Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
File: klzs7-UigXQF0m_JK7UQSskM_cU.mft (raw, json)
Hash identifier: SfO93N6WEsfbbZOVrzD/txShoAOXGpNQspyop3u9nr4=
Subject key identifier: 8A:6B:B8:89:5D:EE:DA:8B:77:E2:80:8B:0C:A6:01:2D:E4:30:B2:C8
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 0196B33391099660B6D46D823F2CE3F7FAEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
Manifest number: 14CD
Signing time: Fri 09 May 2025 04:00:23 +0000
Manifest this update: Fri 09 May 2025 04:00:23 +0000
Manifest next update: Sat 10 May 2025 04:00:23 +0000
Files and hashes: 1: EfOMbgh_pKQt-7ajxMUeTepJbo4.roa (hash: RicjsAR+fFB8KuftKBMTKVHP55uAJ9KWTl0BH2re0WQ=)
2: klzs7-UigXQF0m_JK7UQSskM_cU.crl (hash: 4rfphyGvq/9qGk4MXxysKZLsLncfZPCbfdupRU8Ik6E=)
3: r1IMpiCHpPweMRkuWsw73RYDo3A.roa (hash: H3EX+meKiUt0EpGIqmimp5m+RpOOJnWjXaAa27zBx8A=)
4: uW5xZeMVu996ePnsDNWix3IxddE.roa (hash: eZBsZLTI5FHa2cO1NIRNHlb8bthiS8UjIJ0pt0v6Shw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:33:91:09:96:60:b6:d4:6d:82:3f:2c:e3:f7:fa:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: May 9 04:00:23 2025 GMT
Not After : May 10 04:00:23 2025 GMT
Subject: CN=8a6bb8895deeda8b77e2808b0ca6012de430b2c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:40:aa:15:4d:bd:45:fb:30:ca:73:4a:d8:
a2:1a:c1:a9:f6:6f:60:ce:ab:04:78:c5:c0:06:6c:
cb:8c:3d:72:e9:b9:c8:34:2c:e8:6a:1e:59:11:cf:
8c:ef:92:ff:f3:10:16:89:27:b2:c2:c2:c0:37:69:
99:75:c4:4c:ac:78:ce:23:d6:7d:16:ef:e6:4f:f3:
b8:88:42:0d:ef:fd:c5:1f:6c:84:7c:d6:2e:fd:12:
24:75:5f:ea:eb:10:af:43:f0:d4:e8:ad:68:73:d1:
57:8d:4c:44:4c:1f:77:d1:dc:b3:10:a6:64:99:08:
96:d4:84:83:17:c0:19:10:04:8e:ad:23:8f:0f:75:
61:5e:25:ed:b0:aa:2a:0b:a3:73:ad:d0:ed:e9:9d:
b5:e6:a5:22:46:7e:f0:fc:36:f4:55:7d:0c:b3:32:
18:7e:ca:3b:08:b0:a5:d4:99:12:0a:ad:04:6d:90:
f0:71:1c:33:51:92:5f:02:0b:68:05:a4:dc:c9:69:
8b:71:60:81:be:7c:a8:c5:c4:86:8f:95:25:32:35:
f5:78:e3:a8:63:02:e2:27:e2:1b:2f:42:8e:ce:a7:
a1:ca:9d:92:b9:3c:a8:27:a3:46:2b:df:bf:c7:ed:
95:2d:1c:68:7e:42:df:90:67:a0:ea:78:a7:5e:de:
b3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6B:B8:89:5D:EE:DA:8B:77:E2:80:8B:0C:A6:01:2D:E4:30:B2:C8
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:74:c7:bf:e0:90:a3:0e:88:3f:d2:a5:77:4c:b3:e6:4c:51:
e0:6f:4a:a8:71:e2:29:d5:39:18:34:70:07:ff:aa:8e:b9:85:
9f:cc:63:35:85:43:90:a0:dc:63:86:6b:b9:d1:37:70:e6:da:
09:55:29:d7:ce:93:6f:86:08:6f:a7:a7:3e:29:b1:7f:bb:90:
11:09:f6:e8:67:62:f9:70:e9:78:bb:69:4e:2d:b2:ca:06:7b:
b1:0d:6e:0a:15:f8:16:a8:2a:77:fb:a6:e8:3c:e2:07:be:30:
eb:40:c7:25:07:01:b1:e7:0f:25:dc:ef:44:1b:dc:e6:e2:38:
e6:1f:3d:5f:aa:42:a5:73:28:69:80:95:7d:db:a9:0b:e1:d9:
16:cd:95:9e:21:33:07:53:a4:09:08:50:2e:22:1a:0e:d6:f8:
1c:c9:ac:84:e8:10:84:24:79:78:0a:12:93:ad:be:2e:0b:71:
6d:61:ce:c9:60:f6:6c:07:e9:01:19:3d:19:d6:51:24:f1:6a:
a3:89:5f:ec:a1:e0:d5:32:a0:63:58:7e:e3:c4:a6:83:80:48:
d7:08:bf:76:e7:e2:0e:40:28:50:ca:43:27:73:48:c2:46:6a:
43:32:2c:e3:0b:89:c7:6b:d8:f1:31:71:33:ba:bf:9c:ff:46:
a2:72:9d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:31:42 2025 by rpki-client