Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: lUuRd5Lh+snzfXKSuJ6blqDQp6im5zdrcBPAy0o0ZhA=
Subject key identifier: CA:87:BB:BE:3E:CE:49:3D:BC:FB:4C:D9:EB:76:01:EE:5A:8A:70:1C
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 0196C15D62F3FCA7E026E4B9442BE057AD19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 11A3
Signing time: Sun 11 May 2025 22:00:44 +0000
Manifest this update: Sun 11 May 2025 22:00:44 +0000
Manifest next update: Mon 12 May 2025 22:00:44 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: IaK3TOH+1Sr0Jd7NCzxXo9VL1e/RIFHWwrMfibRW+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:5d:62:f3:fc:a7:e0:26:e4:b9:44:2b:e0:57:ad:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: May 11 22:00:44 2025 GMT
Not After : May 12 22:00:44 2025 GMT
Subject: CN=ca87bbbe3ece493dbcfb4cd9eb7601ee5a8a701c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:95:48:13:b8:96:ab:14:b5:73:11:55:8c:
e9:78:b7:73:46:c6:4d:a3:a4:b4:28:7a:ab:ca:c5:
7b:42:8d:8b:9a:99:81:2a:8b:cd:ab:8e:6b:f7:48:
28:aa:53:bb:af:fc:dd:0d:db:43:a6:3b:ac:14:6f:
21:38:75:ba:0d:c3:2d:b4:91:07:af:f9:2f:0a:ae:
54:69:b1:ab:68:5c:8f:f1:ba:be:f6:ef:bf:4e:35:
2c:4e:1b:b5:10:f3:82:34:2b:09:b7:38:17:d6:f9:
ef:25:57:b3:5b:ea:a2:bb:91:6a:0f:a5:a0:d6:48:
8e:44:0a:66:db:fb:66:f2:11:69:49:1a:c8:3d:f5:
eb:db:46:62:da:91:c6:97:4c:c9:ed:b4:40:8f:6f:
a2:fd:db:ae:81:5f:0e:e5:2b:d4:24:25:b9:b8:a4:
9f:32:c7:1f:90:f6:ec:19:6c:c9:5e:93:c4:8f:8a:
78:d6:cc:7a:df:e6:68:05:fc:b0:70:98:85:bd:61:
29:f4:5a:fb:60:d5:0b:34:f9:d1:e0:90:cc:30:91:
1f:b5:29:7d:82:c7:ac:d7:2b:19:5a:4e:e1:cf:ff:
d8:41:63:d5:05:8f:17:02:c8:42:a9:82:0a:c7:8f:
f3:61:5c:1d:14:18:f2:69:b2:1d:f6:62:b3:69:bb:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:87:BB:BE:3E:CE:49:3D:BC:FB:4C:D9:EB:76:01:EE:5A:8A:70:1C
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:59:4b:f9:86:5a:50:ff:b1:94:a8:8d:1e:94:48:ea:a0:37:
ae:e0:6f:7c:69:8d:19:74:e6:03:bb:b7:6d:b8:d1:b8:e7:c4:
dc:a1:8f:ab:c3:84:ba:b9:d4:b6:08:cd:aa:f3:9c:6e:6f:4e:
eb:fc:12:23:54:54:43:e4:d6:b9:a9:58:c3:e6:be:f8:46:6f:
5c:ef:34:fb:49:81:43:75:5f:13:38:65:87:45:a4:95:1d:17:
ad:2f:62:4f:97:30:53:b4:fa:78:0d:cb:f8:99:b1:29:7c:99:
47:4b:12:c0:fb:25:aa:9e:25:be:3a:49:fe:31:5e:7a:7e:be:
91:09:9f:f5:7e:bb:ea:1a:93:e7:c1:ea:60:58:c3:31:3c:5a:
d8:1b:81:37:6d:c5:9f:ad:b3:ac:6b:54:21:fe:72:61:35:00:
d2:42:1b:4b:51:8e:51:7e:68:d0:93:1f:38:8d:e3:3d:90:d9:
fd:0b:c0:8d:fa:1f:f0:64:fe:7e:16:20:40:73:9d:84:a9:e7:
19:c1:1f:38:3b:a3:8b:83:ad:36:96:a6:d4:8a:c6:d2:e9:9a:
3f:06:71:22:67:9c:fb:93:c6:18:99:9b:a9:26:9b:04:26:00:
2d:2d:47:db:f0:15:0e:1c:4e:73:b7:2f:49:df:78:3b:9f:9d:
5e:39:15:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:19:49 2025 by rpki-client