Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
File: kPwsEuoXAhuorOBiGJfwhW2sJVk.mft (raw, json)
Hash identifier: 1+ZWGiPJVRvDs9wsUvYcl/PNUYD+0hqGQp9E7wkt0Ig=
Subject key identifier: AC:14:A2:ED:49:A0:9C:F9:BF:A4:39:5C:CE:BE:D0:F8:9E:FD:DC:44
Authority key identifier: 90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
Certificate issuer: /CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Certificate serial: 0196A46519A1EC8DF366F511A5BC2330D17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
Manifest number: 04A1
Signing time: Tue 06 May 2025 07:00:11 +0000
Manifest this update: Tue 06 May 2025 07:00:11 +0000
Manifest next update: Wed 07 May 2025 07:00:11 +0000
Files and hashes: 1: 1UaL0XGyomh-a1T0dddj6cyPZOw.roa (hash: rWkejV4n3vRWEBULaZLAottNh8bz5UFXPG009n2D40A=)
2: TJKRQbRuvDSDZyucPaqU760l18U.roa (hash: gKuY1GA/NcHekZckeHEZ/7H1szBu0AiOQJ9VIhFkajs=)
3: kPwsEuoXAhuorOBiGJfwhW2sJVk.crl (hash: XavFzdwE9qTLuSx+gtGapr/ITpajakyUMwdNXVpGf4Y=)
4: mWYkGMEMrO_nHDH4dqasaNk-p_c.roa (hash: OCHhjAiwakmpsRoIjxkgKbh8p1tQzGvkxI9kPgktEoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:19:a1:ec:8d:f3:66:f5:11:a5:bc:23:30:d1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fc2c12ea17021ba8ace0621897f0856dac2559
Validity
Not Before: May 6 07:00:11 2025 GMT
Not After : May 7 07:00:11 2025 GMT
Subject: CN=ac14a2ed49a09cf9bfa4395ccebed0f89efddc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:eb:df:5d:1d:f2:f8:55:0d:08:bb:0c:2e:c4:
c8:6f:d2:3d:aa:46:72:38:90:8c:0b:c3:50:92:27:
f0:ff:18:96:9d:17:79:51:ef:d3:16:bd:53:85:db:
e2:b9:a1:40:b6:09:8a:bc:02:52:7b:76:cc:5e:95:
4c:bd:ba:87:11:9a:bd:75:88:e8:c8:66:e4:af:36:
78:23:00:ae:61:b9:d6:f7:3f:90:76:30:7b:c3:8d:
d0:9f:0d:99:7b:86:84:3b:4e:0a:96:83:a8:0e:ee:
4b:7f:3c:1d:a9:2a:53:4c:49:c3:bf:cd:da:4a:04:
ab:7a:4b:2e:22:68:f4:03:09:82:20:8c:f1:92:d6:
72:fc:c6:2e:a0:b4:08:77:3d:7e:29:01:40:ba:c1:
18:04:e6:8e:3a:3a:83:1d:92:38:a8:0f:44:8b:de:
13:0e:45:d2:90:80:27:f8:ed:66:ce:d1:12:42:6b:
6b:d6:c7:78:61:6e:a1:9d:64:a6:38:3a:98:8f:44:
d1:62:1d:78:12:84:c4:db:93:9f:8e:a4:dd:dc:2d:
11:72:ff:dc:c8:af:c6:3f:fb:74:11:7d:de:00:c7:
e9:0c:c7:89:ee:06:b9:f0:55:0d:06:86:84:75:0e:
df:b4:f6:49:02:ff:3f:67:4c:c2:ae:c0:5a:08:5c:
bb:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:14:A2:ED:49:A0:9C:F9:BF:A4:39:5C:CE:BE:D0:F8:9E:FD:DC:44
X509v3 Authority Key Identifier:
keyid:90:FC:2C:12:EA:17:02:1B:A8:AC:E0:62:18:97:F0:85:6D:AC:25:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPwsEuoXAhuorOBiGJfwhW2sJVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/951bce-2850-4943-8f00-db2c57f4ef16/1/kPwsEuoXAhuorOBiGJfwhW2sJVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:05:b0:2b:52:2a:82:c8:82:e4:0b:10:dc:3b:d0:e1:d3:d7:
1f:48:de:18:58:50:70:12:87:98:96:bd:93:a5:87:78:da:83:
70:1e:57:36:47:2d:fb:dd:82:04:95:27:4f:dd:29:a3:f8:5e:
4c:e5:33:88:43:f4:ad:b5:80:67:6f:06:30:2b:64:e5:24:68:
15:8d:97:02:2c:32:a7:c7:57:39:2a:80:c6:c8:50:de:35:82:
52:cb:a0:66:09:c9:b0:21:9c:cd:1a:7b:83:36:8e:56:bc:07:
61:be:bc:2d:37:1d:97:bf:9f:8c:37:e9:8e:52:49:d9:61:c3:
fd:4a:04:82:b4:03:8b:7c:fd:d8:a3:22:31:ed:1b:c8:52:08:
18:ce:67:35:e2:9f:30:cf:77:d2:34:96:aa:36:f3:a5:a5:9f:
fe:c9:5d:62:54:4b:fa:95:50:32:82:bd:7f:44:ad:d9:ec:24:
09:90:6e:80:be:a2:1b:4c:21:2a:ab:26:26:73:ca:33:05:69:
a0:d3:d1:34:7c:74:53:4d:a3:15:6d:19:8a:48:aa:c8:3b:b4:
07:43:50:ce:81:c7:58:dc:91:a8:1d:b6:f1:d0:ee:ca:18:e7:
b1:3b:80:82:76:71:84:bb:8c:dd:3d:be:bc:f8:c8:0c:81:b5:
5a:3c:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:46:55 2025 by rpki-client