Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: 66csLWdtmh0qhW5Zx4n+AGWV+5WHDRR786PVBcQyIUk=
Subject key identifier: 81:52:5C:1D:E8:5A:2B:33:FB:7E:E4:65:AB:5F:85:B4:6D:57:89:D6
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 0196CB735B755DCFAB205050927DF32FF76A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 0496
Signing time: Tue 13 May 2025 21:00:56 +0000
Manifest this update: Tue 13 May 2025 21:00:56 +0000
Manifest next update: Wed 14 May 2025 21:00:56 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: bgy2iA3KN/JmOJbpqZBnVjBSQKWoeyol5RNhGbwgUbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:5b:75:5d:cf:ab:20:50:50:92:7d:f3:2f:f7:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: May 13 21:00:56 2025 GMT
Not After : May 14 21:00:56 2025 GMT
Subject: CN=81525c1de85a2b33fb7ee465ab5f85b46d5789d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:37:c0:a9:75:64:26:53:29:3b:a1:d9:27:
08:9f:b1:da:29:88:1f:35:bd:2b:0f:15:1b:0a:e0:
e4:1d:d8:be:dc:6b:84:24:f4:36:bd:97:96:35:49:
68:c8:15:99:ac:79:f0:92:04:59:e2:c8:55:f0:8e:
af:18:73:69:a9:3b:45:0e:d6:c6:1f:e2:01:1e:93:
21:43:cc:e1:49:66:8e:d1:f9:82:a8:c7:2e:eb:63:
8c:70:4e:ff:54:a6:6b:1f:3d:e8:a6:da:6c:35:d1:
0f:e1:6b:37:77:47:d9:40:63:7b:d3:ea:22:39:5c:
f2:76:49:54:2e:09:00:a3:6c:4c:c8:bc:74:b8:12:
dc:93:a1:dd:d8:c0:82:99:19:c0:81:d0:96:62:fd:
1d:1c:c2:66:c7:e3:47:ec:07:d1:20:79:19:00:43:
04:3a:b2:d3:0f:b9:25:9e:5f:bb:a8:5e:47:06:57:
6a:20:81:2a:9e:15:e5:f8:e5:f2:f1:39:2d:52:0f:
16:de:51:9d:d0:3a:d4:2a:ea:22:6c:d2:d8:c8:80:
c0:a2:96:88:95:bf:d5:32:32:7e:3c:91:66:c2:64:
71:56:90:93:ce:e5:71:95:55:f9:36:82:26:c8:ec:
2e:c0:bd:51:7e:b7:5e:49:a4:b7:13:62:e8:c4:f5:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:52:5C:1D:E8:5A:2B:33:FB:7E:E4:65:AB:5F:85:B4:6D:57:89:D6
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:32:a1:a8:b2:7e:f1:75:d1:1c:97:26:08:10:72:cb:14:fc:
8f:db:c2:bf:3e:f0:44:3e:87:8c:1b:ad:5d:67:f5:70:b4:5b:
b0:2e:54:86:7b:ca:28:4b:d3:45:f1:5b:f3:6a:73:95:19:fc:
ac:ba:39:c9:bb:7e:40:32:01:24:e6:ab:92:68:7f:2c:19:d4:
57:93:e6:f9:d1:b6:2f:17:fa:74:b5:a2:c8:19:f3:ad:a6:2c:
7a:12:d8:d0:4e:17:db:65:e1:fb:a2:3f:22:ec:95:94:b3:7d:
f5:a5:67:b1:e3:32:50:2a:58:62:46:b1:ff:65:b4:f5:d6:6c:
e5:2b:89:76:15:89:59:12:cc:e5:40:8e:c6:6d:be:59:9e:e5:
d4:dc:87:70:63:90:83:94:69:05:40:71:bc:82:3b:5d:81:19:
57:3d:d8:f4:32:5e:ee:62:aa:e4:c1:e0:21:53:78:aa:3e:f9:
2c:92:93:74:cd:9d:86:78:0b:79:ac:1c:bb:bf:10:fd:cf:63:
3a:f3:ce:f6:0f:85:aa:fb:9b:5b:ee:a3:df:66:d6:15:ab:7b:
e0:bf:37:f3:39:f0:54:91:bf:72:35:0c:dd:e8:84:06:52:9d:
8d:77:4d:f4:e5:51:5f:68:40:71:4f:f0:03:33:e8:03:b8:52:
31:3a:9f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 03:50:34 2025 by rpki-client