Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
File: klPiFMjlpvQTRb5oL2gmVbGr6ls.mft (raw, json)
Hash identifier: rnqUjDLyRg0JWOhpEOAPyNNKmlxueBcxbGDpZHH1EPo=
Subject key identifier: 67:77:A8:38:19:AF:44:8A:E4:5C:0B:AF:B3:35:D1:5B:34:36:28:5A
Authority key identifier: 92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
Certificate issuer: /CN=9253e214c8e5a6f41345be682f682655b1abea5b
Certificate serial: 0196B6D9808283D80067878A4956B57FBBEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
Manifest number: 04EC
Signing time: Fri 09 May 2025 21:00:29 +0000
Manifest this update: Fri 09 May 2025 21:00:29 +0000
Manifest next update: Sat 10 May 2025 21:00:29 +0000
Files and hashes: 1: g9a2AgSYQsELLiSB_-OegEcbQ9I.roa (hash: ImJVXRp/ldmW9cQsi6+awLuGwVI0Qm+zTXoZ5uHaLy0=)
2: klPiFMjlpvQTRb5oL2gmVbGr6ls.crl (hash: zIgiPdFSF4Fd0n6czIjOdwCJdqvEGfy54i/56YeHbQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 17:53:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:80:82:83:d8:00:67:87:8a:49:56:b5:7f:bb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9253e214c8e5a6f41345be682f682655b1abea5b
Validity
Not Before: May 9 21:00:29 2025 GMT
Not After : May 10 21:00:29 2025 GMT
Subject: CN=6777a83819af448ae45c0bafb335d15b3436285a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:98:ba:38:98:18:1f:d1:69:70:4a:11:a0:f5:
96:23:c2:f7:cf:8a:e0:38:94:23:a3:85:2d:52:24:
56:bb:e3:c4:d1:10:2f:4f:f3:43:c2:2f:43:b5:03:
67:78:a3:5e:c5:de:71:af:06:76:8f:bc:78:b3:c3:
d3:21:e0:3c:34:c4:6f:57:1d:15:45:8e:ae:60:15:
c9:45:f6:b1:b6:88:31:78:f3:bf:14:09:c8:84:cb:
ee:34:32:f0:42:93:e2:51:cf:ea:da:a5:63:3e:8e:
e5:a2:45:57:82:56:21:a2:1d:0e:09:d3:fd:88:42:
be:75:d7:29:ce:12:21:79:a6:c4:df:12:6e:d5:08:
f6:51:44:7d:d9:2e:c4:5e:cf:82:4f:87:70:44:c7:
cc:51:4b:40:0b:d3:12:bc:81:1a:43:16:f3:ec:52:
e5:42:ce:2c:6b:44:f7:2e:cc:db:5a:6c:9c:96:71:
36:29:8c:09:b1:6a:3c:82:45:1f:ca:4c:d3:d6:3c:
72:1b:d0:fb:82:a4:fb:49:45:85:8c:30:32:d2:3d:
be:eb:ac:63:e5:0d:14:5e:26:d4:59:e6:82:f7:ee:
1c:74:5e:6b:6c:cc:55:1a:59:ca:36:7d:a9:6d:7d:
81:a7:2e:73:4c:88:ba:06:60:b6:bc:77:05:4f:8b:
24:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:77:A8:38:19:AF:44:8A:E4:5C:0B:AF:B3:35:D1:5B:34:36:28:5A
X509v3 Authority Key Identifier:
keyid:92:53:E2:14:C8:E5:A6:F4:13:45:BE:68:2F:68:26:55:B1:AB:EA:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klPiFMjlpvQTRb5oL2gmVbGr6ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/51a4a3-7304-4613-8a80-ca3b1cac69c7/1/klPiFMjlpvQTRb5oL2gmVbGr6ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6a:b8:bb:bd:88:c6:2d:d8:f1:85:8b:ab:d4:2a:3d:e2:45:
d5:fb:92:b4:5b:8d:2c:9c:69:dd:ca:fa:43:5a:1a:71:16:d8:
1a:45:36:33:35:15:78:fd:8f:ce:83:98:31:6d:ff:80:ea:c9:
cc:8f:c0:0c:f5:68:80:ed:49:a0:62:d0:c1:39:cf:87:0e:5c:
2c:fb:3e:cd:f2:83:cf:b3:7f:2a:4b:56:63:69:82:02:c3:6a:
d9:fb:6d:aa:3d:45:d3:4c:8d:e8:62:06:33:7b:70:dd:4f:cf:
1a:5b:18:3b:0b:3e:b7:04:a0:9d:7d:a4:f5:27:15:24:8a:b6:
e6:c9:1a:01:52:ac:3f:9c:f5:a2:8b:cd:29:99:7a:d1:74:a4:
7f:b9:13:7f:82:76:44:6e:bc:4a:94:bb:66:15:51:22:bf:54:
a5:ff:76:26:78:d9:c9:e0:4c:88:71:75:79:2f:a1:53:4e:3f:
13:ac:10:db:4c:7d:ef:ed:88:c0:25:9f:e5:23:84:d2:74:8b:
99:cf:ce:a2:b1:40:38:0a:e1:41:fa:1e:fd:ff:5b:3e:57:84:
ac:75:c5:ad:83:20:e4:08:93:e8:0e:5a:c2:69:0d:e6:52:bd:
23:f4:ce:fb:8f:bb:b9:6e:7b:a8:51:df:4c:b0:88:24:94:e8:
ff:26:5d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 00:28:55 2025 by rpki-client