Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
File: kPZLEhCNmzZnea-6z0gvefjA4xo.mft (raw, json)
Hash identifier: DqQCGihO60km4JzxmS40WP5YV1enWQiJm1PVah4G9gE=
Subject key identifier: 87:25:78:DB:11:3A:84:6B:74:FD:16:14:67:FD:FC:22:1E:78:3B:46
Authority key identifier: 90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
Certificate issuer: /CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Certificate serial: 0196AEE8D58C80E6D865A70F5D3D3774303A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
Manifest number: 013A
Signing time: Thu 08 May 2025 08:00:16 +0000
Manifest this update: Thu 08 May 2025 08:00:16 +0000
Manifest next update: Fri 09 May 2025 08:00:16 +0000
Files and hashes: 1: hnM5W0U-Qj_uQRhaO3TbcAuM76o.roa (hash: 4rFXrF5OPsxPLyOZLu+yOTZUft5NKdXEPlgvLrZwpqk=)
2: kPZLEhCNmzZnea-6z0gvefjA4xo.crl (hash: WYHmRhbsvtNjRaasynQzS8+S2bS9ixVMxFINHT4hnAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e8:d5:8c:80:e6:d8:65:a7:0f:5d:3d:37:74:30:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f64b12108d9b366779afbacf482f79f8c0e31a
Validity
Not Before: May 8 08:00:16 2025 GMT
Not After : May 9 08:00:16 2025 GMT
Subject: CN=872578db113a846b74fd161467fdfc221e783b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:38:a7:1b:65:c5:32:8f:e7:66:fb:1e:c1:93:
b4:13:a0:59:b5:2d:51:44:3a:b1:99:89:53:03:ac:
75:d8:54:35:85:5e:21:68:21:3d:d3:9f:9f:23:52:
fd:6f:4a:58:25:be:58:d1:f8:27:ca:b4:f5:b1:3c:
c9:ac:7a:29:77:96:10:f6:d6:a3:3b:8e:af:a5:96:
cb:04:30:51:f1:03:63:fc:e8:08:fd:1a:56:0f:44:
4b:1f:41:98:98:46:74:12:3f:a2:cd:a5:51:bc:cc:
52:aa:e7:79:48:9c:9f:ed:50:cf:d5:6c:e3:7b:da:
23:37:bc:78:da:d8:93:98:7c:79:5e:70:6b:17:51:
61:3b:bf:9f:5b:a5:6d:31:dc:c5:74:2e:07:9f:bc:
4a:5a:88:30:0a:52:21:2f:98:5c:c2:c9:7a:61:4e:
a3:13:5a:9a:7c:f1:11:55:4f:cb:bb:c8:90:29:47:
1c:3d:ee:fe:40:eb:f9:6b:ea:67:1e:93:e6:4e:51:
b0:64:72:c3:50:30:2e:68:8d:d6:0f:23:2b:4b:e6:
f1:cc:81:17:33:b0:b1:cb:c6:5d:04:2d:60:8f:c8:
5f:72:f0:5f:1f:b4:dc:53:20:d4:78:7c:74:2f:1b:
58:a4:3b:49:a4:f7:79:ab:b2:b9:5d:77:4d:5e:9f:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:25:78:DB:11:3A:84:6B:74:FD:16:14:67:FD:FC:22:1E:78:3B:46
X509v3 Authority Key Identifier:
keyid:90:F6:4B:12:10:8D:9B:36:67:79:AF:BA:CF:48:2F:79:F8:C0:E3:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPZLEhCNmzZnea-6z0gvefjA4xo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f19f62-cade-42c9-a757-1dcb0bc7a96a/1/kPZLEhCNmzZnea-6z0gvefjA4xo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:04:dd:96:db:2b:c9:e6:d1:8c:a9:6e:10:7c:90:73:9d:31:
ff:65:50:5e:db:2d:1b:c9:75:68:20:c7:7e:3f:a2:12:71:53:
d5:08:92:cf:f0:a7:05:bc:5d:e5:b9:ac:f4:e1:ea:03:cf:24:
d0:91:7f:8b:7d:ba:f1:8d:ef:5a:be:48:6a:79:31:a0:65:38:
44:9a:69:f1:0c:59:f3:31:a8:98:04:58:8c:33:4f:9e:04:28:
0e:e1:36:6d:9d:a9:f2:e7:6a:cf:f7:8f:6d:84:85:4a:ea:78:
cb:4b:59:6c:3b:91:d6:b2:38:e5:04:d5:d5:ed:46:a8:f5:6e:
ec:7d:84:be:59:db:8d:03:cf:72:09:2c:56:29:27:0b:15:47:
a0:ef:bf:6f:59:c8:e6:24:14:87:73:ae:01:c9:28:c0:80:72:
27:c2:a4:2c:21:4d:ef:c7:93:28:67:c2:82:0f:26:36:f9:f6:
da:93:f2:64:bb:24:5e:f7:7b:f8:f9:92:a8:17:8d:57:7d:6b:
0e:dd:48:2a:df:36:0f:ab:8e:7c:25:95:55:4b:73:cc:68:3c:
08:73:54:12:1c:f3:32:10:e8:80:91:51:7c:da:8c:3a:16:fc:
f3:aa:d0:ef:0d:6a:fb:ae:98:e7:01:be:32:0e:3f:cf:ab:96:
5f:9b:aa:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 13:30:54 2025 by rpki-client