Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: jjLOACkdBY/+ZC9F7hCJJuUf++S1Bipe0Z9iGHrmZLk=
Subject key identifier: 77:E3:D8:3D:2E:01:70:DD:58:4A:22:70:79:75:01:66:A6:A9:38:0A
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0196BDEE9024467BE89F4867C3C12EB8C359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 0966
Signing time: Sun 11 May 2025 06:00:50 +0000
Manifest this update: Sun 11 May 2025 06:00:50 +0000
Manifest next update: Mon 12 May 2025 06:00:50 +0000
Files and hashes: 1: 7KfzHRhceMH3Gb7zOEYksplo7xE.roa (hash: iVfBfIuw7lWYjZl+rIhHi1Vj8lrxetMWHxIKh5tV/kE=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: 4UJnisQQqy/m/hwwPcOE6ctivp92w+U5Z240Qgn11sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:90:24:46:7b:e8:9f:48:67:c3:c1:2e:b8:c3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: May 11 06:00:50 2025 GMT
Not After : May 12 06:00:50 2025 GMT
Subject: CN=77e3d83d2e0170dd584a227079750166a6a9380a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:20:a3:a0:9d:68:4b:bc:e8:42:58:3f:e1:ce:
5b:37:06:e7:35:63:c8:e5:26:fa:d4:7a:d2:89:36:
f1:f5:76:a1:38:ad:68:b7:77:bd:12:80:dd:8d:e6:
39:04:c2:37:12:cb:27:5a:28:90:38:0b:0f:05:bd:
95:f4:19:ce:1b:9d:bf:6b:4a:4d:6c:53:85:eb:aa:
5f:28:58:c6:eb:3b:01:04:30:8d:47:0c:8d:26:15:
2a:81:b9:4d:89:d5:42:72:57:ed:97:ff:b4:83:ef:
28:b9:b9:ee:c4:0e:97:7a:14:e1:5d:76:73:01:8e:
07:70:04:fb:f4:c3:77:54:00:16:d2:1b:e0:d5:ec:
61:4f:97:df:2e:ba:98:3b:aa:24:24:42:55:db:d8:
90:04:0c:20:15:03:87:a0:65:17:1d:cf:db:ff:bf:
2e:c9:f9:da:38:f0:e9:31:4d:d4:2a:3d:99:d3:ae:
7c:05:64:98:d9:80:fb:6a:e3:e7:8f:bb:1b:39:91:
c2:92:95:b7:46:fe:68:7c:92:48:ed:e2:35:31:3e:
fb:2d:61:e8:67:68:d9:fd:67:39:26:ec:c2:7a:a7:
29:c4:3d:2c:0e:01:3f:56:33:5d:3b:04:f0:3a:06:
96:a4:d7:f7:25:e0:c4:f7:6d:1e:d1:f3:f6:8f:f7:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E3:D8:3D:2E:01:70:DD:58:4A:22:70:79:75:01:66:A6:A9:38:0A
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:07:7e:23:ff:5e:4d:f1:dd:61:ea:45:84:2e:a9:b4:d9:ea:
9d:5b:86:cf:32:3b:c8:b8:68:d9:a2:05:8e:89:74:8b:7f:81:
94:15:11:70:0e:fe:b7:bc:99:9d:e1:26:f8:f6:f5:05:7f:60:
9c:97:61:ca:36:f8:ec:03:01:ce:a4:d4:5c:af:e2:b0:af:84:
ec:4f:38:0b:ce:7f:bb:03:48:fd:e9:9a:be:4b:30:d6:69:1b:
2a:e8:33:fa:82:94:4a:ec:ce:cf:cf:73:67:36:ee:2a:b4:b4:
f3:89:c4:4a:ef:71:ea:1e:1d:7f:3f:28:8c:1f:ab:68:29:d9:
d8:3e:a9:17:2a:d0:1f:51:bd:ab:11:a6:4c:94:24:17:9c:d2:
24:ec:b7:bb:e9:62:e7:85:13:a9:18:38:77:8f:32:14:81:ed:
01:23:e6:bd:a7:64:99:14:ea:21:82:7f:25:e1:cc:95:77:b9:
fd:f3:dd:da:9b:d3:5a:5d:35:7b:e0:01:58:5a:b1:66:9c:f7:
04:67:70:9a:2c:0d:b2:7f:a5:58:67:48:16:af:f3:b7:cb:80:
aa:5c:f9:b6:98:2c:1f:1d:30:2f:13:69:59:89:a5:e2:85:26:
67:a9:17:e7:55:9e:91:b4:81:15:7a:9e:e4:e2:75:db:f4:e5:
97:bd:ce:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:59:47 2025 by rpki-client