Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: jYXQDR85hXlH8G5+qQNWc6oYV1QFPZaWeGap4VGI73c=
Subject key identifier: 4A:BB:55:6E:97:1B:92:AD:F7:F9:63:8F:75:CB:41:68:4E:0E:5F:9F
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 0196B4B433A79029486C20ABCAD8C612EC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 11C4
Signing time: Fri 09 May 2025 11:00:30 +0000
Manifest this update: Fri 09 May 2025 11:00:30 +0000
Manifest next update: Sat 10 May 2025 11:00:30 +0000
Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: EKS9fphy46OrK8qmldEx19o7aK8dbzjau2UmM4/YY9s=)
2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=)
3: M1t61zFriLUhV6w-rpKhVc5pbtI.roa (hash: SMrR4aeWQHwd+VhRNHme2dIKoEpbr73IPaO3PrfJOhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:b4:33:a7:90:29:48:6c:20:ab:ca:d8:c6:12:ec:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: May 9 11:00:30 2025 GMT
Not After : May 10 11:00:30 2025 GMT
Subject: CN=4abb556e971b92adf7f9638f75cb41684e0e5f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ad:95:90:0a:94:fd:91:4e:76:11:aa:70:32:
89:6e:9a:52:30:73:f9:c9:be:c0:dc:ba:b6:c9:43:
ff:d9:e4:6f:51:b4:7c:c8:fa:81:c7:51:58:fd:4f:
ed:e5:70:d6:af:60:6c:e9:08:3d:99:b2:af:73:c3:
f0:b9:73:ad:dd:bf:70:05:e2:1e:1b:b2:bd:1f:cb:
1c:78:be:82:7a:a6:2b:09:68:7c:fe:8d:8f:6e:1b:
1c:25:8e:dd:22:48:af:90:46:56:65:14:d7:eb:5c:
ea:84:36:3b:00:ed:7f:ad:ed:4f:05:3b:d8:62:e1:
57:de:87:a1:7c:98:0a:65:9a:9e:56:91:70:76:d5:
64:76:44:67:bf:80:14:8e:ce:3f:68:8e:9c:b1:f7:
8b:5c:f8:83:31:4c:71:4b:b5:38:42:f4:86:46:13:
00:1d:c2:b5:40:6a:18:ab:63:77:cc:e0:fe:96:0c:
76:31:e6:b8:da:f4:d8:76:d0:dd:86:05:1b:d2:cc:
8b:c2:46:a8:66:f9:6a:d6:c9:21:fb:02:54:4c:8f:
42:c4:61:26:53:d2:e3:ab:58:00:73:42:a3:2e:5d:
46:c1:02:04:ff:c3:ec:3b:85:0f:6e:7c:af:9e:af:
5a:83:df:29:24:88:2f:be:76:bc:69:49:0b:f3:f2:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BB:55:6E:97:1B:92:AD:F7:F9:63:8F:75:CB:41:68:4E:0E:5F:9F
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c7:e4:af:bc:d5:fa:57:71:23:cd:7b:19:19:6a:8e:42:b2:
0b:cc:85:47:17:3e:0d:81:63:c4:a6:53:bd:10:66:a8:44:89:
09:a7:9e:31:e0:88:4c:4d:23:58:a7:de:4f:e0:90:a5:21:a3:
31:ed:da:5d:fc:d2:d5:1e:77:e9:35:9a:d5:8c:86:15:de:89:
95:7b:a3:59:39:24:7b:dd:df:f7:96:da:0c:0e:cd:0d:5e:63:
b8:c0:1b:4d:ea:2b:85:10:3b:60:09:b3:0a:97:2d:f3:f0:82:
e0:d1:31:47:ab:ac:85:d9:30:55:cf:c0:aa:f6:32:da:62:80:
78:fe:02:f3:bf:f7:c4:36:54:65:d9:bb:13:e9:b4:31:d4:38:
50:c2:eb:75:4b:f3:11:60:06:47:b8:8d:8b:d5:50:e6:61:fc:
f3:3a:89:c5:cf:93:01:c5:03:82:84:67:aa:a9:c6:77:fd:30:
3c:98:c2:51:ad:99:12:83:5e:e5:22:3c:bd:72:ff:18:71:b2:
d0:d9:ac:e1:4b:dc:83:8b:1e:a5:ee:ba:0a:5b:c3:d7:7f:21:
9e:27:05:0a:2f:9a:34:22:d2:4f:83:6f:cb:40:2c:c7:8d:d0:
34:2a:2c:ac:6b:5e:0c:6e:bc:f0:dc:69:2b:7b:5e:df:86:59:
7f:2a:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 19:12:40 2025 by rpki-client