Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
File: kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft (raw, json)
Hash identifier: A+CiAehD8E/jn+rejMTR7NVU+eRc+St2LaW3rl9jMzE=
Subject key identifier: 3E:F1:FA:E4:49:13:29:8A:AE:CF:AD:BD:62:D2:F5:72:3F:0B:D2:C1
Authority key identifier: 92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
Certificate issuer: /CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Certificate serial: 0196A8E6B88321272DF5272D763F8D8AB846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
Manifest number: 1139
Signing time: Wed 07 May 2025 04:00:14 +0000
Manifest this update: Wed 07 May 2025 04:00:14 +0000
Manifest next update: Thu 08 May 2025 04:00:14 +0000
Files and hashes: 1: 4deHnJPEkHi_Z6AsiwPaIpTKDAs.roa (hash: F92p4CywFS49zy5OOP8oYTx9eXX41zQ2otjtVHTvTfc=)
2: WvlZiKlby6mz_WZr2UVe0cYuFc8.roa (hash: Y5kWltccMkWlbHWE6g816b2afq8ovZonUhJQEFz4q4A=)
3: kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl (hash: r1nhEhxDdIFoPAJQV/hC750PuU44HSq7z5t8Fatghqc=)
4: uYHKtKuRAQeHOfD7lB4qDgo66SU.roa (hash: t+Ob5Y5NgLCxa3TxH9Z/GTAtTAwcsjfnwDTYcaden8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:e6:b8:83:21:27:2d:f5:27:2d:76:3f:8d:8a:b8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92fb8fa10dff3473e653dbf61c9a86432180a5c7
Validity
Not Before: May 7 04:00:14 2025 GMT
Not After : May 8 04:00:14 2025 GMT
Subject: CN=3ef1fae44913298aaecfadbd62d2f5723f0bd2c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:43:8e:3a:0f:10:18:d1:04:be:6f:f1:15:
cf:53:53:d2:eb:f8:89:47:7a:db:ae:c3:44:4e:df:
2c:72:44:10:bd:c4:6a:a7:50:7c:c6:1e:91:85:aa:
7f:b3:82:b2:6f:d8:b8:99:21:a7:c7:83:03:da:a0:
7f:df:85:09:d9:9f:d0:62:04:d8:d2:48:7a:15:54:
18:3b:0a:70:24:a7:f8:e8:db:5d:2b:93:0f:56:47:
2b:3d:7b:47:e5:56:5b:a1:21:76:bc:94:75:07:73:
c5:6a:e5:b6:6f:03:68:ee:e5:e2:4d:50:12:f9:51:
3a:6e:a9:04:d1:ff:57:3d:b5:cb:ce:85:57:db:eb:
ee:31:4a:41:b7:38:d6:94:66:07:9e:14:a9:e9:1b:
a3:59:8a:ff:66:65:74:df:e4:e4:5b:f4:2e:ca:3d:
a9:66:30:34:97:8c:25:9f:d9:b1:89:87:36:e8:ee:
77:5b:52:ee:30:cc:af:b9:a1:d8:03:08:6a:88:cc:
64:59:2e:c2:8b:34:d8:e0:70:ac:47:cf:c1:d5:79:
b7:1f:20:52:1b:43:79:e2:58:d4:ba:89:fb:03:a5:
ed:52:2d:e1:e9:92:96:0a:e7:02:67:30:b8:c7:54:
c2:66:00:6e:e7:c5:f1:73:de:19:85:7f:cd:2e:64:
55:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:F1:FA:E4:49:13:29:8A:AE:CF:AD:BD:62:D2:F5:72:3F:0B:D2:C1
X509v3 Authority Key Identifier:
keyid:92:FB:8F:A1:0D:FF:34:73:E6:53:DB:F6:1C:9A:86:43:21:80:A5:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvuPoQ3_NHPmU9v2HJqGQyGApcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/c64d50-fcdd-4a9f-9047-293f6122a19d/1/kvuPoQ3_NHPmU9v2HJqGQyGApcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:00:1e:fe:b5:f6:06:ba:95:66:c6:0d:2b:22:cb:cd:ee:b4:
76:7e:d3:62:b1:53:f7:20:e2:f2:52:b1:5e:8b:89:33:b5:78:
db:59:43:32:bb:a5:28:d6:8c:84:ca:7e:19:51:7b:43:70:93:
e7:91:00:0c:99:c5:aa:7b:e2:7d:bd:69:72:09:82:ff:27:4d:
fc:d9:8d:55:68:0b:2d:f0:61:bb:ed:45:c1:d1:d5:a9:6f:ac:
97:f1:41:c6:75:31:f0:b9:9d:d8:c4:5a:44:b1:66:b5:7d:53:
d6:e6:e5:03:32:82:e1:88:55:83:21:d1:15:a3:a1:eb:9e:92:
f7:42:6c:09:45:91:79:95:3c:7e:12:9f:3c:bf:87:0a:c5:e5:
c0:1a:89:7e:16:56:34:f4:89:e9:2c:8e:b0:39:8a:b4:d7:e1:
0a:af:03:56:e6:f8:74:9f:03:2b:0d:00:60:6e:4d:29:45:a0:
53:56:1e:19:8e:d6:f4:16:e3:54:0e:8e:53:f6:5e:07:b6:69:
ed:8a:86:97:29:8e:af:01:b1:0f:3a:2a:98:00:f5:45:4a:dc:
99:39:8b:d3:2d:c2:0d:2f:4a:a2:1d:7f:49:2e:9e:b2:8d:32:
4c:5f:98:8b:d6:c2:06:2c:9f:f9:7a:96:dc:cf:48:ca:af:45:
e1:fb:5e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 07:36:39 2025 by rpki-client