Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
File: kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft (raw, json)
Hash identifier: KTnUKFDHUxHRZFQyyYQq9QguvPHVvSSPt4UrdS3CNac=
Subject key identifier: 28:D9:9D:53:1E:50:2E:1D:0C:7A:0C:53:39:EF:59:FF:7E:CD:03:38
Authority key identifier: 90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
Certificate issuer: /CN=90a02705006532ef33a0064f875a100923509fd5
Certificate serial: 0196C38288E09DD6CCD687A13D6E51A62C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
Manifest number: 0F0A
Signing time: Mon 12 May 2025 08:00:33 +0000
Manifest this update: Mon 12 May 2025 08:00:33 +0000
Manifest next update: Tue 13 May 2025 08:00:33 +0000
Files and hashes: 1: Is94Q2E0TcL99ktPLy3XOhFlG9s.roa (hash: QmvTWH4bMNqja9fgfEB+gdmLSFW4G8IyUfhDS4uj7O4=)
2: kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl (hash: UElIwz3/t8GhWyDhjNFTEBYYKYemNPVZI20/xJ1jtFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:88:e0:9d:d6:cc:d6:87:a1:3d:6e:51:a6:2c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a02705006532ef33a0064f875a100923509fd5
Validity
Not Before: May 12 08:00:33 2025 GMT
Not After : May 13 08:00:33 2025 GMT
Subject: CN=28d99d531e502e1d0c7a0c5339ef59ff7ecd0338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:8f:34:15:bd:5d:16:b3:79:32:00:0d:9e:
4b:f8:f4:bb:d1:47:cb:57:b2:a4:ed:db:89:1f:94:
1b:65:33:99:b4:8d:6d:5e:b4:2a:af:7a:af:46:eb:
06:07:61:47:5e:2b:57:28:49:b6:a3:56:e3:97:19:
3a:de:4e:74:66:d3:65:82:f6:71:40:50:2a:00:a8:
fb:c6:72:38:47:c3:a4:85:3f:ac:1e:17:09:53:a5:
fb:c3:75:e0:25:23:41:32:e5:2f:c0:bd:8b:40:36:
7d:19:8b:49:56:05:a3:f2:c0:db:3c:16:4b:b9:20:
75:84:93:9a:55:86:5f:1d:c1:28:08:c9:d1:8a:24:
a9:d4:3b:0f:18:7b:fa:4c:a3:2b:b7:ac:fe:24:e6:
3b:be:48:63:8c:9e:e5:aa:df:b8:28:27:de:9a:48:
5e:d3:63:4a:46:cf:72:ba:59:21:a2:eb:f5:b2:4c:
8e:ae:ad:74:1b:24:b2:dc:ab:53:05:c0:1c:cb:2a:
1e:95:21:91:96:d3:09:01:a4:a0:4e:ac:5a:42:7e:
e2:81:5b:85:89:fd:d4:13:5f:57:46:13:9c:ca:3f:
81:74:28:96:68:36:4e:9c:45:b9:a5:b9:32:e0:a3:
16:5c:b2:1f:ff:30:43:df:63:50:d8:b5:3b:95:fd:
a0:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D9:9D:53:1E:50:2E:1D:0C:7A:0C:53:39:EF:59:FF:7E:CD:03:38
X509v3 Authority Key Identifier:
keyid:90:A0:27:05:00:65:32:EF:33:A0:06:4F:87:5A:10:09:23:50:9F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKAnBQBlMu8zoAZPh1oQCSNQn9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d9f482-135e-47f6-9317-6785ada527c1/1/kKAnBQBlMu8zoAZPh1oQCSNQn9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e0:9c:51:3e:23:ad:b9:cf:33:16:50:8e:17:d4:80:54:b6:
47:8c:70:2b:e4:e2:5e:91:7f:3e:d9:51:31:0e:3c:46:43:79:
0b:4a:39:25:61:c5:c7:bc:4d:7f:35:f9:cf:19:ed:10:27:d1:
78:00:bb:0a:22:69:3e:e3:cd:ba:3d:59:c1:d8:49:0f:9d:a8:
19:3b:13:46:29:97:de:ca:ad:cc:24:38:1e:40:2b:0b:a6:ca:
6b:52:1c:84:59:79:23:f2:9e:c7:28:35:07:7d:0d:ac:5e:7f:
fc:ca:5b:83:f7:fc:c1:27:77:cc:75:1c:ad:28:5c:ce:f0:d2:
12:6f:ba:2c:a5:38:c9:41:40:b1:c8:f0:ab:f3:66:8c:e3:55:
c4:64:3e:4a:7c:97:84:aa:6c:8f:49:cf:eb:b7:cc:05:7b:d4:
29:8b:c4:24:67:0a:80:3e:66:2d:81:98:1e:47:b9:1e:d4:19:
89:9f:7a:10:61:c7:c9:b2:86:d3:2f:40:76:02:f8:8d:fb:3b:
3e:f5:c2:70:61:1d:c9:d9:22:ca:b8:36:97:fd:b5:2a:5a:c1:
c7:89:d5:bd:39:4c:46:08:b1:9a:c2:07:24:76:96:ac:66:df:
5c:79:5c:39:b2:01:f9:ef:b1:10:f1:84:db:8b:a7:d8:9d:b4:
5e:52:ba:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:31:24 2025 by rpki-client