Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: WGrKYzFH4G9YpR1Ilf/SJu5z0ba3SN1G82rmaKCBlKo=
Subject key identifier: 0E:38:B4:0E:4A:6D:5D:E2:B2:1B:8A:37:16:5E:8B:F6:17:E3:1D:35
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 0196BFDCFD6EAF14668DDF2278039B2D7F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 08E1
Signing time: Sun 11 May 2025 15:00:53 +0000
Manifest this update: Sun 11 May 2025 15:00:53 +0000
Manifest next update: Mon 12 May 2025 15:00:53 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: rWgX2q4oNlKiG2VKvg6mI1nNcaOp1HFRGbn7qnKDIPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:fd:6e:af:14:66:8d:df:22:78:03:9b:2d:7f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: May 11 15:00:53 2025 GMT
Not After : May 12 15:00:53 2025 GMT
Subject: CN=0e38b40e4a6d5de2b21b8a37165e8bf617e31d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b0:40:c8:93:11:f6:74:2d:ce:eb:c2:ce:cb:
0e:3c:53:d3:0b:d0:af:04:5f:e8:ff:7c:a1:05:85:
7e:2e:dc:86:1a:fd:ff:85:e1:60:d4:b4:11:96:fa:
64:6c:1d:fa:59:e6:92:89:fa:58:a6:51:2c:c3:b3:
e2:7f:fc:a4:bf:31:c2:19:22:af:9b:77:fa:da:f2:
ee:20:fd:a3:de:b6:e8:12:05:45:20:26:5c:b5:66:
c3:74:66:08:c4:aa:a9:e7:b0:b7:6d:8a:1c:03:6b:
4a:40:48:1a:db:a7:a7:09:37:7c:f1:bc:69:99:f0:
a3:57:4c:9c:cb:bf:c3:ff:df:93:ca:47:c0:18:bd:
1a:ad:b1:6d:f2:7f:6d:af:ef:c5:e7:78:59:34:84:
01:fb:43:de:8e:63:49:38:08:70:7b:cd:b3:59:10:
c1:aa:10:06:6c:b8:b9:19:db:f3:5f:d9:79:a3:a9:
ac:6c:47:d5:df:e8:89:f3:85:01:c9:15:5f:06:a5:
84:83:b4:a5:e8:fe:50:3e:fa:15:4d:4d:b6:f9:54:
34:e6:89:11:2e:67:97:29:97:1f:58:52:f5:73:83:
b3:18:2e:fb:a7:f8:b2:bd:c8:72:d2:ce:a5:77:bb:
ed:ce:d9:a0:ae:df:2e:f5:0b:8b:e0:42:37:fe:03:
83:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:38:B4:0E:4A:6D:5D:E2:B2:1B:8A:37:16:5E:8B:F6:17:E3:1D:35
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:9c:7a:6e:4b:f3:7b:37:e5:e8:f4:17:eb:c4:08:15:a5:58:
77:2d:46:d1:47:20:f3:96:63:36:13:fe:b7:4a:e6:85:0c:8c:
f0:82:f4:10:49:16:43:2a:83:e7:31:da:36:4f:ff:6a:b2:96:
10:86:03:59:9e:dc:28:cf:fe:f8:5c:7c:f8:d6:c6:9f:65:cd:
ed:84:f8:5f:91:e1:a3:29:9f:33:0e:88:8a:cf:29:ab:29:9b:
5c:5b:19:d7:96:e8:dd:a6:70:0f:c6:63:e7:fc:b4:a8:7b:a6:
96:d6:94:c3:22:a1:d3:26:1f:b6:a2:c6:a1:fe:52:5a:06:f0:
0a:ff:05:71:02:09:51:89:de:8b:de:ef:cd:df:4b:69:fb:b1:
cf:99:b2:3a:42:06:43:2c:0f:22:26:19:17:70:e2:7d:8d:81:
d2:c7:df:21:43:98:9a:6a:76:be:a7:1d:df:04:86:fe:5a:de:
81:23:9c:e8:30:01:0d:37:84:74:99:a6:38:bf:5e:8d:51:2d:
f9:cf:2a:60:9b:06:dc:d2:bb:aa:3b:10:23:03:03:c7:b9:5e:
5c:f7:79:72:91:ec:b8:a3:4b:05:76:44:33:1f:51:d4:19:7a:
76:3d:52:53:76:7b:f4:aa:8a:67:d3:42:d8:ac:96:fb:e3:fc:
64:04:58:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:03:44 2025 by rpki-client