Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft (raw, json)
Hash identifier: txGwuav5vqO3mlgYm2fcNzW16QeQI2ELcz5Lqi0IgDQ=
Subject key identifier: 97:6A:CB:F0:52:B3:80:E7:36:F8:8F:51:58:20:8D:78:61:40:9F:09
Authority key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Certificate issuer: /CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Certificate serial: 0196BDB715A884D1C611A5B267C0DD44D457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
Manifest number: 0998
Signing time: Sun 11 May 2025 05:00:14 +0000
Manifest this update: Sun 11 May 2025 05:00:14 +0000
Manifest next update: Mon 12 May 2025 05:00:14 +0000
Files and hashes: 1: 4Dd_oz2TtpOXQBrGavmGYMPXNlw.roa (hash: lEaJsZdsULkNE5Gu41TR5VUrs6XkOuSkB/MqNMbSRqE=)
2: 9CKQGKCQI-bIMlSOn18EkSByP_c.roa (hash: fUEwlGorb/53MsJAC9arcQFk2OY9saq26gPtLezc70o=)
3: Ehx_bk8hfbPb2wCCkbIFutyAoiQ.roa (hash: +HKiRGiNwcMbHRNsEOcJQScZZXduQOT3b8IfA7DUH+8=)
4: KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl (hash: t8NH+jW9x54sKCl2GhIKcwLFkBB41c2txh06FKLbtu0=)
5: WlNY40vGoHsISV8cxe7v-uDL1z8.roa (hash: DSI5lhy3OTW1NGDCgjE4YBOi3i582drRHl7z2eh8GT4=)
6: azXA0zek1r4GjxGORUc5CbVhlro.roa (hash: dBG8mL0HT6A6TrmZTX65GYmNTUtlNHr3mHgXq8jXk/c=)
7: fawo1EoqRqBJwHjBpTPTmcGb0cM.roa (hash: F6clH7PVg2lpM3y/mX4Zj9CRymDOfHXzUQhjxqzwyxg=)
8: o9r3uR2f73He5KEKu4BwYPFzrZs.roa (hash: di2c5UqcUyXblOdBvGL8kM199QqPxFbroxHSs6c/vq8=)
9: sd0jlwypX7mTRSVDcmbA2KcPRVw.roa (hash: YbZCCfMPY850ehWHI89VOAxoC5oI9QnHcBkGCUColGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:b7:15:a8:84:d1:c6:11:a5:b2:67:c0:dd:44:d4:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Validity
Not Before: May 11 05:00:14 2025 GMT
Not After : May 12 05:00:14 2025 GMT
Subject: CN=976acbf052b380e736f88f5158208d7861409f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:67:b2:48:c7:2e:cd:af:92:06:e2:c3:9a:d8:
fb:58:17:a0:03:94:da:86:6e:fe:c5:5c:ca:dc:35:
f8:34:67:e3:97:15:ac:8a:4a:f8:8c:29:35:0e:46:
65:37:35:72:86:a5:36:30:4b:85:90:8d:4d:2e:b3:
11:7c:e0:a6:09:91:d3:b3:b4:63:ff:bf:9d:39:6e:
76:64:21:e0:f7:1a:9e:b5:1b:a1:35:4b:57:00:7a:
9d:21:12:b6:c8:14:a5:71:b1:8f:fd:ed:c3:19:11:
a4:89:cd:50:eb:25:5a:ca:fe:3f:a4:93:fd:44:1f:
5d:10:ef:a7:b1:5a:7b:f9:8a:b1:56:08:a5:f9:78:
dc:ce:f6:6b:29:fa:cd:eb:f9:cb:fa:fb:a1:fc:65:
78:35:32:a5:1d:93:46:22:05:38:42:7e:ab:f8:00:
21:52:0e:82:01:17:e4:ca:15:3b:f8:63:d4:c1:4d:
b4:5b:83:1c:f8:ec:82:cc:b4:99:cc:a1:c7:72:13:
a3:a2:e3:ad:ef:c5:9b:d7:65:1d:bb:50:74:f7:43:
bc:9a:61:44:00:5b:e1:1c:e8:f6:8a:eb:e3:c7:8c:
bb:9e:c9:72:37:9b:99:ea:6f:83:f7:43:d4:12:68:
f1:9d:b0:30:f7:39:0c:05:63:aa:c9:39:94:10:6e:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6A:CB:F0:52:B3:80:E7:36:F8:8F:51:58:20:8D:78:61:40:9F:09
X509v3 Authority Key Identifier:
keyid:28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:a4:15:4d:c7:3b:8d:a2:a6:ac:d5:6f:66:35:31:09:5a:1b:
fe:6b:96:07:c7:ab:b7:15:c9:02:de:60:f5:a8:81:1f:f4:ad:
27:d9:55:ae:cb:4e:83:9d:10:5d:9c:27:59:f0:08:8d:5f:d6:
fc:aa:7d:1d:fb:13:38:9e:e8:c2:42:7d:17:13:08:93:8b:42:
28:dc:c2:5c:e4:83:c7:a0:1c:e2:37:aa:a0:94:20:06:97:0e:
eb:87:46:97:bc:69:e4:56:5b:68:5b:98:2a:1d:14:8d:6f:41:
2c:7e:5a:06:cf:74:62:3f:5b:d7:93:e6:10:0a:20:82:72:c0:
c5:09:96:93:96:b1:c6:42:74:b8:b2:42:42:a3:dd:14:25:75:
82:c6:a1:cd:8f:9b:47:70:0c:b3:f3:8f:1f:73:d0:df:78:e9:
54:b2:68:06:fb:da:37:a3:08:1c:d6:a8:b7:07:57:c0:21:ba:
4d:56:b2:b4:c3:e1:40:79:ed:08:60:02:03:24:02:02:7d:b0:
d2:3d:50:4e:7d:72:cc:83:1d:a9:2d:28:c5:a9:15:5f:bb:21:
7c:18:76:c2:0f:b3:c7:6b:e0:d9:72:e0:9a:cf:f8:86:52:de:
9c:b1:16:b0:4d:6f:17:77:25:51:52:e3:2a:2f:a0:45:c6:6a:
9e:1e:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 07:46:39 2025 by rpki-client