Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
File: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft (raw, json)
Hash identifier: B+bhkeihiNhgxM8qDvNEWF3VF3fyzAXunjpmEYkiT/Y=
Subject key identifier: F3:8F:B9:AA:CA:98:8F:C3:BB:66:71:53:A4:F5:65:32:5F:A8:F9:95
Authority key identifier: 90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
Certificate issuer: /CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Certificate serial: 0196D1E2C2A06E774CF8DCB51C31BB72BC2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
Manifest number: 1540
Signing time: Thu 15 May 2025 03:00:21 +0000
Manifest this update: Thu 15 May 2025 03:00:21 +0000
Manifest next update: Fri 16 May 2025 03:00:21 +0000
Files and hashes: 1: 3nqGhkLV9lVUPlFFGoMeuG1mXiA.roa (hash: XcfY9Hmln8PmxUq94JhUMZLnl3Q3LCi2mdpPddFOCD0=)
2: kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl (hash: Uk8rnl/MG7C7DSuQI6jWFGirX7qVqq9zOUsqkkpNaWE=)
3: wczF6RhOkPJNWwYJ_phb7iZuDt4.roa (hash: edNLlD3qbOh39DxevC9iFL+lMoE1+tSbPWNytrUaeOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:e2:c2:a0:6e:77:4c:f8:dc:b5:1c:31:bb:72:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908c573c2d83c7d8fd2a3cf9a7f536f92925a3bd
Validity
Not Before: May 15 03:00:21 2025 GMT
Not After : May 16 03:00:21 2025 GMT
Subject: CN=f38fb9aaca988fc3bb667153a4f565325fa8f995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:78:57:78:ae:89:82:f2:d8:ad:26:64:1d:
fa:59:18:bb:7c:b7:fc:ca:1d:07:45:9b:6c:cc:47:
ae:fe:26:f9:d9:05:da:29:53:9a:3b:70:cc:2d:3e:
25:6a:10:3c:d6:2a:4c:d5:ac:27:15:ef:ea:02:c1:
e6:6c:eb:6a:ac:dd:89:71:c8:45:06:7f:d0:6f:a1:
76:22:be:0c:3e:ad:49:ee:6e:97:16:5f:c1:c4:38:
59:4a:97:ab:e9:df:23:b3:49:ba:a1:3a:a8:c4:52:
4a:1d:56:9c:82:12:08:e5:c1:db:8f:56:a3:2a:e6:
a9:de:75:eb:9e:9e:80:92:63:24:71:a4:f3:5a:47:
c0:79:c2:c1:e9:3e:6a:0d:a7:ee:ac:fa:ba:54:0b:
6a:39:5e:a3:cc:9e:d0:52:4a:b9:fc:22:47:f5:63:
0f:5d:d6:af:a7:42:47:70:10:06:de:dc:7b:63:77:
77:71:c4:26:1b:3a:5a:4d:63:9e:b5:aa:1d:a3:3e:
e3:95:43:d0:f9:34:95:1f:e0:40:27:a9:d2:0e:cf:
f6:f1:f6:a0:38:bb:62:8d:d4:57:e1:78:1f:e2:4b:
47:20:91:c5:ca:12:89:e0:a5:da:ff:4f:d6:ae:84:
64:b8:24:0a:f2:2e:36:c5:4d:cc:47:c2:29:6d:de:
3b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8F:B9:AA:CA:98:8F:C3:BB:66:71:53:A4:F5:65:32:5F:A8:F9:95
X509v3 Authority Key Identifier:
keyid:90:8C:57:3C:2D:83:C7:D8:FD:2A:3C:F9:A7:F5:36:F9:29:25:A3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/83c416-7d9d-447a-add1-4e85bfd7d058/1/kIxXPC2Dx9j9Kjz5p_U2-Sklo70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a4:80:96:e7:4c:01:1e:5f:fd:83:06:2e:9d:6c:83:af:22:
9b:ea:1b:df:32:b1:78:35:0f:eb:eb:8e:7b:a1:30:90:40:64:
9f:04:bb:60:5e:3e:b4:ca:f4:3b:0b:21:0d:53:0a:63:f7:cd:
c0:23:92:a3:00:21:14:85:c8:ae:d6:04:5e:bc:cd:6a:c8:6b:
1d:61:d2:d0:bd:12:c4:4a:8d:4d:ae:9c:bc:e6:07:ff:3a:8a:
9e:5a:49:2f:0a:3a:ac:5d:ac:16:14:7e:7f:78:39:08:91:48:
8c:e7:3c:4e:c3:20:79:4c:34:7f:45:ce:66:ec:d4:43:b7:1e:
b5:74:b8:2e:57:16:69:11:a7:f5:75:26:44:03:44:ed:5b:70:
85:f7:33:ee:d0:51:9c:ab:d1:c0:e6:51:1d:38:3b:3b:e4:65:
74:60:2b:cf:37:83:25:b7:19:83:69:47:7c:50:a4:c2:ec:8d:
de:37:50:b3:c9:72:b7:5f:23:07:0b:82:e6:82:a5:9e:a5:1d:
7a:80:f3:11:59:03:8d:a0:20:ad:82:48:a6:6a:15:75:dd:e8:
0d:6f:c4:82:5c:d0:06:78:b5:5c:f9:25:b6:e0:f5:f7:cc:c4:
12:db:e1:a2:e6:29:d1:2c:98:4f:09:09:72:c9:b8:c6:46:b8:
0d:0c:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 07:50:21 2025 by rpki-client