Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: 9j50pdnsCMfpmPtJ6OLIfoM5UfbAnIoozccTSxsbQ5M=
Subject key identifier: A8:E9:9C:9F:8C:77:45:DF:12:6E:1C:DC:7B:35:5F:B3:A9:FB:92:03
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 0196B59014A109A3A12D0441BFEC3280C566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 1546
Signing time: Fri 09 May 2025 15:00:40 +0000
Manifest this update: Fri 09 May 2025 15:00:40 +0000
Manifest next update: Sat 10 May 2025 15:00:40 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: 8FoLsjl2ds7QGvVETDVrlm/OGzrswpL1+GFkorHrg68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:90:14:a1:09:a3:a1:2d:04:41:bf:ec:32:80:c5:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: May 9 15:00:40 2025 GMT
Not After : May 10 15:00:40 2025 GMT
Subject: CN=a8e99c9f8c7745df126e1cdc7b355fb3a9fb9203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:67:19:ee:09:b5:4a:fe:db:71:45:a7:ac:
bf:9e:2e:89:3b:1c:a5:74:23:09:f7:d4:04:02:dc:
08:eb:2a:32:bd:be:bb:cd:64:4b:9a:1c:3b:c8:d4:
ea:12:93:b2:6f:62:74:77:a6:58:12:57:44:63:d3:
4d:03:d4:75:1c:4b:8b:35:32:3d:6e:86:54:b2:23:
9f:43:38:e2:31:5c:1b:4d:a1:5a:57:b5:b6:75:d6:
fc:ab:3e:5e:27:f7:a0:12:87:e2:3c:36:2b:ed:04:
52:49:50:e1:5d:cd:76:a1:dc:2d:17:ac:0d:21:76:
72:76:47:2e:c2:df:8a:32:f3:c1:6c:71:22:ec:fd:
d6:9b:c3:99:d3:65:05:50:8a:63:dc:e1:b6:df:8c:
f6:af:d9:cf:ff:cc:ff:b0:90:17:f1:84:7f:f7:23:
d9:a0:3d:b0:da:45:7a:fd:b8:aa:66:d3:94:bb:c2:
c2:f7:f4:e9:9e:8a:af:a6:5a:a8:ef:0b:d2:0c:f3:
a0:ff:3e:f7:49:40:68:ad:0b:b0:0e:c1:03:06:d8:
e2:b5:9c:04:0b:0e:a5:11:40:9e:67:bd:28:be:f3:
7e:60:aa:8d:a2:88:9d:0a:5b:7d:09:7e:36:ff:ca:
12:df:da:72:bf:01:d9:cc:cd:f7:cb:e9:95:10:6a:
3d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E9:9C:9F:8C:77:45:DF:12:6E:1C:DC:7B:35:5F:B3:A9:FB:92:03
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e2:0c:a4:37:5a:4e:ed:07:43:e3:ab:ef:0a:06:32:46:ce:
06:16:da:46:b8:a7:61:d3:a3:dd:3a:56:7c:9b:c2:cd:17:59:
b3:bd:a6:aa:eb:08:fe:63:73:70:7b:08:d0:2a:fe:70:98:b9:
ca:18:c8:5b:87:c2:bb:79:d6:fb:81:30:a5:6d:3d:94:ea:e0:
a6:2f:ac:c7:79:e8:5b:1d:0e:f2:e0:b7:39:2d:f2:2d:98:41:
ae:13:04:55:a1:26:8a:27:54:41:04:e1:c7:b3:59:bc:cc:8c:
d6:04:6c:66:70:08:72:36:83:4a:a9:59:43:d8:67:2f:93:01:
72:7c:4f:25:60:12:f8:ff:91:ca:89:d4:c5:51:0c:f5:c9:16:
1e:7c:28:42:e2:b9:19:c0:37:14:ff:2a:c5:b3:a5:14:0d:75:
b5:c9:6c:92:27:db:ec:29:f6:dc:20:36:46:9a:3a:a9:f3:23:
b3:55:61:2b:a6:a1:74:e1:a7:76:1c:a7:eb:f3:cf:d6:c6:33:
e9:3f:f2:5d:4f:34:eb:87:62:93:9b:6c:54:db:e7:28:74:e2:
2c:4a:09:42:49:b6:75:8a:9b:61:70:59:76:ac:99:8d:9b:58:
1c:6c:26:74:ed:a3:97:7d:5a:4a:66:42:62:1c:82:8e:e7:d4:
b5:7f:65:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 23:47:55 2025 by rpki-client