Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
File: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft (raw, json)
Hash identifier: R9qHD9jkA1D4hZfTHDsG1sxDTj6WWC3w5SzLME6+LiE=
Subject key identifier: 21:33:92:C0:49:7D:94:FF:34:A2:65:E7:D8:18:9F:D0:C9:57:9D:30
Authority key identifier: 92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
Certificate issuer: /CN=924a97d912d71f80fd36b73efc0fc7969762f337
Certificate serial: 0196D0621BE3A3B6A95FFE6D3C85A0387F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
Manifest number: 153E
Signing time: Wed 14 May 2025 20:00:12 +0000
Manifest this update: Wed 14 May 2025 20:00:12 +0000
Manifest next update: Thu 15 May 2025 20:00:12 +0000
Files and hashes: 1: 1-JNlJinjq7kuel35O_T8kUcWQBw.roa (hash: 1A2mPTXvGu8ShjNKjNG8ljmXuNzR5l5s2QNyKormBf0=)
2: kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl (hash: 7AtbC5mUaqZtD1cYf9JZx4tU34nJZcSLQqXSF7zDBqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d0:62:1b:e3:a3:b6:a9:5f:fe:6d:3c:85:a0:38:7f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924a97d912d71f80fd36b73efc0fc7969762f337
Validity
Not Before: May 14 20:00:12 2025 GMT
Not After : May 15 20:00:12 2025 GMT
Subject: CN=213392c0497d94ff34a265e7d8189fd0c9579d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d8:34:41:eb:23:d3:29:35:43:c4:be:a2:e4:
4b:a5:93:68:d8:4d:ee:08:4c:69:cd:08:cc:e6:cf:
33:1c:27:4a:d0:53:c8:34:3e:b9:68:eb:ef:6b:91:
22:fc:f7:cc:fd:d6:15:55:bc:74:04:74:0f:4a:33:
a5:9c:a9:fd:fa:73:f5:85:35:e7:31:27:5d:87:ca:
2c:95:da:5e:38:f5:7a:07:ff:21:70:3d:83:18:fd:
b2:a6:60:f0:12:f3:68:b8:13:e1:3c:b6:ba:cc:c1:
ea:3b:55:ef:fe:8a:ab:98:ad:e3:08:8e:df:85:82:
23:2f:04:c5:68:c6:af:7e:d0:05:65:2b:1a:e3:79:
4d:92:d4:d3:79:5b:06:80:dd:f8:5f:3f:c8:81:01:
dc:a2:99:ee:27:cb:cd:84:c1:c2:4b:d3:15:ed:51:
6a:49:c8:e2:c0:5b:10:bf:c5:27:0d:c7:60:aa:be:
3f:88:b6:13:84:2d:f7:2c:2c:41:60:cc:ab:43:80:
e1:4f:55:bf:87:d5:1a:a1:b4:d6:29:b2:ef:3a:1d:
b2:b8:2f:d8:07:32:e8:bc:1d:2d:5e:3a:7a:01:1e:
d1:b9:f2:f9:7e:e9:54:99:da:1e:a5:9b:54:39:bd:
43:76:bb:c1:39:15:b5:bd:51:27:69:80:35:d5:1d:
eb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:33:92:C0:49:7D:94:FF:34:A2:65:E7:D8:18:9F:D0:C9:57:9D:30
X509v3 Authority Key Identifier:
keyid:92:4A:97:D9:12:D7:1F:80:FD:36:B7:3E:FC:0F:C7:96:97:62:F3:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/kkqX2RLXH4D9Nrc-_A_Hlpdi8zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e1:b9:e1:89:6c:d3:0e:06:8e:ff:1d:74:7a:2e:da:78:42:
60:08:98:b9:0e:1f:d1:2f:d3:a8:00:44:4a:3b:40:88:fd:b1:
5f:22:77:33:96:3e:bb:92:40:65:30:51:23:af:b3:e3:9c:07:
6e:72:ff:11:50:2f:8c:71:55:0e:e0:e6:58:b6:d6:cf:45:a4:
d1:04:e5:a4:dc:b7:43:bd:78:7f:5b:2a:dc:5a:76:01:f6:cd:
49:f4:e0:3a:2d:6b:b4:da:fe:65:fc:23:19:59:81:d0:8e:ea:
7a:24:6e:90:08:26:0e:60:05:c7:4e:4b:f7:be:80:c9:8b:23:
a1:67:af:0e:36:37:a3:9e:7f:19:32:91:b2:91:b3:a9:5b:ac:
b2:fa:5a:24:fc:0d:88:f0:14:8a:78:b3:96:c8:2e:2f:64:52:
63:99:3b:ea:7f:3f:2f:3b:e9:12:81:a2:01:57:de:63:84:cb:
84:eb:57:71:3f:21:29:2e:c9:1b:5c:fc:e2:f0:69:b9:5f:e6:
d5:4b:4e:18:32:14:7b:4a:a9:49:06:fd:a8:85:2c:d2:52:95:
ff:c9:8d:22:fa:c5:c9:91:f2:ec:94:d3:49:00:d6:01:3d:6e:
09:50:6e:95:49:b1:01:78:25:a9:fe:0f:21:1c:8f:32:a7:68:
60:61:b9:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 21:56:50 2025 by rpki-client