Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
File: kiUzU7pknevuknmYugLIYUOZ-WE.mft (raw, json)
Hash identifier: 5TG8pwB9/NMCvINaaq8dD07KOBhx+71mpvk5I5R7vaM=
Subject key identifier: B1:B5:6C:2C:E9:4C:BD:D7:0A:C1:77:6E:5F:0D:CB:BC:C3:2A:10:91
Authority key identifier: 92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
Certificate issuer: /CN=92253353ba649debee927998ba02c8614399f961
Certificate serial: 0196BE93603AC61B5B8ADD2A001A3A79685A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
Manifest number: 0491
Signing time: Sun 11 May 2025 09:00:51 +0000
Manifest this update: Sun 11 May 2025 09:00:51 +0000
Manifest next update: Mon 12 May 2025 09:00:51 +0000
Files and hashes: 1: IRskINg41VtTIRpf8KUQyejfOZ4.roa (hash: gqvze0bjn5WFe15kL+WtLc59rxWgOyihFu31fqipvOk=)
2: kiUzU7pknevuknmYugLIYUOZ-WE.crl (hash: V0NY4BdbMuJNXJMAHmYA4IgJPv7/dsyYCeWsge6/TpU=)
3: l8L6M193NRwOqknRUwjUMCL_3js.roa (hash: ZJE5lHxeiMDM24dTZ0outFe8poOxQlVnbOZwmTZc8Kw=)
4: wFVtObJLn_ZTGOz4m3KMnRCYDtU.roa (hash: pKpy02tSACF4gXXOnC0pf4UqBhrOt1/BvJq4Baa5gaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:93:60:3a:c6:1b:5b:8a:dd:2a:00:1a:3a:79:68:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92253353ba649debee927998ba02c8614399f961
Validity
Not Before: May 11 09:00:51 2025 GMT
Not After : May 12 09:00:51 2025 GMT
Subject: CN=b1b56c2ce94cbdd70ac1776e5f0dcbbcc32a1091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:af:06:4e:9b:96:a7:21:ef:c4:fa:9d:a4:da:
5e:e3:a1:97:85:4d:91:c5:9d:75:7c:98:37:53:50:
76:af:00:5c:09:af:14:2f:5a:44:10:93:fc:12:d1:
cd:63:9a:5c:3b:a1:54:84:75:57:9a:32:f3:b2:68:
a0:8b:85:2a:0e:ed:83:19:8f:ea:23:49:e3:8e:36:
20:78:ae:c5:48:93:60:2f:be:69:14:c7:96:dc:65:
e5:74:3f:04:06:4c:4b:cf:b6:81:77:cb:ca:31:c8:
fe:4b:a6:a6:31:7e:7e:22:0e:3e:49:51:7f:d4:51:
1d:25:2d:26:e9:19:f0:4c:46:57:cf:9c:42:b4:81:
6d:a4:7b:71:a0:74:29:d6:99:b6:24:2b:72:72:fb:
18:37:67:49:ca:e4:31:8e:e1:94:2e:9e:c6:eb:44:
57:db:43:24:09:ad:0a:2e:1b:b2:c5:6e:bc:2c:ee:
14:9b:10:52:7a:01:74:2b:f8:79:67:fe:bb:7f:16:
0b:32:96:b8:da:b0:98:8e:69:58:35:74:d0:e6:6d:
23:36:e6:b3:61:03:b0:92:59:9d:73:28:8b:99:4d:
5c:2f:78:bd:6a:df:5c:8f:3c:37:45:a4:40:ff:85:
a2:d5:14:08:fc:ac:86:48:ad:44:f2:49:58:ec:c5:
3d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B5:6C:2C:E9:4C:BD:D7:0A:C1:77:6E:5F:0D:CB:BC:C3:2A:10:91
X509v3 Authority Key Identifier:
keyid:92:25:33:53:BA:64:9D:EB:EE:92:79:98:BA:02:C8:61:43:99:F9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiUzU7pknevuknmYugLIYUOZ-WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/453ae3-f227-4e0d-bd06-6997b2579a34/1/kiUzU7pknevuknmYugLIYUOZ-WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:79:3e:27:a4:ad:a7:a9:58:a9:d9:43:a7:4a:c2:ba:c2:08:
59:e0:c6:6b:47:bd:12:ee:6a:a3:d1:00:04:4c:c6:5d:31:b5:
0f:92:98:a7:e7:09:c0:b9:0c:6f:ec:13:54:d6:3f:d9:67:cc:
f0:08:ab:0b:89:dd:09:6d:6b:d5:01:5e:2c:c5:5d:c7:0e:c2:
3d:5c:ae:4e:f8:a8:f7:c6:96:40:7a:cb:46:11:02:99:5b:d6:
22:9f:ff:3e:dc:71:db:7c:69:1c:ba:30:90:db:26:f9:69:b4:
0a:b7:38:32:4e:64:fa:12:84:a2:de:94:4b:bb:e2:ea:f9:ec:
6d:61:27:7a:e9:cc:1d:9c:f5:0c:1d:24:87:16:ba:4e:ce:fc:
60:88:00:8f:27:df:1c:f9:d4:52:13:cf:21:a0:d2:5c:6a:aa:
4b:8e:74:a8:ff:95:6e:16:50:49:e2:e2:6e:86:62:21:04:6c:
c6:e1:ca:73:0f:54:6b:8c:eb:07:18:84:65:ce:f4:4f:47:8f:
1b:48:2b:69:35:e7:ac:15:5c:e7:fb:71:32:7c:b3:3c:b0:01:
88:b2:f3:55:cd:6c:21:68:2d:eb:91:89:a5:8f:c8:29:1f:59:
6f:f9:f6:71:b0:22:29:94:a8:c2:08:03:7a:c8:f4:cf:b8:8b:
f6:99:ca:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:52:17 2025 by rpki-client