Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
File: kR2gx6mUBcRrqthMudk-g0WZyOE.mft (raw, json)
Hash identifier: jgQTkkOXUsbs/9901KVvvK4CBCzbBG0J4RvLBY1Vn+0=
Subject key identifier: 88:45:92:C3:36:BF:49:C4:F9:46:EA:08:32:E5:E7:B9:6D:55:02:A0
Authority key identifier: 91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
Certificate issuer: /CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Certificate serial: 0196B0D80C3A8C8430F9A0A661B396DE71AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 17:01:10 +0000
Manifest this update: Thu 08 May 2025 17:01:10 +0000
Manifest next update: Fri 09 May 2025 17:01:10 +0000
Files and hashes: 1: EpBy5lEF1BDLVRWSQ7QWoN5zbUU.roa (hash: 1y3tSjFaZERbPwiKrhlP5/eJ5GlotVuhhvMAWtoaIrk=)
2: kR2gx6mUBcRrqthMudk-g0WZyOE.crl (hash: Pji8R3ycfQETa80ymRXAAM2iTWDEzkUzE7kzrl2RSCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d8:0c:3a:8c:84:30:f9:a0:a6:61:b3:96:de:71:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=911da0c7a99405c46baad84cb9d93e834599c8e1
Validity
Not Before: May 8 17:01:10 2025 GMT
Not After : May 9 17:01:10 2025 GMT
Subject: CN=884592c336bf49c4f946ea0832e5e7b96d5502a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:d9:35:f5:fc:8d:1b:f6:f7:97:8f:28:d2:
75:82:1e:7d:54:8d:cb:fc:60:4c:5a:cd:9f:a8:7d:
45:43:8e:d8:28:17:08:d7:ac:31:2b:aa:4b:f5:49:
1f:fc:f3:46:11:fc:b2:d0:7b:ab:c6:bd:f6:fc:a6:
9c:0a:a7:2b:1a:36:c3:1a:cf:2c:2d:32:ed:cd:e8:
f1:9f:1e:2d:90:0a:44:bf:e8:d8:27:04:38:1b:51:
ff:45:d4:13:e9:d1:ea:c4:09:11:2d:b3:d5:ca:b5:
bb:59:05:24:db:5f:9c:e5:67:6a:31:68:54:38:5d:
7b:c7:9f:c4:f1:bc:bb:06:ef:ed:7d:fa:78:43:35:
3c:50:46:64:ce:cb:53:02:00:f4:6d:76:e3:14:3e:
6c:a8:4a:bc:e1:de:1f:22:3b:20:86:02:f5:c2:38:
44:cc:4c:bd:9c:2b:40:be:dd:c4:c8:be:88:f3:1a:
6d:29:d8:2a:28:e0:d7:1e:06:c7:e7:67:29:66:ad:
42:0f:b3:75:62:67:4d:ae:95:b0:6b:f4:d0:cb:dc:
3c:f6:a9:8e:50:28:e8:6f:f6:1f:16:c0:90:29:70:
7b:f7:b3:07:73:9b:8d:61:21:a8:c7:48:c9:3d:e8:
17:e8:91:a3:93:8e:62:c3:d2:7a:17:e1:f4:93:10:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:92:C3:36:BF:49:C4:F9:46:EA:08:32:E5:E7:B9:6D:55:02:A0
X509v3 Authority Key Identifier:
keyid:91:1D:A0:C7:A9:94:05:C4:6B:AA:D8:4C:B9:D9:3E:83:45:99:C8:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kR2gx6mUBcRrqthMudk-g0WZyOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/2c7ac3-eedf-455b-9e94-472f02450ec3/1/kR2gx6mUBcRrqthMudk-g0WZyOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:60:bb:cc:bf:59:63:4d:15:23:9e:c7:a2:7f:a3:09:52:02:
41:70:5b:b4:6b:01:23:0a:72:51:2c:79:df:5f:10:0a:1a:be:
6d:5d:46:16:8b:d7:58:d5:14:60:79:d4:8e:e4:94:e1:3c:3a:
bf:c1:38:d0:f1:d5:6d:1e:67:39:40:4b:b9:0e:bf:1f:e7:72:
a7:08:eb:e2:bb:9e:bf:c6:dd:82:5d:16:14:a6:76:36:e9:cb:
f1:38:1f:72:30:f1:85:85:e0:51:8b:04:4b:67:4d:92:4d:d9:
9f:c3:b0:4b:0c:c3:48:9d:b7:52:09:87:4f:18:2d:dd:03:9d:
12:8e:53:e2:13:0b:ff:09:6c:83:95:d9:8f:1a:81:60:c9:c3:
9d:e5:37:70:e2:9b:66:fd:a4:14:75:1f:c3:16:34:c7:de:c1:
fd:59:8c:52:27:6a:63:77:f5:17:6d:8c:e3:02:db:e5:54:64:
1d:de:05:30:62:66:e9:39:9e:53:8f:bd:69:dd:38:21:06:cf:
15:53:25:92:7e:77:a7:3c:aa:79:2a:fa:6a:34:ee:2b:02:90:
21:f9:b8:4f:7a:90:09:f0:5e:8f:1a:df:fa:6d:1d:87:55:3c:
18:a5:97:80:cf:e1:bf:bf:14:ee:4c:d1:8c:ad:88:19:9b:a9:
57:19:84:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:22:42 2025 by rpki-client