Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: 7vg+RYgMFzq96UWHeR50KvY4Y2kW9mLFo5KgE1t9JtM=
Subject key identifier: 27:F9:55:4F:B5:AF:CE:F8:0B:52:E5:52:FF:B4:00:18:F2:62:69:AA
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 0196C729482C0B7ECEF119106CC48B2C9B24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 01:01:33 +0000
Manifest this update: Tue 13 May 2025 01:01:33 +0000
Manifest next update: Wed 14 May 2025 01:01:33 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: saiN+YkhoUGorb6nfnCFw/FLicN7wRGbq2bxPIrcUi4=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 01:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c7:29:48:2c:0b:7e:ce:f1:19:10:6c:c4:8b:2c:9b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: May 13 01:01:33 2025 GMT
Not After : May 14 01:01:33 2025 GMT
Subject: CN=27f9554fb5afcef80b52e552ffb40018f26269aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:87:a5:16:3b:36:a3:ba:a9:94:24:c2:c7:c3:
b9:88:39:73:83:86:3b:ae:39:53:03:ab:05:73:c8:
86:f2:e4:fb:de:7a:33:24:fe:3f:10:76:1f:db:9a:
53:d4:42:6d:db:ad:3d:9b:9c:38:46:ea:01:36:d4:
ec:a4:a2:fb:a2:35:84:ea:02:8b:0c:96:eb:a5:dd:
78:3c:08:26:2c:27:b4:d8:0d:bb:73:9f:50:1b:46:
2b:8d:bc:ef:ad:b8:93:dc:05:31:b0:bf:80:d9:80:
83:ba:bd:84:4e:51:0d:3d:b3:3e:9c:f7:2d:b2:19:
fb:00:db:14:97:53:0b:86:d9:94:93:e6:4d:3f:cc:
f2:24:5c:e9:93:f9:67:d1:8f:a6:f5:fa:5c:a5:85:
32:cd:d6:7b:01:60:4e:37:72:c7:80:4e:53:02:3a:
b6:3e:1e:5d:9a:78:e0:07:42:f5:3b:d0:b2:62:7e:
da:99:4b:d9:42:c1:f8:f6:c8:16:4b:bf:09:46:22:
84:c4:21:8c:38:71:15:a5:39:3a:dd:bb:f7:54:02:
76:67:f6:27:35:42:5d:08:b9:e1:39:d7:60:26:a1:
b4:15:8c:42:37:28:56:6d:7a:ee:d9:22:b6:b7:cc:
43:8b:a2:bc:5b:0b:d2:af:b7:e2:c6:2f:de:ee:42:
96:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F9:55:4F:B5:AF:CE:F8:0B:52:E5:52:FF:B4:00:18:F2:62:69:AA
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:b4:2b:be:32:7c:9b:af:8a:5e:51:cb:46:3d:1c:df:ff:ed:
81:ac:32:fa:cb:e8:52:38:43:21:f0:6e:d6:e6:05:39:89:eb:
72:0c:d2:c6:85:3d:a3:80:e2:9c:9f:2c:25:97:78:5d:b4:ed:
e9:00:dc:27:10:bb:b8:25:49:49:6b:60:ca:64:7c:22:ea:b0:
5a:d9:4a:2d:9c:eb:16:6c:3b:e1:aa:47:a7:ee:14:02:71:43:
0b:95:5a:22:57:29:7b:5b:a6:c4:57:a2:e9:0c:7f:47:06:69:
7e:ba:e0:d1:70:f6:46:9f:d2:cc:00:d5:e4:f1:f7:ce:19:50:
e2:e0:64:c8:65:35:8f:b7:ad:37:1c:e2:b4:36:28:c7:70:22:
ae:a4:5c:8f:76:d2:66:f4:1e:ae:66:ce:7c:d9:1d:23:1f:67:
31:b5:ba:53:31:39:e9:13:b3:b5:71:51:24:78:77:d0:06:7a:
67:05:ca:60:a7:36:af:f5:5b:a7:f7:fe:16:4e:af:0c:60:5c:
ef:31:94:c8:46:9b:09:d7:ed:3c:b1:4a:12:26:e6:b9:d5:7c:
1d:a5:9d:b6:1d:3e:67:e1:8a:89:95:30:9b:86:af:e1:a3:46:
05:b8:73:3d:80:85:99:5e:54:49:17:eb:98:2e:71:87:73:0b:
49:72:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 09:50:50 2025 by rpki-client