Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: 6EolPDJAmrqCjIyFAe9a5A6mHphzpM5XmgA41lIlyz4=
Subject key identifier: CF:2D:FC:0E:D1:D3:CA:F3:58:11:0F:AB:2A:CB:32:64:50:A4:81:A3
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 01969E2C95EC843324A7E1562EC26DF4BE69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 023A
Signing time: Mon 05 May 2025 02:00:44 +0000
Manifest this update: Mon 05 May 2025 02:00:44 +0000
Manifest next update: Tue 06 May 2025 02:00:44 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: wa9MG/c4JV8iQc2YbaahQngjmm/CgfT90t+oG1BTXzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:95:ec:84:33:24:a7:e1:56:2e:c2:6d:f4:be:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: May 5 02:00:44 2025 GMT
Not After : May 6 02:00:44 2025 GMT
Subject: CN=cf2dfc0ed1d3caf358110fab2acb326450a481a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:78:94:25:d0:89:4d:04:55:71:fc:51:da:d9:
8c:95:19:8c:af:93:5c:db:40:6a:73:ca:3a:39:7c:
da:46:d4:f1:df:6c:a5:d2:a3:04:9a:83:e3:60:e4:
a4:f6:46:4f:10:a8:a0:e8:01:18:d9:d2:7f:ab:0d:
cc:4a:20:51:5b:1d:b1:0e:9a:2a:7b:61:56:1b:e9:
bc:42:c8:ec:9b:56:97:9f:26:2e:8d:3b:03:4b:77:
e6:a3:43:44:27:4b:c5:60:66:b6:d0:4a:0f:70:0f:
7a:b0:79:31:00:7b:32:19:64:ff:02:7c:e8:d2:44:
74:f0:4f:3e:29:f3:7e:1a:a9:e5:22:c5:e7:2e:0c:
a7:2e:cb:41:01:1c:3c:a4:15:08:19:83:db:66:96:
8a:ec:a9:94:71:1e:ee:62:48:44:dd:d6:82:f7:da:
39:42:ae:93:c7:34:c9:d3:5f:b2:35:3b:61:8b:b5:
a1:fb:c5:92:c1:76:a6:fa:1e:33:95:cc:d3:1a:7b:
9f:af:25:9c:8c:ff:3f:6f:1b:08:eb:ce:7c:d4:e2:
a1:12:4b:00:cb:5d:4a:f7:94:b1:fc:23:d4:88:98:
dc:3f:1d:47:b9:9d:14:0a:b5:b4:9d:a3:5a:e0:77:
87:11:a2:b3:fe:77:a8:60:a0:fe:0c:31:89:b5:b5:
8b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:2D:FC:0E:D1:D3:CA:F3:58:11:0F:AB:2A:CB:32:64:50:A4:81:A3
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:49:07:6f:67:26:d3:f5:0a:a2:ab:34:f9:e3:95:f3:a9:21:
d3:08:9b:32:14:6d:ab:1a:f5:7f:1a:cb:f6:5c:9d:43:28:4f:
bd:47:27:0a:c1:f9:25:85:7f:f1:96:e7:ea:5b:dd:47:be:fd:
4a:84:32:cc:e6:b7:c4:d8:c0:b8:7f:0e:13:21:08:0d:1c:ba:
12:91:c3:b8:f6:4a:c9:bb:69:7f:a5:2a:70:ad:9a:6c:98:46:
42:d5:fb:a2:1c:d0:c6:ed:44:5a:8d:48:61:9c:36:ec:a3:dd:
4b:09:db:b2:dd:a0:ea:4e:0b:86:f9:a7:bb:fc:36:6c:70:88:
67:b1:48:ed:e1:e4:7b:27:0f:93:eb:dd:09:2c:85:cc:97:58:
04:1c:7d:8e:d7:35:ed:db:98:03:d4:4a:1f:8e:ff:fc:32:3e:
48:ad:c9:bf:51:aa:ae:4a:b3:fa:26:1f:d9:86:d9:64:eb:1c:
eb:d4:c6:bf:74:af:99:03:07:32:af:33:97:0e:a8:04:9b:5e:
3d:8a:51:e7:5d:51:a3:aa:9a:cc:e7:30:53:6e:a8:25:b4:b3:
df:a0:3c:6b:ab:e1:45:a1:c4:1d:bc:f2:4a:90:f6:e3:b9:1a:
a9:a0:b3:32:d9:9d:5b:1c:ba:f1:a5:76:65:5b:80:6b:b9:56:
e1:59:32:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:36:26 2025 by rpki-client