Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
File: kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft (raw, json)
Hash identifier: spbpPb0i21m3zbGB1LQnvFVRTs7uk9r3xRW8GYvujVo=
Subject key identifier: C2:2E:36:54:78:42:D1:E3:36:A8:20:76:7A:FD:DE:10:0E:BA:2B:FA
Authority key identifier: 91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
Certificate issuer: /CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Certificate serial: 0196B1456D8910BA7F1F3C2339DA85535E27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
Manifest number: 07E3
Signing time: Thu 08 May 2025 19:00:39 +0000
Manifest this update: Thu 08 May 2025 19:00:39 +0000
Manifest next update: Fri 09 May 2025 19:00:39 +0000
Files and hashes: 1: PREVDyEb408mqa9BxzP0AsRzJeg.roa (hash: aYqJv67l6Fq1t+h1omQ5wjXrKiL4xcndOuCQgkoKKGY=)
2: kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl (hash: 756qbOGQU9Go1NTrEnJkYr8JPDFn+PqYjizl/Uqz158=)
3: p4jWyPdIBFSOhKsOHJbFsDe7R3Y.roa (hash: jnU5hIXXGhayItcaB6AV8Aoaha2Knjux2sAEHQkirvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b1:45:6d:89:10:ba:7f:1f:3c:23:39:da:85:53:5e:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9135be8ef0dce9d1e67071ab7cb07cf50d53f617
Validity
Not Before: May 8 19:00:39 2025 GMT
Not After : May 9 19:00:39 2025 GMT
Subject: CN=c22e36547842d1e336a820767afdde100eba2bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:2b:64:15:78:71:47:37:11:c8:79:dd:6a:19:
9f:a2:b6:e5:e9:11:68:1c:f2:fd:d8:1e:bb:12:53:
57:60:b8:b7:3d:18:7d:61:43:77:27:2a:83:d2:b6:
09:11:fc:8c:13:02:8d:ee:7c:55:6f:6b:3d:67:12:
3d:17:5d:fe:02:af:ae:28:72:2f:e9:d4:f4:9e:e3:
c9:1d:61:1b:59:b2:b1:64:60:8d:a5:94:fe:1f:71:
e2:19:5b:b4:02:62:24:5d:ef:ef:33:2b:9c:7a:4b:
93:8e:6a:17:0a:a0:2f:09:62:2f:21:e4:e1:52:8e:
d1:3f:f9:56:52:ae:10:fd:77:8f:1e:9a:d0:96:ef:
29:22:1c:4f:73:39:45:41:0c:cd:98:92:8c:11:a0:
c9:43:76:12:b8:ab:8b:a8:63:3b:e3:5e:14:c8:c7:
3a:39:ff:66:34:00:32:f0:d1:c6:ef:33:08:70:87:
91:ac:ac:50:45:e0:9d:df:d9:27:a1:54:a1:d2:38:
38:3b:95:9c:f8:94:09:83:f8:2d:93:d3:ca:1d:97:
34:e7:cf:2d:98:dc:89:02:6d:e9:3c:e8:fe:cf:2b:
2a:cf:45:30:b6:a0:f9:57:de:c9:01:d9:c9:8d:a4:
78:51:39:2c:6a:2c:ae:fc:ef:bb:15:e3:b7:89:07:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:2E:36:54:78:42:D1:E3:36:A8:20:76:7A:FD:DE:10:0E:BA:2B:FA
X509v3 Authority Key Identifier:
keyid:91:35:BE:8E:F0:DC:E9:D1:E6:70:71:AB:7C:B0:7C:F5:0D:53:F6:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTW-jvDc6dHmcHGrfLB89Q1T9hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d21e02-54b7-49de-b15f-729298212f54/1/kTW-jvDc6dHmcHGrfLB89Q1T9hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2e:42:7a:f0:52:7e:27:be:6b:b7:47:2d:95:19:68:93:7b:
da:08:41:b4:60:96:a4:9e:ab:12:a8:04:fc:26:21:1c:67:ba:
5f:6e:89:fe:29:78:77:c5:6b:dd:d7:37:db:24:22:d7:ac:4c:
92:8e:8b:14:33:75:b3:02:fb:f9:5e:d6:8a:bd:17:11:d6:87:
76:fb:48:70:17:0e:5d:30:ad:73:cc:f2:fd:7f:7f:b9:66:2b:
0e:79:ef:dd:a4:90:0a:9c:3d:8e:d4:7c:0b:37:17:91:05:cb:
08:71:53:d0:40:45:50:46:19:57:7c:0a:1a:66:95:07:7b:27:
44:bd:bd:2e:14:2b:6a:d9:18:9d:c0:e9:67:d8:7d:99:b9:9f:
43:06:19:1b:a7:d7:36:3c:67:e5:57:ec:86:71:a0:e9:7e:39:
0a:82:9d:c9:0b:b8:ee:a7:35:b4:d2:f9:80:0b:16:29:08:b7:
7c:f3:02:49:db:31:b5:bf:18:8d:3d:04:60:df:fc:8c:3d:ec:
f1:40:68:8c:0f:81:ac:2e:c1:c8:c3:29:39:98:a5:58:4d:5b:
dc:eb:21:b7:fd:7e:ab:72:ac:fc:3e:d1:4a:e2:86:77:48:ec:
01:03:08:ed:57:fa:09:d2:f1:49:98:29:30:03:38:fa:98:5e:
63:00:26:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 03:33:34 2025 by rpki-client