Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
File: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft (raw, json)
Hash identifier: VZKb5myUNdX2UhoRZRru5c/wpJmVdnvYvJBVTlxAwnQ=
Subject key identifier: D8:4E:5A:72:9A:51:E1:9C:33:F1:20:66:0A:81:68:EB:63:F4:4E:21
Authority key identifier: 2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
Certificate issuer: /CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Certificate serial: 01969CE2F26EF7394D927081EDDAA9C44AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
Manifest number: 1521
Signing time: Sun 04 May 2025 20:00:40 +0000
Manifest this update: Sun 04 May 2025 20:00:40 +0000
Manifest next update: Mon 05 May 2025 20:00:40 +0000
Files and hashes: 1: AAnX94FZ-tQzXcJk_elGxuLR8aQ.roa (hash: D5KLLlx/C1ALQLS5LYzAlXJyxWisqcBsxXVALk1wu4g=)
2: KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl (hash: alvHESz9iOWYh/KcEPgNSDZgrTGSaB8rgIEI8ipUrHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:e2:f2:6e:f7:39:4d:92:70:81:ed:da:a9:c4:4a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a369ca9ba84ad847d49d31e27465faf57bf28e4
Validity
Not Before: May 4 20:00:40 2025 GMT
Not After : May 5 20:00:40 2025 GMT
Subject: CN=d84e5a729a51e19c33f120660a8168eb63f44e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:db:54:96:14:49:28:8f:90:c0:2c:ef:1f:
36:a3:f9:ef:e5:4e:63:76:ee:08:2f:5e:e1:65:6d:
b0:12:04:4f:6d:28:38:35:92:13:19:13:0b:0b:a5:
dc:ca:40:9a:92:a5:43:a1:2f:83:ee:66:2c:2b:4a:
6f:93:82:bf:74:1e:ee:72:ef:bb:19:db:c3:4f:59:
fe:fb:7b:84:d7:64:42:16:fb:fb:7d:5f:33:31:8a:
c0:61:fc:ce:05:d7:6c:5e:ed:d7:67:d0:80:2a:74:
0e:bd:cd:6d:72:26:eb:6a:94:15:b1:85:55:bd:2c:
90:4c:6c:b0:be:62:20:3b:a8:7f:e1:a7:f8:8d:31:
b8:2a:46:02:5d:4f:05:ad:3c:5c:4f:21:4c:1e:10:
74:15:a3:d0:09:e5:91:15:9e:ed:0f:45:17:e7:0b:
0c:0e:64:4b:5c:c1:ee:df:cd:62:38:8e:2e:82:07:
0c:a6:a7:ec:de:b3:c2:76:82:c0:fe:0e:a0:be:e5:
73:8c:08:fc:81:9d:64:56:ab:39:0f:44:13:41:19:
6a:64:62:12:0f:49:26:cb:99:e6:69:4e:48:1b:f9:
d3:4c:46:0a:9e:57:8d:81:f0:0e:6a:7a:ac:c0:26:
0a:8b:c2:95:60:b0:71:a3:f1:f3:f0:10:f4:ef:83:
93:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:4E:5A:72:9A:51:E1:9C:33:F1:20:66:0A:81:68:EB:63:F4:4E:21
X509v3 Authority Key Identifier:
keyid:2A:36:9C:A9:BA:84:AD:84:7D:49:D3:1E:27:46:5F:AF:57:BF:28:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a0b266-3c9e-4e0c-8a6d-5895b69d189e/1/KjacqbqErYR9SdMeJ0Zfr1e_KOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:50:0f:5f:fa:3a:eb:85:43:67:ab:a7:25:a1:a2:1b:a6:b4:
99:e8:04:8c:95:84:d6:54:ff:07:07:2a:83:65:a6:bc:62:b0:
99:5d:32:2e:0c:0b:25:c0:b4:d9:da:17:d0:f9:e9:d1:d0:4f:
7b:0a:2a:33:74:e4:58:38:2f:c8:88:52:57:cc:d7:30:ae:93:
3b:dc:26:9d:c3:36:c8:8a:1c:51:79:36:ed:9a:ad:1e:d7:fa:
ff:d8:65:f7:bc:53:14:91:fc:c9:80:bd:3c:43:ff:8a:6f:54:
a0:af:fb:6e:68:fe:50:1f:82:75:ba:6a:9f:f2:7c:26:aa:0c:
0f:41:37:3d:b2:ad:c9:e8:c3:30:40:c6:de:79:94:f4:8d:f8:
d3:66:15:ad:8e:27:f4:dd:9d:02:7a:6d:15:8c:51:07:a2:7a:
0e:76:a0:a8:6c:8d:b8:7c:f5:cb:7e:2b:f7:8e:b0:1b:39:d3:
18:47:e2:5c:a0:75:06:9b:d0:e6:51:d6:db:92:a5:51:36:8b:
de:6a:fb:bd:b9:5b:5e:a8:b2:64:14:d6:67:79:24:b9:58:91:
9f:f1:cb:eb:b4:93:31:84:e7:c6:01:38:39:47:97:f5:5f:6a:
65:a5:e1:ae:e2:b0:69:1a:f7:80:c1:93:5b:6e:66:5f:4f:5a:
73:6e:6a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:30:26 2025 by rpki-client