Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: 87186y6CRfI3761OAXJPkTpSH3EibBehQBpJiYHSOJk=
Subject key identifier: F9:48:7F:6F:E4:FF:55:91:AA:BA:DD:9C:EB:B3:B4:70:1B:71:83:1F
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 01969DBE8C133A5D766241368ECC6B39D6F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 090D
Signing time: Mon 05 May 2025 00:00:32 +0000
Manifest this update: Mon 05 May 2025 00:00:32 +0000
Manifest next update: Tue 06 May 2025 00:00:32 +0000
Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=)
2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: dsaf2F3u/cceK68oxehNPBS4UugjNSUQeiOreYURSfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:be:8c:13:3a:5d:76:62:41:36:8e:cc:6b:39:d6:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: May 5 00:00:32 2025 GMT
Not After : May 6 00:00:32 2025 GMT
Subject: CN=f9487f6fe4ff5591aabadd9cebb3b4701b71831f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:39:17:bd:e3:0b:75:6f:ca:4a:47:ae:04:dc:
d6:53:5c:16:c2:91:48:35:29:4f:48:e5:03:b7:79:
bd:2d:d3:ab:74:29:de:0e:51:e9:82:57:2b:9a:8e:
c3:ff:78:ee:6b:bd:3b:bf:4a:88:18:44:3f:d0:1d:
2c:3b:5e:2d:ea:4f:94:86:17:61:25:8d:e0:8b:0b:
f8:b5:10:6e:51:29:27:61:90:be:1c:51:d8:ea:ba:
f1:4a:d6:d3:64:12:cc:bd:a6:5c:b4:80:5c:55:52:
30:43:a8:b1:d4:55:6f:cf:69:02:a6:28:95:83:d9:
01:25:36:c5:08:6c:04:c7:7a:ba:04:d9:7f:f4:b3:
40:3c:bf:f9:f3:52:22:ad:8a:69:49:55:76:68:24:
13:bf:5e:b2:fc:31:e2:b6:2e:a4:c8:22:9b:04:94:
0f:1f:2d:bc:59:1e:30:26:3a:a0:58:44:d9:0d:10:
26:71:9c:45:9d:6e:be:db:82:3e:2c:ff:31:36:fc:
d6:01:53:60:72:10:a7:f8:f0:53:20:0c:55:f9:f7:
b4:95:72:fe:96:c1:56:d2:b5:3f:31:cb:22:d1:55:
14:2f:f3:c1:65:2e:f7:07:d5:9e:17:0f:8e:2e:1d:
f0:0b:c7:84:1d:b5:bc:49:fd:5f:c1:2c:47:69:a5:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:48:7F:6F:E4:FF:55:91:AA:BA:DD:9C:EB:B3:B4:70:1B:71:83:1F
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:11:39:7c:84:2e:8d:65:c3:82:78:e3:7c:f7:3e:98:7a:1c:
71:b2:e6:9c:0a:b2:2d:e7:56:d5:9d:cd:6d:b8:0e:71:80:e9:
72:bd:db:14:a3:27:0e:14:fc:45:a6:74:c1:3b:38:df:6e:a0:
8c:f8:50:48:12:0c:49:44:69:ec:a7:4e:d0:df:ca:f6:d6:c4:
3d:90:f7:6a:4d:16:0d:37:23:b7:e7:17:70:cc:72:12:ab:e8:
96:93:31:90:61:33:ba:70:ba:94:2b:7d:b9:5a:bd:46:f4:d7:
f1:31:0b:24:56:23:53:7c:ed:9a:fa:c3:be:c4:16:c6:90:b0:
1b:3d:8d:19:0c:8c:ad:36:61:71:d8:56:18:4d:3c:34:2b:19:
3e:2f:fc:72:7b:21:ed:ed:c6:7c:ee:cd:31:02:f4:7a:c5:ba:
4b:dc:a1:42:1c:cf:39:09:92:17:41:bc:98:52:bd:0d:b8:cd:
46:ed:0e:8b:86:ff:8b:b5:b5:ff:a3:34:82:60:87:bc:45:8d:
2a:21:10:e2:ce:a9:c5:0a:cd:40:97:3c:2e:d0:b8:58:e8:f5:
2e:fb:53:20:20:92:eb:df:4f:ed:97:b3:14:35:b0:bd:be:e9:
71:97:35:b9:0a:e2:d9:2a:7a:50:de:a2:cb:73:13:68:2e:7a:
51:ae:92:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 03:44:21 2025 by rpki-client