Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
File: kLihVGbD_x6RXXgKELC6qa1pSGA.mft (raw, json)
Hash identifier: H+ha+g/rGKjDvCvQksQzjo4pRkwLdF6gXFzANEXwRKk=
Subject key identifier: 22:7D:F0:93:10:6E:AD:3D:3C:25:95:70:08:B1:C5:77:48:B8:37:FB
Authority key identifier: 90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
Certificate issuer: /CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Certificate serial: 0196D92EB85A76BFECBCBBC0FB2F0B7C3D67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
Manifest number: 14A1
Signing time: Fri 16 May 2025 13:00:39 +0000
Manifest this update: Fri 16 May 2025 13:00:39 +0000
Manifest next update: Sat 17 May 2025 13:00:39 +0000
Files and hashes: 1: 5ylzUozH0X5KfArQKo4i4yUI-II.roa (hash: /U7VX7N0LYLMWn9ZhI8TzwqGtktcWpOPVB+Ela0LG78=)
2: VjZoO_XNq9TUDzr2kG4vDwWvbaU.roa (hash: vk9V2bJryTt5ur720els5LdMqipJhY5ilAwFIvaJkBg=)
3: i7xtJNh8nnR1YjvF1KD1JF-TMBI.roa (hash: 6umGEi6/dEe09HM9YM5x0dVLfi2Oz5knxj0Mb66phQ4=)
4: kLihVGbD_x6RXXgKELC6qa1pSGA.crl (hash: I93h+Vn8Nj5QSBUP4NNhslu+X0u0WaLWTF3DOBhEcK4=)
5: wEHyXMYvuIC-qmVrbjicZQKsZ2I.roa (hash: amx36+55qLX6fzalSFu5jMxR/WTqJpTbag5RROciO1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d9:2e:b8:5a:76:bf:ec:bc:bb:c0:fb:2f:0b:7c:3d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b8a15466c3ff1e915d780a10b0baa9ad694860
Validity
Not Before: May 16 13:00:39 2025 GMT
Not After : May 17 13:00:39 2025 GMT
Subject: CN=227df093106ead3d3c25957008b1c57748b837fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f3:f0:d0:d4:d6:a1:91:0d:25:ff:07:bf:d6:
ce:3f:ed:2c:d2:2d:65:db:fb:ca:50:4d:ba:80:e2:
16:17:ea:d4:b4:02:7e:33:51:fe:5f:47:4e:ca:05:
ea:84:38:5e:8d:a5:51:73:ed:bf:6b:97:2b:fe:d6:
a7:c4:b8:23:58:83:48:c2:e8:57:df:4b:da:41:73:
0b:ed:ef:d7:f0:6e:f8:92:33:b5:62:72:35:12:d2:
a1:30:8e:b6:8c:2d:ab:8a:eb:aa:72:ae:9b:1f:bc:
7d:cf:f0:bb:61:b8:c6:86:99:fe:ec:bd:82:90:c0:
b8:40:7e:89:a1:42:4c:9a:09:2e:cc:61:37:b4:51:
a3:03:a6:62:4d:87:92:cb:96:2f:f0:64:c4:5f:23:
33:0a:58:2f:1a:83:ef:95:56:91:91:c5:64:bb:e7:
85:7b:48:bb:3e:5b:93:34:88:7b:dc:1f:4a:2d:d5:
07:5e:3f:7a:32:bd:3b:06:cc:84:bc:9d:cb:b1:fd:
93:ec:89:96:bc:23:23:d3:06:85:d3:a5:0c:8b:68:
d6:5b:87:b2:ac:21:ae:b6:8b:83:20:5c:e8:1f:55:
1e:91:3f:c9:70:54:fb:eb:82:81:5c:96:d9:62:18:
c3:66:a9:58:74:f1:be:ef:2f:7f:5e:e1:81:4a:4f:
cc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7D:F0:93:10:6E:AD:3D:3C:25:95:70:08:B1:C5:77:48:B8:37:FB
X509v3 Authority Key Identifier:
keyid:90:B8:A1:54:66:C3:FF:1E:91:5D:78:0A:10:B0:BA:A9:AD:69:48:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLihVGbD_x6RXXgKELC6qa1pSGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a2df44-38b2-4d12-8347-78e997869952/1/kLihVGbD_x6RXXgKELC6qa1pSGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:95:3b:b0:f3:06:0a:93:ec:6e:89:b2:b6:70:fe:ae:3f:39:
8e:4e:91:05:4c:ea:90:12:62:53:30:b4:82:e9:a0:e4:61:3c:
b1:2d:f3:2c:79:47:f2:a5:01:93:4b:2b:fa:f8:84:b4:36:b4:
15:a1:4a:77:84:d5:57:d6:c7:51:6e:0d:3a:6a:a5:15:ea:ae:
dc:1a:69:e4:79:6e:e3:bb:97:4b:ad:f9:e1:0d:ea:eb:5c:5b:
f1:57:94:11:25:fb:e0:76:f6:4d:57:38:ed:dc:0d:8f:07:53:
8e:fa:a6:f4:30:aa:ba:86:2f:6d:69:e0:75:6c:dc:ad:bf:e5:
bb:a7:40:95:36:04:01:d0:69:bf:29:ca:99:b5:e6:a4:d8:e7:
3f:b7:e0:c6:93:37:6d:a0:3b:40:93:49:43:89:bc:c5:6e:12:
46:1c:99:b7:03:34:c0:43:e0:12:64:35:d4:35:79:56:46:18:
5c:0e:7c:d7:04:87:d4:b8:13:5e:91:10:1f:d6:f7:a5:66:30:
10:2a:6b:c8:b8:03:50:c7:f7:db:72:d0:43:e2:04:b0:32:d1:
a4:6d:e2:30:ed:7e:9e:95:f7:a2:51:8f:31:b9:fe:3b:d9:63:
b8:a3:18:30:fe:71:bb:9a:09:07:43:d6:1f:84:fb:e7:58:15:
7f:a2:7c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 00:14:18 2025 by rpki-client