Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
File: kdjDKnA5cqrqCToB-N7fV_lnVXU.mft (raw, json)
Hash identifier: Xn2QW3THZR6G817jKLgaZZaHeJVIlDAIyxAsz/57mvI=
Subject key identifier: B7:D9:9F:9C:38:6C:A0:27:2A:DF:1F:55:B4:7E:0D:40:9B:DF:EA:E2
Authority key identifier: 91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
Certificate issuer: /CN=91d8c32a703972aaea093a01f8dedf57f9675575
Certificate serial: 0196BE5C9F5165BB0080FDD866B5A8838FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
Manifest number: 1535
Signing time: Sun 11 May 2025 08:01:03 +0000
Manifest this update: Sun 11 May 2025 08:01:03 +0000
Manifest next update: Mon 12 May 2025 08:01:03 +0000
Files and hashes: 1: aJJ-YdVMN1blRA6zgwpwFOSytEA.roa (hash: 18Fas5Pt/vlUe10SXqZ/nCZNIMF4HTl3m3WAOZlwA4Y=)
2: kdjDKnA5cqrqCToB-N7fV_lnVXU.crl (hash: QWgdisUg8IFFYYUVWCQUaP6JAHFOlqBADqKMRmEEodc=)
3: tAP5YUU5DttldDjJZneQqbjMnns.roa (hash: Wr2DWhImWg05UEtM87fECNOHzZETG/9GHlcwfpi8dUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:9f:51:65:bb:00:80:fd:d8:66:b5:a8:83:8f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d8c32a703972aaea093a01f8dedf57f9675575
Validity
Not Before: May 11 08:01:03 2025 GMT
Not After : May 12 08:01:03 2025 GMT
Subject: CN=b7d99f9c386ca0272adf1f55b47e0d409bdfeae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:bb:1e:0b:ee:96:b9:2b:0b:b8:72:e8:7b:
8e:63:a3:31:ea:00:c4:66:18:8d:3f:24:30:a6:9e:
5c:ab:58:2d:5a:b3:68:8a:d9:30:1b:42:e2:59:80:
89:ec:c2:8e:69:be:eb:a9:aa:8d:e3:2a:cf:0a:6a:
49:44:40:46:03:c6:49:73:59:a6:0e:1c:da:4c:3c:
7c:6f:e2:ee:55:29:59:af:31:7b:c1:79:1a:46:bd:
2d:0b:ea:06:d8:e9:45:e0:17:3e:a5:95:6f:c7:4b:
1a:9c:df:5a:02:ed:a7:5a:42:08:db:b1:38:21:42:
c7:0b:42:5e:25:55:20:65:bb:06:dd:13:00:f1:e2:
99:4c:76:15:8b:4b:a6:6d:c3:85:c1:93:7e:03:a3:
f2:a2:db:e4:17:1d:d0:6b:97:d7:ae:47:92:aa:79:
cc:2b:a5:b1:bf:e9:f6:da:55:12:32:bf:63:90:bb:
b7:3a:06:c0:73:a4:58:03:26:ba:7d:f6:41:2b:b0:
1e:74:17:ed:59:ea:ac:d8:32:13:62:b5:65:fb:41:
92:cb:79:72:b7:19:8b:88:ed:82:c4:3c:24:83:5f:
bf:17:4c:b1:30:5c:9a:16:bb:a1:f7:eb:65:c3:bb:
69:32:f0:b8:93:56:e5:4d:e4:17:bf:e9:7d:d1:80:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D9:9F:9C:38:6C:A0:27:2A:DF:1F:55:B4:7E:0D:40:9B:DF:EA:E2
X509v3 Authority Key Identifier:
keyid:91:D8:C3:2A:70:39:72:AA:EA:09:3A:01:F8:DE:DF:57:F9:67:55:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdjDKnA5cqrqCToB-N7fV_lnVXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e816d-d8ec-437c-986a-3c12781e202d/1/kdjDKnA5cqrqCToB-N7fV_lnVXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c6:15:bb:39:ec:ab:e4:56:be:86:59:81:5e:1b:bb:e6:08:
d3:27:d9:7d:9f:ac:0d:f7:64:e7:f5:ba:4b:2b:29:c1:6b:07:
66:9b:d6:90:26:50:0d:6f:4c:2b:ef:4d:b7:c0:fa:22:0e:f0:
4f:5e:c4:f4:fb:6d:0d:7f:e4:f9:ef:d0:a6:f0:86:b1:d5:2c:
b9:35:bb:80:91:8e:9e:ce:ae:18:5c:2b:11:e4:cb:d4:dd:86:
8f:a0:ca:32:48:22:b3:6d:0c:97:09:ee:71:cd:da:e0:13:1a:
5a:44:04:e2:35:d7:17:66:ca:a6:32:e8:e0:34:c0:d2:64:f6:
2d:28:42:39:37:64:8d:ce:a3:6e:d0:35:e9:99:b3:21:ca:7a:
be:f6:fb:2e:11:d7:23:97:25:4e:8a:76:9f:8d:cd:f4:9c:35:
7c:4c:f9:53:43:3f:1a:f8:ab:b8:88:7f:a6:8f:bf:bb:27:40:
ad:82:3c:45:48:e1:24:02:c5:66:e2:5a:6b:3d:0c:e7:a8:59:
24:10:2b:a4:84:28:17:c6:d9:a2:8e:eb:b1:35:8e:b3:7a:4a:
2c:e6:bc:a7:05:c6:0e:5c:6d:10:1d:44:ad:b6:38:17:90:fb:
24:2f:51:ed:07:3e:1a:19:f9:c7:98:32:2c:ff:57:d9:4b:58:
74:6f:85:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 17:05:41 2025 by rpki-client