Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
File: kUqlV8PT0ea38FJcNMwdSIpakpQ.mft (raw, json)
Hash identifier: qZxMMwHKescMoikPu6r1PJoAtV8HDABvpgcMk6VdEek=
Subject key identifier: BC:A6:09:E3:78:E0:68:B6:75:BB:8B:17:A6:CC:E7:C8:E2:79:0D:E4
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 0196C9168326B96B8A0B37C93DBFFD5BDF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
Manifest number: 010D
Signing time: Tue 13 May 2025 10:00:17 +0000
Manifest this update: Tue 13 May 2025 10:00:17 +0000
Manifest next update: Wed 14 May 2025 10:00:17 +0000
Files and hashes: 1: 86J3w2KHwC3IOQFcig1RsCiNiqI.roa (hash: YYIEpXZweId3RWAxfqfUUaYUG93HllQHD6f5j3LzIes=)
2: J_xoJpVlUQZtO5xQ-ZJbdQWL7W0.roa (hash: 6G5GWl1Jw65Lth4hieAeSDHM9k5/dMHA09XCXnp56S4=)
3: _fQHDe_QsKzj39wSIbj-uT5L7fw.roa (hash: z8zH4/OhWjUk6gre54FhJk9W2UZF11eYo2fYY4nmoyM=)
4: hmn_AtvA-Ozxps7hZvX6vOOVyVg.roa (hash: 5jXJ2NBBgkVftUv2ESVvBBtb97mqw/HikDlyo874QWk=)
5: kUqlV8PT0ea38FJcNMwdSIpakpQ.crl (hash: Mnx5+STzL/OO863enU2KltDFSsq2FhfGpdBxGltCxSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:83:26:b9:6b:8a:0b:37:c9:3d:bf:fd:5b:df:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: May 13 10:00:17 2025 GMT
Not After : May 14 10:00:17 2025 GMT
Subject: CN=bca609e378e068b675bb8b17a6cce7c8e2790de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:55:cc:59:a5:f1:69:43:a0:da:91:13:83:
40:fd:78:d1:d1:29:9e:ce:33:58:69:fe:97:a8:1a:
90:20:9f:59:c1:32:a7:5f:9f:11:cd:b0:26:de:2d:
e3:21:5f:bd:f9:3d:e8:fa:ae:5f:c6:61:5d:41:08:
80:75:d9:77:13:21:fa:43:44:43:44:41:6f:88:53:
70:88:b9:48:87:3e:42:e1:8c:ef:76:80:d5:e4:66:
91:c0:d5:76:d3:67:0d:73:56:8c:aa:e1:6f:7a:f3:
54:22:53:8f:5c:6a:b1:27:ca:d5:12:86:ba:bd:32:
5d:34:4b:d3:35:e6:e5:9a:a1:97:ca:6f:b1:48:58:
c9:d0:3c:72:46:3d:93:14:ae:4e:02:26:b1:51:de:
0c:40:c8:bf:d5:fd:a4:6d:c0:d0:27:42:78:d4:5d:
c9:80:93:73:74:c7:c7:ee:17:6a:2b:de:c0:fa:0e:
8a:50:eb:ee:40:c8:6b:de:e4:2b:36:1b:2e:af:6d:
a2:a6:17:ed:0a:33:50:c8:27:a8:ad:67:15:09:c4:
00:c1:a1:71:d3:b3:90:f7:7f:d9:6c:06:bb:a9:7b:
a8:c1:a1:01:d3:d5:23:ac:64:f4:dc:c9:1f:95:c1:
44:ba:9b:1e:10:66:81:73:d4:18:cd:64:e8:1e:02:
0f:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:09:E3:78:E0:68:B6:75:BB:8B:17:A6:CC:E7:C8:E2:79:0D:E4
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:36:0c:c1:f5:63:c3:ba:0f:f4:18:3e:79:0d:69:06:f5:48:
54:d8:53:d3:61:91:16:43:b8:98:5b:f2:14:29:cb:95:78:41:
0e:ce:84:3c:bd:46:2a:f4:ba:16:53:02:6b:74:66:b6:30:74:
e4:ed:5c:1c:77:12:72:16:09:d6:92:74:f1:e2:f6:a1:04:14:
dd:59:e9:79:29:a8:fa:3d:97:96:d8:3a:83:37:43:75:1d:61:
5f:1e:4e:c5:6a:14:9e:41:bd:b8:8c:e2:c3:11:68:2a:51:c6:
b0:8b:3c:fa:93:86:d5:3c:65:87:57:ea:2a:86:5a:29:26:ff:
31:ee:b5:cc:91:06:e4:1d:e0:d6:9f:e6:57:bc:9e:23:66:49:
32:05:d8:36:e0:f5:fe:e2:0c:0d:91:16:09:c4:c4:28:9e:13:
54:ac:89:3a:36:ce:7c:60:19:4e:7c:44:72:c5:82:07:b5:88:
93:8a:91:58:a7:96:93:92:2f:1e:0a:a2:83:47:91:8c:1a:f3:
99:ad:8c:c0:ac:88:46:c7:50:a3:e3:1f:80:e0:3a:fb:36:7e:
2f:69:4d:08:4a:08:e2:72:24:46:a8:22:25:00:ae:16:ed:ec:
81:7e:81:be:5f:44:1d:30:a1:b1:7a:39:0c:ea:6e:d1:f2:7b:
d2:c9:3a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 16:13:35 2025 by rpki-client