Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
File: kGSznoDKHN5MrcC8jqK0HqbSfHY.mft (raw, json)
Hash identifier: I0eUFdxZgLuNB5uiRKzfTMNxoZuNG9UsdB0OF42S1RQ=
Subject key identifier: CC:36:00:82:FF:96:FC:12:74:20:26:56:15:60:32:51:03:39:02:5E
Authority key identifier: 90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
Certificate issuer: /CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Certificate serial: 0196B4B4878435080E5B234096771CA38A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
Manifest number: 1531
Signing time: Fri 09 May 2025 11:00:51 +0000
Manifest this update: Fri 09 May 2025 11:00:51 +0000
Manifest next update: Sat 10 May 2025 11:00:51 +0000
Files and hashes: 1: FKW3Mb8twN-jkMzdiCWs_x2VU-o.roa (hash: zIG0SkUcjt7d+bJLn+B2ubk7D8sMo7IcD8uDUAn5toQ=)
2: kGSznoDKHN5MrcC8jqK0HqbSfHY.crl (hash: ZqQo9pqv77/ZobvpEEchLOnRxnxImQsQet0TJJcsLXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:87:84:35:08:0e:5b:23:40:96:77:1c:a3:8a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9064b39e80ca1cde4cadc0bc8ea2b41ea6d27c76
Validity
Not Before: May 9 11:00:51 2025 GMT
Not After : May 10 11:00:51 2025 GMT
Subject: CN=cc360082ff96fc1274202656156032510339025e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:21:8d:64:dc:8b:64:c5:ff:f0:d8:47:19:
e0:9d:dc:ff:21:6e:2d:3f:23:b6:db:ed:15:d8:84:
65:a1:fa:8f:14:6d:53:cd:6d:9c:05:4b:de:4d:c0:
bf:09:e9:94:05:ed:e5:8f:68:cb:0e:51:8d:ac:c1:
28:08:70:36:70:99:3a:0b:29:37:c3:f3:d6:ff:72:
72:eb:25:d8:6e:d8:ab:e7:0b:1a:21:7c:ac:ee:84:
e1:7b:a4:4e:a7:bb:f6:bf:ab:13:b5:99:2b:9e:d1:
01:0e:dc:db:5e:56:b7:b2:ff:ff:9f:6d:66:a1:67:
97:5d:ca:ef:cc:8a:44:79:0b:0d:e6:f7:23:2e:cb:
2f:bc:00:02:34:d4:1a:04:b8:39:49:a9:22:42:a4:
77:fb:16:06:08:58:7e:22:6d:6a:42:4a:ec:2a:af:
23:e9:a2:54:d9:22:cd:7d:aa:76:05:01:a1:41:d3:
79:9f:b1:20:08:08:95:8c:4f:e8:7c:36:3a:26:17:
8e:2d:97:d6:bd:0c:1e:c9:28:24:2d:5e:17:2a:39:
fa:f8:c7:b1:a3:56:f5:b0:45:c7:2a:e9:dc:77:46:
54:17:08:d0:83:17:16:f7:49:11:a1:2d:e9:c6:27:
a3:a5:db:28:28:a4:46:c8:8f:ac:eb:49:d1:85:d9:
97:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:36:00:82:FF:96:FC:12:74:20:26:56:15:60:32:51:03:39:02:5E
X509v3 Authority Key Identifier:
keyid:90:64:B3:9E:80:CA:1C:DE:4C:AD:C0:BC:8E:A2:B4:1E:A6:D2:7C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGSznoDKHN5MrcC8jqK0HqbSfHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/e7723d-fe9b-4294-bfca-3dda23cbde59/1/kGSznoDKHN5MrcC8jqK0HqbSfHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:35:d2:fc:49:4d:c6:e2:df:09:48:79:37:35:d2:81:4c:77:
41:f5:a3:a8:c4:92:de:8a:02:24:02:7a:2c:e2:b6:68:c1:f4:
ce:b3:d5:30:34:1a:0e:31:90:a5:3c:2d:63:4a:0d:f2:4f:67:
f9:f7:c1:00:58:4b:3a:3a:76:8d:b4:d6:ed:5f:f1:f9:e5:5b:
ce:8b:da:16:5e:f4:46:7b:55:0e:3c:55:7e:62:8f:08:98:2a:
6a:76:20:0e:7c:a6:fa:16:a2:3f:b3:2d:88:f3:c5:f9:5c:57:
fb:58:31:df:a9:aa:38:cc:98:69:7a:a8:64:62:73:12:ec:32:
f5:83:7f:e8:c6:6a:43:61:9e:fc:0b:56:34:0f:12:22:2d:bf:
0b:d7:6c:ec:c5:5e:39:6a:8e:69:f1:50:ab:95:94:66:26:67:
96:10:6a:ac:bd:13:ec:8f:28:8f:46:85:84:a8:94:e8:a2:3c:
36:76:08:d5:c0:f2:77:b5:10:4f:8a:71:a2:ba:6f:11:b3:10:
5f:fa:53:9e:d4:d5:ac:2d:f2:31:dd:8f:47:d0:2f:de:72:b5:
82:90:c2:7a:7e:14:0c:db:a8:9b:e9:47:28:fa:e7:1b:ea:b5:
20:89:37:30:d9:16:63:7e:a9:0e:b4:21:f2:82:cd:66:83:48:
69:b5:42:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:45:12 2025 by rpki-client