Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: ZMTQVm3BJkDLfMRGjhflhhy4uvyV9FSz373S/+jvTFI=
Subject key identifier: B4:26:CB:2D:19:D0:BF:56:70:F3:AD:F6:FB:AE:1F:77:11:CA:F8:E0
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 0196A276B6D4915428933592D39D9EB77D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0C41
Signing time: Mon 05 May 2025 22:00:11 +0000
Manifest this update: Mon 05 May 2025 22:00:11 +0000
Manifest next update: Tue 06 May 2025 22:00:11 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: Z1VEzIRSPgqPNrxd2/2JLkvn1EFFiAe8QRalyqC+UUU=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:b6:d4:91:54:28:93:35:92:d3:9d:9e:b7:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: May 5 22:00:11 2025 GMT
Not After : May 6 22:00:11 2025 GMT
Subject: CN=b426cb2d19d0bf5670f3adf6fbae1f7711caf8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:ea:08:1f:21:33:90:df:bf:f2:0d:59:c2:
1c:d7:f8:78:69:ea:7f:c5:5c:ee:37:78:ff:67:1d:
6b:8a:b1:f1:c8:26:5a:3c:34:d8:7c:97:8d:f1:b2:
4f:23:96:1a:89:51:db:bd:fa:e1:88:d3:8f:44:32:
95:f3:8e:13:c5:e0:5f:f9:17:9d:f9:d9:fe:33:2b:
3f:94:b4:af:73:e8:a7:7d:71:4b:11:83:09:7e:fd:
d3:dc:ce:e4:d4:3d:b5:71:0c:45:f2:c6:28:df:1e:
df:7e:bc:c0:47:4e:31:a4:1f:ac:13:86:fb:9d:8c:
6e:3a:d5:20:3e:14:73:9d:a5:6d:3e:2e:bf:3f:90:
50:92:c0:67:56:75:bc:b9:77:55:1a:c2:12:0b:d3:
5e:b7:16:19:c1:d9:bb:54:24:45:2b:7d:27:4b:f5:
ba:5b:c4:7f:83:7c:77:78:d8:f0:51:5c:b9:bd:61:
04:5b:b5:7d:b8:e8:f3:08:50:fa:13:47:95:6f:80:
ab:16:fc:e6:05:0d:c5:35:00:ec:9b:e5:f0:d8:09:
d7:f7:8b:26:45:03:81:2d:5f:50:4f:d8:15:b1:ce:
6d:0c:b9:4b:8a:59:8f:fc:7b:88:76:26:e3:e2:35:
55:ce:9f:a5:05:50:9f:6c:f4:6d:1b:54:2b:86:0c:
f6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:CB:2D:19:D0:BF:56:70:F3:AD:F6:FB:AE:1F:77:11:CA:F8:E0
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bb:14:03:17:c4:51:17:c6:ed:95:9f:e6:90:61:09:d9:56:
db:59:b3:4f:a4:98:4e:71:7f:94:b5:f4:36:35:11:18:17:2a:
37:e2:90:0c:a1:89:90:b6:39:28:1a:1a:b2:98:de:7e:3c:b6:
cc:c0:a2:68:ae:99:2d:68:11:03:cc:fd:02:f6:c2:8a:48:44:
e7:fe:f3:34:5c:ef:3b:01:5d:f8:dd:9e:ce:01:47:bd:68:c5:
31:54:aa:74:f3:c0:92:80:d9:46:ae:4e:51:98:6f:83:b9:1e:
70:19:bc:a1:02:7e:93:60:73:29:db:10:f1:63:f4:3d:57:0e:
7c:0c:0f:3c:95:6f:ce:e3:6b:d0:84:42:46:6b:82:66:29:f8:
53:31:a4:d4:ee:e1:49:e3:34:54:c2:57:b8:fe:70:e9:bc:85:
04:47:16:fc:e0:69:fa:c4:a0:0f:a7:52:6b:f3:87:5c:a6:11:
7f:e8:01:72:d9:57:63:02:94:5c:cb:55:62:79:3d:b3:94:e4:
77:e7:a1:f9:a1:45:44:df:ad:12:8c:2d:5e:44:2c:e9:d0:28:
e3:0d:cf:57:5f:82:87:80:db:5a:b2:c5:da:18:6a:76:ac:4a:
d1:63:ca:cb:6d:08:a5:ff:25:0e:19:ae:11:7b:3e:f4:9e:11:
d2:a5:05:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 00:10:12 2025 by rpki-client