Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: oHQWFnP0Vx+NroyxpVBgAlBb9vd/ZJcQK00GnnlRVs4=
Subject key identifier: 71:38:0F:C9:10:A3:DC:E9:BB:1C:00:C9:01:73:A3:17:38:BC:3B:1E
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 0196B7EC99DC3E6A153CD0E954BF90F45C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 1531
Signing time: Sat 10 May 2025 02:00:58 +0000
Manifest this update: Sat 10 May 2025 02:00:58 +0000
Manifest next update: Sun 11 May 2025 02:00:58 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: t9kM6IgVtNM76xUP/PV8nU2UYAEAeV7puap8Mo4ieTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:ec:99:dc:3e:6a:15:3c:d0:e9:54:bf:90:f4:5c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: May 10 02:00:58 2025 GMT
Not After : May 11 02:00:58 2025 GMT
Subject: CN=71380fc910a3dce9bb1c00c90173a31738bc3b1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:4a:b1:c8:63:ff:b0:e1:f7:0f:7e:43:ce:
95:76:0d:9a:59:f9:f4:aa:76:74:98:18:6b:d0:5e:
2d:85:7d:8e:28:c1:be:01:7b:a2:f5:19:a5:26:8c:
0f:e4:69:6c:30:f7:76:b5:bc:5d:de:dd:ad:ff:f8:
e1:91:04:a6:a2:d3:41:9e:47:1e:db:84:e1:01:13:
05:9b:ba:d2:e4:a6:12:e6:2d:39:09:d4:0d:52:7b:
ed:c8:79:c2:5e:23:3f:fe:a3:33:8c:b8:7b:81:17:
21:ba:ab:76:d5:30:1b:82:1f:8c:8e:1d:ae:b4:61:
e5:3c:1f:cd:f1:01:a6:87:89:40:5a:28:b9:29:d3:
8e:d7:fb:4b:09:36:7e:ea:50:f0:ee:55:f0:89:dd:
8a:a5:e0:c8:55:b4:3e:e7:f6:eb:27:dd:5b:62:b8:
c9:d9:3e:57:3c:b3:cf:66:d2:80:ac:53:05:1c:17:
4c:1d:19:11:eb:d0:af:5c:1e:75:9a:5a:97:ba:01:
46:9c:1c:b2:e8:74:90:f7:c3:f0:d5:b8:67:d3:bc:
04:93:c5:ee:1e:77:b9:56:b3:f4:3b:c7:00:14:24:
8b:c6:36:59:d3:87:eb:71:74:a2:2e:a9:f0:18:6c:
c6:68:98:0e:cc:77:34:70:4a:b6:fd:bc:cb:77:57:
84:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:38:0F:C9:10:A3:DC:E9:BB:1C:00:C9:01:73:A3:17:38:BC:3B:1E
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:80:da:92:4b:6f:71:d9:dc:9a:38:56:0b:d1:af:c2:ad:2a:
7a:70:8c:ae:90:be:4e:a8:a3:83:a6:57:f5:90:41:13:c2:03:
1e:02:fa:12:e5:4e:5f:d6:a7:15:51:12:d1:5e:b2:10:3c:28:
e8:96:b4:27:e1:01:eb:01:58:7f:04:1e:1d:3a:dd:b1:b4:60:
47:70:a1:dd:9c:ef:ab:19:87:e1:95:1e:5f:29:8c:58:ed:86:
f6:b2:27:86:25:e6:4f:b7:79:95:d1:20:86:8c:d6:a3:92:6a:
76:37:e4:40:d8:66:ec:9e:4d:4c:a2:ac:9a:a4:23:2a:30:18:
10:8f:c4:b8:3f:9c:c3:db:1d:e8:5b:d2:87:ed:09:ce:e0:3a:
52:ac:8c:b5:05:e9:81:37:c2:07:72:92:c2:46:d4:5e:85:8b:
19:ce:cf:f4:19:31:48:56:ab:e1:13:50:4e:fd:76:74:cf:de:
15:23:b6:ed:c1:b2:33:5d:4d:03:39:d7:60:e0:36:fc:f8:7d:
2b:5e:72:41:00:12:56:95:9c:db:66:ec:12:77:c3:2e:cd:28:
9e:c7:d5:e8:2d:82:4a:f4:f7:ab:93:12:b1:00:61:39:a6:80:
58:d2:7b:42:a1:8c:10:70:22:9b:41:38:cb:40:3d:27:3c:68:
6f:e3:78:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 09:22:26 2025 by rpki-client