Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
File: kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft (raw, json)
Hash identifier: lCeqOUQUgV1KG4MPkpSJiCNGSzvNJ/BabrT03pFBEdI=
Subject key identifier: AB:35:A1:23:EF:8B:53:C3:5A:1E:F4:6A:90:A0:F6:52:30:7E:6C:66
Authority key identifier: 90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
Certificate issuer: /CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Certificate serial: 0196A389DCE97CC82D24229F016591535EF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
Manifest number: 152B
Signing time: Tue 06 May 2025 03:00:43 +0000
Manifest this update: Tue 06 May 2025 03:00:43 +0000
Manifest next update: Wed 07 May 2025 03:00:43 +0000
Files and hashes: 1: SuMbqKGSv1qKom1gMOOpsF5R60A.roa (hash: HQDAgM/9d4KyNdepm39greMFmuo/Jazn0GZwtBbpXbw=)
2: _Rwv4lbUJs8Qf1QGuOxJ2FBF-c4.roa (hash: 3ZyAz71Zk7+/HMhaF+5MnrlGpcuPtXopbpfn+/PpDpY=)
3: kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl (hash: gynjCqcYyquz4LNNVDPCBAH3O6XEOZVJuZp0IUILr7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:dc:e9:7c:c8:2d:24:22:9f:01:65:91:53:5e:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=903ec4c502a42c5bbfdb70ea9f440ca1500acc50
Validity
Not Before: May 6 03:00:43 2025 GMT
Not After : May 7 03:00:43 2025 GMT
Subject: CN=ab35a123ef8b53c35a1ef46a90a0f652307e6c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:12:be:86:c0:4d:7e:9b:72:e0:06:0b:58:8f:
dc:90:3d:d4:8f:ef:8b:75:b0:ec:ce:f3:a3:27:09:
ed:70:54:fa:21:0a:97:54:c9:70:a9:19:52:bd:84:
9c:74:10:e3:77:7f:ab:1b:ea:10:bc:c3:84:64:ca:
cb:4d:17:4e:00:a3:2c:d8:69:0d:d7:14:16:0c:6b:
8d:74:ca:74:2e:bd:37:2f:bc:d5:29:7c:3c:55:aa:
2a:ae:f2:30:38:ad:79:d3:cc:4c:40:ca:4e:7e:55:
58:c0:0e:30:80:d4:49:be:d9:41:96:1d:03:6e:b2:
0e:ea:1a:bb:b4:b2:0c:f5:ec:82:7c:d2:27:6c:3c:
f1:0e:c0:d8:5d:6a:b6:0b:ee:22:0f:40:e1:0b:98:
3a:75:52:75:3e:61:b3:c7:d0:a4:1e:21:4b:41:36:
bc:dc:54:6b:79:2d:d0:94:93:23:a0:15:b4:f5:83:
88:1c:5c:59:da:ef:2e:4b:a1:c1:a1:db:01:ee:bf:
a4:e8:4a:f6:b9:d6:fe:40:a0:ee:dd:32:21:6b:f5:
cc:c0:0a:e7:cc:e0:a6:c5:38:63:c2:3b:be:c3:27:
81:2c:25:2b:2c:10:97:17:8a:9c:e1:bb:9d:35:67:
fe:0a:56:a3:77:56:7e:66:a3:ec:aa:c4:da:f9:9c:
f8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:35:A1:23:EF:8B:53:C3:5A:1E:F4:6A:90:A0:F6:52:30:7E:6C:66
X509v3 Authority Key Identifier:
keyid:90:3E:C4:C5:02:A4:2C:5B:BF:DB:70:EA:9F:44:0C:A1:50:0A:CC:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kD7ExQKkLFu_23Dqn0QMoVAKzFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/40c548-5cc6-47c3-9e8f-bddb29f85fb8/1/kD7ExQKkLFu_23Dqn0QMoVAKzFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:18:d0:a5:34:0d:ff:87:fc:7a:a3:26:39:17:cd:f6:29:be:
fc:07:7a:a8:7d:ee:67:13:24:b8:fc:b7:04:ed:d6:21:48:73:
96:17:05:da:35:00:bb:66:d7:64:83:b1:b9:40:07:bf:37:8d:
63:20:55:18:99:fb:3a:ab:26:e5:aa:d5:87:d9:bb:47:ef:26:
4a:ea:d6:72:c7:27:94:19:60:11:60:1f:6d:ea:85:c3:8a:7c:
8e:e8:1f:48:1c:5e:4c:7a:c1:f4:f5:07:a3:f7:42:a2:07:f7:
d7:a1:45:c1:aa:b7:6d:91:7c:7a:63:12:96:79:09:5a:42:a0:
19:f7:f9:24:7d:8b:2b:28:ca:e5:99:93:85:3a:6b:94:78:3e:
9d:fb:b2:8f:fb:f2:7b:d9:79:24:17:f4:00:ef:b4:1c:36:13:
63:0e:c0:bb:ae:61:1c:f1:84:a0:c7:24:d8:9f:75:b1:45:46:
4f:ab:30:97:af:90:02:e2:5a:1d:fa:4d:1f:25:3e:ba:be:a4:
34:83:59:05:9c:29:45:b7:ae:58:b3:62:a5:e5:14:a1:e8:8e:
a6:ee:c7:10:7a:5c:83:ae:e8:57:a3:e7:13:3a:02:74:3b:0b:
a1:40:51:8a:fe:a5:0a:3e:7a:c0:ac:d1:ff:e4:ab:62:2c:37:
5b:39:8f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:36:53 2025 by rpki-client