6:62:82:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 14:54:16 2025 by rpki-client