Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
File: kGDG8B34XUoDPxJWU-Exe29Chk4.mft (raw, json)
Hash identifier: /TN+hOVTIBiq73AnwtACkszqd5otLwzOr/2aZDs5sRc=
Subject key identifier: 25:BC:91:06:27:9A:CC:ED:0F:CF:62:D6:7C:75:93:74:EF:CB:60:4C
Authority key identifier: 90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
Certificate issuer: /CN=9060c6f01df85d4a033f125653e1317b6f42864e
Certificate serial: 01969F07E05154038E0C8A3D3AFD1A4A6A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
Manifest number: 0F23
Signing time: Mon 05 May 2025 06:00:15 +0000
Manifest this update: Mon 05 May 2025 06:00:15 +0000
Manifest next update: Tue 06 May 2025 06:00:15 +0000
Files and hashes: 1: 1-p8SrWJ5THOyKbL_R9fZqVDF5Lg.roa (hash: Dpj5AMuFNg0086YuEbRvx4oDSlmmrMJ7GujnIQgUfaA=)
2: kGDG8B34XUoDPxJWU-Exe29Chk4.crl (hash: seLLF8p8TTi1JzIZTrhfmn7T+/hgxTpQEthm0N282js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:07:e0:51:54:03:8e:0c:8a:3d:3a:fd:1a:4a:6a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9060c6f01df85d4a033f125653e1317b6f42864e
Validity
Not Before: May 5 06:00:15 2025 GMT
Not After : May 6 06:00:15 2025 GMT
Subject: CN=25bc9106279acced0fcf62d67c759374efcb604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:70:48:63:1e:8e:8d:fd:4d:a5:21:a2:97:39:
af:ec:56:ee:6e:8c:7a:d1:e1:f5:5b:af:f6:b7:c0:
ed:c5:c6:41:a6:b3:81:7e:56:ca:ae:a8:f3:52:2f:
44:da:73:e6:35:b0:01:21:e1:35:17:40:04:98:52:
92:48:ae:d4:54:93:85:33:ef:d1:65:01:e1:01:3c:
42:01:06:3e:f7:d9:ce:c7:49:6f:3d:8d:89:67:b8:
a0:e8:f4:83:9f:af:89:10:2d:94:39:cb:50:e6:d3:
93:4d:59:1e:2d:b1:46:56:8e:32:6b:22:15:c6:bd:
b0:e6:99:57:44:6b:19:0a:9c:29:06:28:1e:f1:25:
cb:bd:b6:e8:95:cf:14:b4:ff:2e:d9:b8:b6:eb:55:
2b:81:23:d4:2e:78:dc:f0:29:5c:87:07:33:af:b7:
aa:44:09:4c:a8:a6:b3:5c:a5:ee:3f:f8:b3:4a:80:
64:2a:8f:d3:20:0d:7e:32:26:0e:25:13:b0:64:f6:
6c:d0:23:75:29:63:cd:75:68:57:a2:53:ba:34:07:
61:a6:b2:ee:1e:fd:cf:7e:ba:b3:9d:1e:57:21:71:
20:5c:ea:38:67:0e:a1:9c:b1:c0:e3:07:e1:db:d8:
6e:f3:51:55:89:97:3c:f6:d1:1e:7d:3f:95:1c:3a:
20:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:BC:91:06:27:9A:CC:ED:0F:CF:62:D6:7C:75:93:74:EF:CB:60:4C
X509v3 Authority Key Identifier:
keyid:90:60:C6:F0:1D:F8:5D:4A:03:3F:12:56:53:E1:31:7B:6F:42:86:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGDG8B34XUoDPxJWU-Exe29Chk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/67d07c-a561-457f-a044-ce0b8a51a451/1/kGDG8B34XUoDPxJWU-Exe29Chk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e1:c4:e8:6f:e1:6a:06:b5:20:dc:37:71:1e:00:c3:35:e8:
e3:97:8a:fe:c1:07:ff:8c:8e:59:00:63:df:4a:0c:82:41:fe:
e8:80:a0:03:6b:22:62:93:3e:50:b6:e1:28:a3:0a:ea:d0:af:
65:93:ea:3c:6e:0d:61:9f:75:cf:6d:fe:c6:3e:b4:cc:36:db:
a0:bd:25:ad:81:f3:ee:97:fb:94:6a:e5:90:87:1d:96:66:2a:
b5:ae:3e:ab:fe:58:ab:26:72:51:54:44:97:bc:44:71:ff:fc:
48:8a:1c:ca:ce:df:2a:f5:ef:d1:a7:e7:0d:4c:38:9d:2d:5a:
61:42:ce:6f:4e:e5:1b:cf:cf:2f:b3:94:f5:91:3e:b2:49:e3:
3c:d2:9c:c6:2d:e2:97:bc:24:a6:9d:84:65:1a:09:0b:d2:f5:
00:08:31:5a:31:aa:85:47:74:5f:d2:41:07:9c:0b:41:f3:73:
18:a4:18:c5:08:3f:7c:be:e2:9d:90:4a:bd:47:fd:85:e5:75:
23:e1:a3:de:5d:8d:de:31:92:ab:8b:6a:1d:63:23:ce:4e:63:
ee:31:af:9b:83:71:d2:7f:56:d9:7b:3e:2d:87:2e:4c:f5:c0:
61:0f:8d:56:ea:cb:a5:42:64:16:79:c1:91:85:e5:09:eb:5f:
1b:73:84:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 13:28:29 2025 by rpki-client