Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
File: kGlKYihmrhWO0ofSUz1AuqvqbX0.mft (raw, json)
Hash identifier: p+0b2onQdg14vS0tomNrUjtCqK2vxdE8lwiLej1jOpI=
Subject key identifier: D7:CC:5F:B0:8C:C3:3C:DA:92:63:29:46:AA:71:A0:A3:32:EB:67:5D
Authority key identifier: 90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
Certificate issuer: /CN=90694a622866ae158ed287d2533d40baabea6d7d
Certificate serial: 0196BA123863AE529598BC7F65060193B9DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
Manifest number: 038D
Signing time: Sat 10 May 2025 12:01:18 +0000
Manifest this update: Sat 10 May 2025 12:01:18 +0000
Manifest next update: Sun 11 May 2025 12:01:18 +0000
Files and hashes: 1: 9VYK0oHjjTC_b68oAyoNi7RTStA.roa (hash: 95NE4Wq8cotxnefZwzo13t7L9p4u4ZGJ0NIa1wNiJCg=)
2: bq3CHdF3ToMivmK2PU155LcLlRo.roa (hash: E2q6lH9inJ5ZH1jaNhC41RHD+yk7srEkGUdyytaHjj0=)
3: kGlKYihmrhWO0ofSUz1AuqvqbX0.crl (hash: SRgRBoq+8Lmsw+bAypuOlk9M3DFNvx9+ONZNjGXro9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:12:38:63:ae:52:95:98:bc:7f:65:06:01:93:b9:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90694a622866ae158ed287d2533d40baabea6d7d
Validity
Not Before: May 10 12:01:18 2025 GMT
Not After : May 11 12:01:18 2025 GMT
Subject: CN=d7cc5fb08cc33cda92632946aa71a0a332eb675d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0a:09:f4:99:3a:26:cc:a3:84:f7:86:3a:27:
13:d2:c1:b5:a6:cc:12:1b:e5:1f:5e:f2:85:26:0c:
16:6b:10:db:44:ff:06:2a:a6:bc:b7:d7:7a:1b:c4:
4f:9c:ec:d5:bd:7c:2f:c8:06:cb:4b:5e:e6:d0:0d:
1d:54:94:dd:3c:eb:ac:d8:8d:1b:2f:72:6d:8c:f7:
37:2d:f7:41:4a:e7:53:b7:45:5d:98:d9:da:a4:94:
0d:41:f2:95:ed:9b:9b:17:db:52:3a:ef:63:ac:50:
4a:41:aa:b8:b8:f7:77:84:01:d5:c4:44:ad:6a:14:
16:be:c7:41:7d:20:08:d3:96:3a:96:5a:d3:21:67:
34:f6:e4:f5:d9:87:9e:53:de:1a:be:5d:32:37:64:
f5:5d:b0:dc:e8:61:b8:c6:6a:7c:f8:ba:f2:18:30:
86:77:bb:6d:4b:47:21:87:c7:42:86:af:f7:ee:50:
d4:ac:38:46:2d:02:14:d4:d9:36:ab:16:6c:92:89:
98:50:1a:a6:17:54:03:63:d9:53:86:e7:67:03:f9:
58:1c:57:4f:63:1c:01:5b:be:37:92:bf:6c:02:9a:
0f:98:b6:57:ee:4f:be:56:2f:87:26:fe:28:63:4e:
79:30:38:c8:36:c1:d5:91:85:5d:11:b2:fe:ea:b0:
86:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CC:5F:B0:8C:C3:3C:DA:92:63:29:46:AA:71:A0:A3:32:EB:67:5D
X509v3 Authority Key Identifier:
keyid:90:69:4A:62:28:66:AE:15:8E:D2:87:D2:53:3D:40:BA:AB:EA:6D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGlKYihmrhWO0ofSUz1AuqvqbX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b9e2f7-21dc-42c0-94b0-13c0a633e9f4/1/kGlKYihmrhWO0ofSUz1AuqvqbX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:46:04:2c:70:89:d5:30:33:ed:a3:38:15:e2:a6:32:26:33:
c6:08:c7:e8:a9:8c:94:3c:e9:6c:99:f0:96:5a:a9:39:e2:ee:
18:25:53:35:35:4d:b6:ed:99:2d:a8:bd:ce:71:84:95:57:c4:
f0:b2:5a:ba:f9:89:94:a0:a6:25:44:bd:11:c4:52:77:e7:d9:
72:86:4d:3e:b5:f1:67:69:b9:27:38:4d:92:d9:01:75:93:4d:
b9:db:41:0b:c1:9e:ec:4d:17:9a:73:83:bf:a8:0f:2e:1f:0e:
bd:33:4c:ad:e2:cf:d8:17:c1:75:e4:f2:b7:dc:fe:98:0a:bb:
98:69:0c:ee:72:f6:91:4e:4d:4e:47:d5:f8:e3:ad:81:e7:09:
65:92:b8:6b:f2:42:9b:b0:f8:8b:9a:34:ac:af:c5:da:b4:67:
17:5d:71:87:aa:19:be:de:4d:5d:b3:d2:35:4c:0e:c1:3e:5e:
04:3b:6c:1f:b9:89:4e:1c:cf:cd:72:83:c1:f1:33:7d:5e:f4:
e1:3c:77:22:ce:4b:a1:80:cd:85:6a:ef:c5:31:c7:97:de:32:
22:8b:d9:d9:49:5f:ff:d3:7a:5a:f1:d2:00:74:01:a3:4b:ec:
a3:b2:58:ac:f5:1f:58:34:3f:be:89:41:3c:36:ac:73:70:ec:
e4:47:3a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:36:44 2025 by rpki-client