Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
File: KQzE0K1dr8J6pONC-oDjSBToRcM.mft (raw, json)
Hash identifier: N7sG4e6MWqiEhuNiVsWufAPeKLc1g3ha77V3S4mUVWs=
Subject key identifier: 2E:E9:D5:43:04:1A:F3:9D:30:1B:A5:8D:6D:96:14:DC:A4:7F:97:E8
Authority key identifier: 29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
Certificate issuer: /CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Certificate serial: 0196BB23F94C8838500928D8910D9713FC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
Manifest number: 0570
Signing time: Sat 10 May 2025 17:00:18 +0000
Manifest this update: Sat 10 May 2025 17:00:18 +0000
Manifest next update: Sun 11 May 2025 17:00:18 +0000
Files and hashes: 1: 187N4PB5lNzYnkhVyKxTgG2ufTQ.roa (hash: nnFT2Pv1VSMMW5/AFw9H17xWytd4IEI7JaypDZR0hFg=)
2: KQzE0K1dr8J6pONC-oDjSBToRcM.crl (hash: xKtSNDDvY/nYANu531Y09Az9Of/msksVHUi7C+5ITiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:23:f9:4c:88:38:50:09:28:d8:91:0d:97:13:fc:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=290cc4d0ad5dafc27aa4e342fa80e34814e845c3
Validity
Not Before: May 10 17:00:18 2025 GMT
Not After : May 11 17:00:18 2025 GMT
Subject: CN=2ee9d543041af39d301ba58d6d9614dca47f97e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:24:f4:54:ba:7a:12:62:cc:0d:8d:71:12:
bd:91:d7:e8:0c:d7:4f:d0:9d:9e:98:17:35:6c:a0:
ec:16:97:31:46:77:26:5d:1b:2c:7a:fc:4b:25:8b:
96:72:0b:0d:2d:fd:4f:29:7c:64:42:7a:65:d7:dd:
a6:fd:b6:23:29:aa:54:28:54:0f:68:5a:c8:52:02:
0d:f5:2a:a2:4f:fd:15:2f:78:03:a3:f9:e1:07:48:
2a:92:77:5a:0a:a1:fc:76:aa:35:95:3b:7b:63:df:
f8:de:eb:1f:eb:23:23:88:ac:27:04:af:19:bc:cf:
00:54:de:d7:26:75:5b:5a:77:2b:c0:17:71:bf:99:
da:9f:1a:e0:98:db:ce:fa:26:53:b9:cc:a3:52:fe:
ba:b9:3d:9e:01:8d:9f:a8:6a:20:29:36:eb:94:f0:
4a:be:e5:d7:e2:a2:87:71:ce:b5:26:22:b7:45:8f:
d9:32:14:df:03:d2:2b:37:a2:db:d9:5e:10:5e:66:
1a:bb:d3:cc:48:bb:63:a5:9d:ee:1d:e0:cc:92:22:
80:9e:67:1e:9c:12:4e:8c:e3:90:1a:2d:13:ef:ec:
03:99:dc:ab:40:d6:12:c0:10:de:78:50:56:8b:0b:
96:9b:f9:9f:b7:55:56:fb:6c:05:13:d4:81:5a:45:
38:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:D5:43:04:1A:F3:9D:30:1B:A5:8D:6D:96:14:DC:A4:7F:97:E8
X509v3 Authority Key Identifier:
keyid:29:0C:C4:D0:AD:5D:AF:C2:7A:A4:E3:42:FA:80:E3:48:14:E8:45:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQzE0K1dr8J6pONC-oDjSBToRcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/92352f-4051-450e-b3a6-2e0078cee182/1/KQzE0K1dr8J6pONC-oDjSBToRcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b5:d2:07:80:a7:77:68:8a:a9:7f:14:2a:21:5f:c5:fd:aa:
ea:24:fb:f3:d8:2a:41:db:4a:03:a9:32:cc:4e:1e:0f:c6:92:
24:fd:5e:b2:68:7f:e0:f6:af:a9:17:3e:6c:00:d0:e6:31:63:
f3:da:6c:82:34:d8:da:82:d9:d1:60:37:a2:45:82:dc:cc:04:
4d:44:bd:e8:0a:78:f3:fc:46:f7:a0:31:00:15:b4:ec:1e:f5:
94:de:60:93:e0:61:c4:a1:3c:5b:42:5d:60:4c:e8:44:49:0f:
81:ad:b6:63:b4:97:2f:4b:e9:50:b0:11:9b:8b:87:68:65:b9:
b7:85:1b:94:e6:f2:b6:4a:00:78:58:e3:88:2e:5b:2a:f1:13:
e3:8a:d1:b8:97:f6:50:a0:36:df:ce:a0:32:84:6e:6e:b4:55:
53:57:ea:cd:86:9f:b3:83:23:8b:a8:a2:57:e3:9f:43:15:b5:
66:ae:e3:10:2d:a9:c4:3e:16:06:5c:2c:81:43:46:85:fd:86:
a9:e4:3b:f5:95:c1:6a:70:8d:7e:97:3d:a2:e1:9a:64:3a:59:
6d:fb:9f:02:dc:24:74:c6:2c:6b:e0:16:ff:74:6e:b2:a4:53:
e4:d9:ae:df:21:13:e0:6a:ab:3b:21:e1:43:00:93:34:b4:50:
0a:50:10:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:45:15 2025 by rpki-client