Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: QnQGEUVhRZQ5Z3qWeF6Hu2askma2YbHbuOJ+xo9oZQ0=
Subject key identifier: 0E:A9:9C:D8:C0:D1:46:6A:AC:B7:68:33:FC:FD:C4:F7:B2:D7:26:0D
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 0196A1D233A90559FB21237AA36F3ACD693D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0E34
Signing time: Mon 05 May 2025 19:00:29 +0000
Manifest this update: Mon 05 May 2025 19:00:29 +0000
Manifest next update: Tue 06 May 2025 19:00:29 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: 50QuY1vt4o3zhrvdQpvkRHXh8PGyxaKX0Kjvk5dU+Xs=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:33:a9:05:59:fb:21:23:7a:a3:6f:3a:cd:69:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: May 5 19:00:29 2025 GMT
Not After : May 6 19:00:29 2025 GMT
Subject: CN=0ea99cd8c0d1466aacb76833fcfdc4f7b2d7260d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:62:52:17:47:97:7e:a6:8b:81:85:4f:99:a0:
ca:14:95:a0:0f:4f:47:8f:ad:70:93:02:8c:7e:45:
70:0f:e9:c6:f7:01:ec:69:ca:15:42:af:78:5c:13:
f6:5a:e5:00:97:3a:bb:79:a4:47:02:2e:5d:ab:aa:
40:13:55:e9:7d:57:e8:6a:5c:a1:28:b7:48:08:91:
0e:fa:79:17:39:ce:cb:b7:cb:1b:95:63:43:ce:5e:
1c:13:51:87:f9:b7:81:73:b8:a6:f9:31:98:15:98:
bf:3c:e4:27:40:79:b0:7d:51:08:2b:87:02:d2:fa:
85:ee:31:5b:e3:41:a1:f7:61:50:11:b0:89:0a:ac:
e6:be:d0:b8:9a:9d:15:a3:1a:a1:d3:c3:25:fd:1c:
9a:4f:3f:db:cb:b5:50:51:0a:af:7c:a7:b1:34:4a:
aa:67:2b:60:a3:cf:71:20:6b:16:f6:46:3e:33:6b:
47:d0:fd:36:3e:01:1f:f2:e6:01:b4:6f:73:39:60:
da:44:6c:b6:99:ba:cd:a7:36:09:bd:f9:46:82:80:
c3:6a:36:05:01:17:08:a5:30:e7:37:60:34:2c:4b:
1f:9f:fc:ae:3e:33:94:84:cc:82:76:6d:a1:8b:71:
bb:17:19:49:59:eb:e8:ea:69:20:27:f4:b0:41:da:
9f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:9C:D8:C0:D1:46:6A:AC:B7:68:33:FC:FD:C4:F7:B2:D7:26:0D
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:00:31:ac:48:b0:5d:97:b9:de:59:28:27:fd:7b:e3:99:bb:
fc:fc:1c:0f:f4:e5:73:0f:81:2b:af:f4:eb:79:ab:85:0a:63:
19:e9:52:66:a8:de:ba:e2:ef:43:a8:a9:cd:9b:79:71:d1:2d:
0b:dc:89:86:c6:bb:fc:05:b5:ff:e2:15:d9:f2:9c:0f:ca:f6:
bc:ca:21:8b:e4:aa:04:6b:92:13:9a:c4:11:bc:10:81:de:ab:
8c:6e:ce:1e:e0:ac:d3:d2:73:ad:1d:49:4d:66:c2:24:1e:5e:
eb:e1:1b:86:cf:88:f3:19:b9:b2:69:82:e9:09:02:9d:20:2b:
15:28:0e:d3:b2:77:ae:3f:43:70:cd:7d:40:cc:73:2c:73:1b:
4f:bb:0d:ea:7f:43:15:fa:54:58:0b:2e:a0:02:60:99:93:44:
e8:51:4b:25:35:c3:c2:e9:9d:84:36:85:da:06:a6:7e:5c:e7:
d3:62:64:c3:90:17:11:35:34:89:f3:11:6e:45:a0:05:30:f9:
34:dc:1d:ac:af:af:95:ea:78:48:ba:41:9a:d1:c1:15:41:b2:
f0:5d:26:89:f5:93:d1:66:ca:84:d0:df:5d:18:8a:88:d2:c7:
eb:69:2d:6f:e8:9b:5a:83:f6:61:bf:35:81:87:be:78:42:2d:
25:35:a3:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:35:03 2025 by rpki-client