Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
File: kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft (raw, json)
Hash identifier: Ye+RNi01ORR8/dJdICWZ7uPNvO7IToaJ0lWgKSx5eek=
Subject key identifier: 10:3D:EA:61:73:14:31:DB:23:EE:53:23:6B:72:51:60:76:FD:2D:B9
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 0196AD9F727190624C9FDF0151E97A920F3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
Manifest number: 1277
Signing time: Thu 08 May 2025 02:00:29 +0000
Manifest this update: Thu 08 May 2025 02:00:29 +0000
Manifest next update: Fri 09 May 2025 02:00:29 +0000
Files and hashes: 1: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (hash: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=)
2: XtIL7quorkF1D-_EHiY0b7NsohQ.roa (hash: q5vGrOEbLzDUn3MKsUHJKxeeKv09uan8ihtlp9ven8o=)
3: kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl (hash: 7vjxwYypShsYIrocpccnHbfzzIO26LMN/omIobqs3+I=)
4: rLGKVyUKBREDsm9aK6Yw80lJkwg.roa (hash: rOtQmfozC5J8XHLeIeIIoLbvmJ2uwQ3sbWfTJEEZWVo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ad:9f:72:71:90:62:4c:9f:df:01:51:e9:7a:92:0f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: May 8 02:00:29 2025 GMT
Not After : May 9 02:00:29 2025 GMT
Subject: CN=103dea61731431db23ee53236b72516076fd2db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:98:2f:12:81:5f:3e:37:ac:f4:fd:f5:8c:80:
b7:1b:71:01:cf:55:80:27:7f:c2:3b:b4:74:a6:e7:
02:85:cf:f7:41:d9:c7:3b:74:2a:c7:ec:e3:64:08:
41:82:aa:34:f7:52:4d:03:c7:6a:b9:53:76:34:65:
43:3e:ba:cf:86:c8:84:8e:fc:5f:4c:b4:07:1e:b0:
24:10:24:ab:cd:28:e6:7b:f3:77:5f:45:70:92:63:
39:95:36:a3:d9:65:2c:4a:28:03:2e:04:a6:29:d4:
b3:42:5e:42:62:04:dc:b9:bb:71:02:82:04:3a:67:
75:68:4b:69:26:c2:19:47:fa:a3:39:34:21:79:14:
19:56:82:85:05:ab:90:78:55:81:92:9a:c9:15:f3:
e4:12:99:89:fc:bf:ea:f6:c8:d9:db:d8:7f:11:f1:
88:ab:13:a7:86:cd:b9:2d:3d:d7:43:2e:be:1a:13:
fa:d7:68:45:21:74:1e:fd:fb:e3:a4:b2:8b:a1:d8:
82:b7:75:77:f9:97:32:0d:6b:10:e8:8a:b9:50:77:
c6:61:51:4d:59:7b:1e:6d:e9:a0:ac:aa:e8:62:7c:
5f:c1:95:0b:dc:d1:26:30:c3:11:8a:9e:fd:8e:66:
1e:5a:b8:94:df:c7:11:c0:28:03:9e:bc:5c:21:a4:
a3:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3D:EA:61:73:14:31:DB:23:EE:53:23:6B:72:51:60:76:FD:2D:B9
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:43:7c:89:0a:58:89:80:e9:3e:0c:8f:d3:90:b1:fa:bd:d7:
2e:06:92:b4:91:38:e1:23:10:50:36:11:c8:6b:aa:84:10:94:
1b:85:d7:a4:88:50:e2:84:9d:84:9c:2f:f4:94:15:0f:2c:24:
b0:5e:f4:e3:40:16:a6:d2:b2:6c:28:fb:80:a4:0e:a4:e8:25:
74:f5:a1:1a:37:99:3a:ea:23:a3:b5:9f:9d:9b:61:9a:08:46:
92:83:a6:99:af:f1:66:68:50:ec:e0:15:1d:2c:ba:08:58:59:
a8:0b:fc:06:66:f7:72:aa:78:d3:53:5f:55:d2:4b:f8:d4:3d:
b5:ca:c6:03:60:fc:6a:50:fa:0e:8b:98:ce:9e:60:90:86:b2:
99:7c:b4:99:2e:c4:fe:e9:87:f8:96:25:3a:e8:49:68:48:d6:
db:d9:52:3f:d5:38:96:12:06:17:36:02:31:cb:75:44:81:de:
86:ed:88:80:0a:77:3e:83:dc:c9:04:e0:6c:52:22:95:58:69:
cd:69:af:ad:0d:55:16:1e:1d:91:ff:47:b3:9e:1b:32:31:20:
04:1f:66:ef:59:ff:c0:59:58:4c:0e:c1:c6:37:bf:de:06:9d:
d7:fe:1a:c8:dc:e8:2e:6d:ec:dc:bd:06:b5:be:6b:9a:b3:bb:
a4:53:33:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 09:18:42 2025 by rpki-client