Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: WqQYg7fDyNk3yii9Kldeeu+3udD+0uRiAun3gA03+OU=
Subject key identifier: 8D:1D:77:2C:79:44:44:79:6F:8C:8B:96:E7:51:61:2A:27:69:91:99
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 0196C539A77914E85F955C4199A8A78006AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 153B
Signing time: Mon 12 May 2025 16:00:12 +0000
Manifest this update: Mon 12 May 2025 16:00:12 +0000
Manifest next update: Tue 13 May 2025 16:00:12 +0000
Files and hashes: 1: 8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa (hash: 27BFHjr8J4UtWYs76eZEJg2mPxJknmE0rT/irucN/h0=)
2: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: S3tmcX6tBBYHJW63WGhwCcDHechjzDt2XPlxccoC3Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:39:a7:79:14:e8:5f:95:5c:41:99:a8:a7:80:06:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: May 12 16:00:12 2025 GMT
Not After : May 13 16:00:12 2025 GMT
Subject: CN=8d1d772c794444796f8c8b96e751612a27699199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:3a:c5:c8:36:0e:57:d0:26:56:ce:16:12:
d7:b5:4a:2a:bc:11:2c:a3:fc:17:ec:d5:a3:6b:fa:
30:8b:c5:fb:8e:7f:48:af:ad:1f:91:be:85:72:ec:
16:09:9c:52:5a:97:ce:10:7c:26:c0:6a:c2:62:66:
e7:44:39:ef:76:4e:e4:ac:9a:28:ba:4e:fa:61:11:
cb:c9:25:ba:30:c0:17:b9:1f:e0:5c:90:d3:f7:6f:
83:14:d0:03:83:9c:ca:1c:76:bf:80:e2:73:a7:b6:
8e:1b:95:b6:67:ad:b1:21:03:69:08:e0:b7:bc:ea:
a6:2c:8d:a5:43:10:31:8e:1f:f9:16:05:19:eb:0a:
01:8c:fb:64:cc:71:6e:4f:2a:26:f2:ef:20:df:ff:
bf:af:9a:51:4b:6f:55:a2:eb:94:50:08:8e:d0:ed:
f1:d1:7c:90:fd:5f:c7:05:50:0b:81:1e:bf:0c:c6:
f5:53:17:d8:55:ab:8d:12:3f:b0:4a:12:e4:76:0e:
b3:8d:f9:bf:19:9c:2b:fd:2c:4a:a7:eb:8d:60:cd:
f7:a6:0b:c0:4e:88:ac:e7:c0:74:1a:e4:d5:67:09:
8f:4a:51:08:76:15:24:ab:53:2b:f3:99:c6:03:31:
3d:d9:c2:6b:79:f0:93:0a:1f:4a:bc:f1:04:f8:9e:
19:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:1D:77:2C:79:44:44:79:6F:8C:8B:96:E7:51:61:2A:27:69:91:99
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:89:76:55:58:a3:3f:b5:61:24:e4:26:17:17:93:ec:a6:4a:
88:99:93:a1:7d:a9:28:1a:9a:d1:5f:ed:3e:6d:a4:e0:53:2d:
f4:a4:2e:3d:41:0c:6e:0a:be:26:63:63:38:6b:ac:7c:e1:54:
36:b1:1f:17:1b:a2:d3:cf:d9:00:7a:04:1b:1c:0d:12:5a:e1:
c8:09:b0:aa:74:e6:34:23:8f:61:43:c8:ce:00:e2:d6:8a:fa:
b6:6a:0a:4c:74:bd:76:70:2c:39:2a:d8:0f:dc:0e:a8:47:51:
b8:05:2c:c9:28:b2:64:1f:81:7d:14:76:99:9f:57:bb:d6:65:
bc:67:95:ab:0d:ea:bf:b7:5b:db:84:72:9b:68:64:d8:29:7f:
55:6e:6b:a0:8b:05:37:15:16:c4:4c:e8:c5:d2:21:71:2f:a8:
21:9f:a8:a1:5d:f5:4b:9a:e1:36:45:60:d9:65:84:74:e8:8a:
fa:c3:9d:89:27:0a:e7:00:d1:cc:83:20:54:41:57:31:d9:3e:
3f:98:92:06:97:72:82:c4:cf:8c:84:0b:37:a1:27:b5:9a:6e:
78:df:db:0f:5a:9c:c3:cd:0a:64:2d:25:fd:fc:af:bc:d9:3d:
c0:f8:5d:2b:ec:ff:5f:ed:c8:9e:0a:c3:e8:d0:83:18:62:77:
5b:f0:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:44:39 2025 by rpki-client