Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
File: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft (raw, json)
Hash identifier: +bdflPUYAeO28dtzIVvgx3l/nMNJcbrKGhegJ9x72rg=
Subject key identifier: 0E:41:6F:10:75:7F:B2:E2:21:55:63:C4:E4:31:94:FE:A3:4F:BD:1B
Authority key identifier: 91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
Certificate issuer: /CN=913836859c6ce1869340edf1f273709b8094d9d4
Certificate serial: 0196C68340C156D26D12D7B43CC1AF41554E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
Manifest number: 14A0
Signing time: Mon 12 May 2025 22:00:12 +0000
Manifest this update: Mon 12 May 2025 22:00:12 +0000
Manifest next update: Tue 13 May 2025 22:00:12 +0000
Files and hashes: 1: i0znYyDIsk78QzCDDCTg60lK9ig.roa (hash: aeDo1wq5VczgcfrDX0J+4eB6IcjwVsRwiJM6vkXROSk=)
2: kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl (hash: MrcvMPwlb0WxZirJsZNDd3BzxpxzazvHWeJZzHG/aaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:47:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:83:40:c1:56:d2:6d:12:d7:b4:3c:c1:af:41:55:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=913836859c6ce1869340edf1f273709b8094d9d4
Validity
Not Before: May 12 22:00:12 2025 GMT
Not After : May 13 22:00:12 2025 GMT
Subject: CN=0e416f10757fb2e2215563c4e43194fea34fbd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:32:ba:eb:ed:49:76:0e:1e:53:91:54:5e:
c6:a2:85:bf:60:6d:84:2f:d7:e7:5f:dc:89:e2:10:
8e:e5:e4:44:a6:f3:22:e5:99:da:2d:74:5b:d4:1c:
4f:7b:af:65:15:97:6b:37:f0:df:47:f2:e3:f3:97:
71:17:25:f1:18:eb:e2:37:ff:da:ed:e2:e1:d0:28:
23:92:0e:70:74:da:3c:64:18:b5:4b:8f:15:2c:e2:
f3:8d:e9:d5:32:3f:60:a8:5c:14:bb:fb:42:7f:1b:
8e:0c:01:8b:65:2c:12:1a:65:e6:0f:6b:6c:0b:5a:
01:12:0a:e2:d1:a3:4e:fe:9d:07:40:ba:cd:4e:9b:
a0:0e:45:ac:68:a3:fd:b2:f6:2a:90:57:45:99:09:
cd:16:74:21:87:b4:e5:58:24:ed:8b:cb:bc:d4:9e:
6c:da:a5:e2:7b:8f:98:2b:ee:ef:fc:fb:c0:47:ee:
ff:7a:34:37:68:27:7e:98:79:8b:37:15:97:00:7d:
59:c3:ee:bb:4d:47:f5:b5:a4:d9:a9:5d:f8:b0:7a:
89:5f:48:63:a9:a0:df:fe:0e:cc:b6:76:0a:7b:74:
a6:78:98:7b:7c:1e:27:3e:15:54:76:14:95:6c:87:
45:8b:02:fd:1c:4b:90:33:dd:52:5c:ec:5b:89:9a:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:41:6F:10:75:7F:B2:E2:21:55:63:C4:E4:31:94:FE:A3:4F:BD:1B
X509v3 Authority Key Identifier:
keyid:91:38:36:85:9C:6C:E1:86:93:40:ED:F1:F2:73:70:9B:80:94:D9:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/e8f344-edb2-4400-b3ca-527ac54c2357/1/kTg2hZxs4YaTQO3x8nNwm4CU2dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:47:22:5b:fc:e1:1f:df:1b:26:3e:be:9c:c8:2a:c2:79:ad:
7a:3f:24:1e:1e:fc:68:ea:58:a4:f3:c8:78:6b:db:a9:4e:11:
73:8c:22:08:d0:5b:f3:e6:aa:44:2e:c4:68:5a:0d:22:09:a5:
f1:4e:fe:af:d5:51:a3:1b:41:73:b9:f1:48:fa:00:c5:cf:4e:
e6:5a:6f:3c:ca:d7:13:07:f7:fa:58:da:8c:c0:3c:74:25:5b:
db:f1:cc:78:43:69:d7:b4:d4:bd:65:8b:e6:8a:64:3b:60:a1:
f4:3f:ba:89:42:90:73:71:fd:31:6d:7d:ac:9f:e1:d4:a8:c3:
f8:8c:48:e8:29:d2:65:9e:69:74:c3:ee:77:77:19:c9:f1:1e:
91:cf:14:35:b3:10:99:33:f8:f0:39:6e:da:6a:8e:eb:dc:04:
d9:4b:04:ed:ff:ad:b7:77:49:48:44:82:15:57:3f:16:b4:bc:
19:5b:b4:85:68:30:32:98:05:9e:68:f8:72:04:76:74:53:1e:
56:fd:dc:81:64:9b:72:d2:51:cb:aa:90:ad:53:70:35:d8:11:
41:1e:b5:24:98:54:e9:61:99:93:f5:c2:ba:f4:3b:8a:71:08:
13:51:6d:7b:2e:c7:81:8f:c1:6a:4e:72:ef:d3:a8:26:e0:25:
f6:a3:74:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:40:35 2025 by rpki-client