Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: 0mGsHU2i9PpHScNl70C5X81ojiIqavkxVTx6EPUiffM=
Subject key identifier: 93:AE:A0:8E:14:A7:13:8A:2A:9B:B2:0F:38:9A:42:A4:FC:FD:4F:FC
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 0196A0F69CA0156E2595BDA058288A2355E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 15:00:38 +0000
Manifest this update: Mon 05 May 2025 15:00:38 +0000
Manifest next update: Tue 06 May 2025 15:00:38 +0000
Files and hashes: 1: du_2ZQg8yAJTgrrcsRgGTQ2XG_8.roa (hash: N5/CsUBVJG9ccVWuK1sk9cFhzshfMejmNQXFk3ysFrU=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: Qm6zO5bKxQo0JneJ3rz1GdqGEbcex4NPg03J4hQY/Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:9c:a0:15:6e:25:95:bd:a0:58:28:8a:23:55:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: May 5 15:00:38 2025 GMT
Not After : May 6 15:00:38 2025 GMT
Subject: CN=93aea08e14a7138a2a9bb20f389a42a4fcfd4ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6b:46:de:31:4b:65:03:13:56:2f:04:5e:a6:
f8:79:05:99:c3:a7:c1:8f:18:5c:bd:66:f4:d1:8d:
e9:60:92:f9:dc:bf:a0:d6:49:05:71:8a:ca:a7:14:
0a:b4:23:95:50:10:7a:26:18:27:8e:6e:1a:1d:71:
bd:a5:9c:ca:c3:62:30:70:a8:f7:8c:18:5c:c2:a9:
21:39:2b:87:35:b3:22:57:e7:90:01:d9:32:94:ac:
52:6a:a8:a8:e9:5b:2d:1d:3f:b8:3d:4e:3a:d3:c7:
1f:b7:35:ae:c1:cc:0e:a0:d0:95:2b:dd:cd:25:11:
68:3d:a3:88:81:25:c8:94:8a:06:d2:28:06:da:8b:
22:20:37:cb:f8:ee:4c:94:12:54:d4:b0:57:f0:22:
35:48:e5:87:03:a1:a1:71:ac:e4:38:d8:12:05:f3:
25:a4:c3:15:56:ff:02:ce:6a:ed:2c:2b:0a:23:36:
7d:3c:5c:bc:10:f1:35:33:00:e1:c5:ec:a0:a4:d4:
8c:44:c7:f4:db:47:50:81:7e:77:08:c7:79:b2:96:
cf:39:3e:be:f4:1b:b1:0c:09:6a:66:ff:01:94:ca:
b7:63:4b:05:11:88:40:1c:79:40:c3:c0:0b:9d:67:
86:a4:88:bb:0d:7e:65:5a:61:2a:dd:b8:ed:4b:18:
4b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:AE:A0:8E:14:A7:13:8A:2A:9B:B2:0F:38:9A:42:A4:FC:FD:4F:FC
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:71:0c:ae:1f:04:06:21:eb:47:6d:1e:9e:ce:5e:98:8d:71:
be:ae:cf:f4:a5:a8:4a:d3:cc:09:0f:ad:19:4b:68:e9:b3:3a:
f2:83:55:54:de:2b:a5:fd:9a:ee:eb:5f:71:c5:8e:40:9e:1e:
47:75:a9:c0:96:80:37:38:f0:bc:7a:f6:c7:09:f2:88:88:27:
f5:bc:b5:a1:54:70:23:5a:12:25:7e:43:c0:df:e7:b3:d6:22:
28:70:ac:99:4e:3a:3a:43:0c:41:27:13:ff:28:3a:fe:de:00:
45:97:57:79:8a:4c:ad:c3:43:1e:d3:62:4f:07:4a:68:1f:a3:
27:f0:e1:c3:7d:14:2d:7c:8d:7b:e9:29:7f:e7:5f:20:14:c5:
8e:6c:18:8f:dc:58:68:17:f9:a8:1c:14:a4:fa:70:bb:cd:8a:
e5:08:85:15:c0:3e:69:e9:b6:c7:e6:99:46:c8:89:2a:5b:38:
61:de:70:84:27:b9:f2:1a:9d:fb:48:dc:68:e8:a7:e2:ef:3d:
d8:b1:96:a9:a9:ec:2d:a1:0b:e3:5e:49:c4:4f:0b:7d:a0:5c:
bd:97:6d:75:44:37:50:fa:9d:fa:52:18:dc:2c:2d:23:dc:dd:
56:eb:f2:07:10:ff:ad:4e:6b:0f:cc:55:f3:31:5e:f9:11:36:
77:f4:d3:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 22:58:16 2025 by rpki-client