Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
File: KfajAL99QLf41hgcW4p9vHG30SM.mft (raw, json)
Hash identifier: +BVHCjuf/M34/I3hMdsXLBEMh3jsLH8zLSyHxf4qpYY=
Subject key identifier: E2:A0:62:2E:7C:AD:C4:B1:F4:48:89:7A:F7:3D:83:BF:ED:99:2F:19
Authority key identifier: 29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
Certificate issuer: /CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Certificate serial: 01963199EB9932FF41F9CC89004DCD10452A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
Manifest number: 08C6
Signing time: Mon 14 Apr 2025 00:01:32 +0000
Manifest this update: Mon 14 Apr 2025 00:01:32 +0000
Manifest next update: Tue 15 Apr 2025 00:01:32 +0000
Files and hashes: 1: GMQbG0-o6hWvOWZFjvgerZILeUA.roa (hash: 1vJaRcAe7VRxTOCxQZvQmXBz/hhYe/t4hM7qFxtZr7A=)
2: KfajAL99QLf41hgcW4p9vHG30SM.crl (hash: 3it8XsK8Tbgqc9UQC4dqoh4qJNTLjh2LrA6wvCT7AHc=)
3: rF48GSjCA8nAgS7e7P_0TwDWMHI.roa (hash: mzK0vZsIrvw7/YH7xF2HGiJG11ODO49sPGy1ll1t6eQ=)
4: wKUJgTwD7cFwdEtrEHOHqt6iRN8.roa (hash: kOGKpGaa2gE7ztgll470FJTFa167kUV848g0OHaW6ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:31:99:eb:99:32:ff:41:f9:cc:89:00:4d:cd:10:45:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29f6a300bf7d40b7f8d6181c5b8a7dbc71b7d123
Validity
Not Before: Apr 14 00:01:32 2025 GMT
Not After : Apr 15 00:01:32 2025 GMT
Subject: CN=e2a0622e7cadc4b1f448897af73d83bfed992f19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b1:ee:2f:49:c9:a2:2a:e3:bb:95:3b:02:ed:
59:ca:1f:01:9b:90:b8:cc:a6:4a:f3:94:db:be:45:
47:96:56:a7:39:ed:de:cf:5f:16:9e:73:2a:23:3a:
16:4e:e0:16:5e:bd:cd:e5:4d:17:63:81:51:1c:2b:
28:26:15:95:7f:f5:59:3e:f7:97:11:11:97:a6:71:
3c:9c:e3:fe:dc:7e:79:ad:d1:9e:f2:9a:0a:5b:4a:
c6:69:9a:29:16:69:89:2a:e4:a1:a0:9a:33:eb:21:
55:34:c1:57:10:f1:d5:6f:7f:e1:fb:41:4e:bb:7c:
ad:03:c5:0d:be:94:6a:b6:62:c8:1d:99:8f:52:fc:
b3:f3:60:8a:88:55:dc:f6:1c:34:a5:d4:60:63:fd:
4e:97:c9:1b:7c:78:04:93:c6:77:5e:b9:f2:13:fc:
7f:fa:c2:64:37:ea:8e:ab:d3:70:0b:40:02:54:3e:
f1:1e:db:9e:32:36:ac:8c:0c:3a:73:1c:f5:14:57:
7b:a4:88:a6:f1:6a:d0:28:a8:9d:b8:05:52:b2:5d:
d3:9e:82:45:1c:cb:1a:ad:e3:57:d1:fb:34:2d:92:
67:75:74:3b:28:43:3e:ac:fe:2c:3f:b3:d2:a7:0c:
5c:0c:30:20:2c:b5:0d:77:5e:9c:85:79:f1:f0:bc:
65:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A0:62:2E:7C:AD:C4:B1:F4:48:89:7A:F7:3D:83:BF:ED:99:2F:19
X509v3 Authority Key Identifier:
keyid:29:F6:A3:00:BF:7D:40:B7:F8:D6:18:1C:5B:8A:7D:BC:71:B7:D1:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfajAL99QLf41hgcW4p9vHG30SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/aaf49c-83dd-46aa-8ce7-b84c413dfaa4/1/KfajAL99QLf41hgcW4p9vHG30SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e0:c7:4b:de:0f:1c:2a:53:d3:58:31:00:db:b3:7b:80:c4:
41:41:65:a6:19:4c:39:2f:53:35:45:8e:d9:ae:04:b9:eb:29:
27:ff:1e:70:fc:5d:92:d5:cd:0f:5b:b4:e0:59:47:0c:08:f4:
28:76:e9:62:9d:ce:2c:8b:88:e8:db:79:14:7f:71:d6:ec:89:
60:a9:8a:98:97:60:53:5c:ca:c3:d7:79:bc:f7:2e:dd:e8:dd:
29:90:90:35:6f:b6:93:62:73:fd:33:0a:0f:f6:a1:d5:81:f6:
97:0d:74:3f:93:68:6b:3b:24:47:39:26:73:5a:ce:e7:d9:ff:
d0:e5:11:0b:7d:8e:03:63:ce:29:eb:15:a8:b5:fe:a9:fe:77:
67:28:3d:75:0d:ad:97:5d:9c:16:1a:69:72:c0:91:0c:47:1e:
8d:77:4d:6f:02:9b:dc:59:37:62:29:61:d9:98:6d:db:72:81:
95:87:4c:73:ec:b6:05:06:2e:b5:d1:4c:a8:af:53:4d:fe:dd:
5b:db:76:af:bf:68:7c:51:2a:17:90:a3:d2:dd:cd:ce:84:4e:
88:5a:08:05:39:8c:42:cc:d4:2d:c4:6e:b0:1f:0e:08:12:20:
cb:53:37:6f:13:ed:9b:00:21:dd:8e:ef:01:13:ef:f4:3b:eb:
2c:50:9e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 07:08:59 2025 by rpki-client