Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
File: KVqSt3jt36jc2RfLuHzeMboscy8.mft (raw, json)
Hash identifier: WWYlPxko6y1bHIzqv940vQRSq3xI+KB2CQOe6dh6cbI=
Subject key identifier: FE:7D:B8:EB:81:BD:0A:DF:4C:5B:B7:89:B3:52:5B:FE:2D:A0:A4:3C
Authority key identifier: 29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
Certificate issuer: /CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Certificate serial: 0196C04A79459875C5711700EB5F0B215840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 17:00:28 +0000
Manifest this update: Sun 11 May 2025 17:00:28 +0000
Manifest next update: Mon 12 May 2025 17:00:28 +0000
Files and hashes: 1: 043uSXcEwcTZgUk5_ExSgvF0TDI.roa (hash: aKMAMHw8f6Tqa+Lu83OKVpFBIm3XSWZO6zpjohL8Alg=)
2: KVqSt3jt36jc2RfLuHzeMboscy8.crl (hash: AwIj6fPa0u7mXFKE6LBDagCNBQUDco4XsGpZNhAv5Y4=)
3: sqwvJOyPTCq5sZkvN5Pbfvvxhgg.roa (hash: HccEp/1nmaqHimBtUpSeAjWigFxaNTmI1UzABIZlNpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:4a:79:45:98:75:c5:71:17:00:eb:5f:0b:21:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295a92b778eddfa8dcd917cbb87cde31ba2c732f
Validity
Not Before: May 11 17:00:28 2025 GMT
Not After : May 12 17:00:28 2025 GMT
Subject: CN=fe7db8eb81bd0adf4c5bb789b3525bfe2da0a43c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:02:b5:c0:2c:ce:9b:f0:72:2f:c0:8b:e7:3d:
37:10:48:58:ec:b4:44:ee:e9:41:29:51:7c:49:ce:
9c:76:65:c9:99:69:f9:59:7f:52:ad:48:4b:fd:b0:
a9:f3:f6:b2:a5:02:8f:47:37:51:ab:9d:fd:a9:12:
37:df:d4:92:a3:50:90:72:ad:00:36:7b:9f:9b:3e:
c5:6d:27:56:58:a6:9b:b9:8c:65:ce:ce:30:a7:9a:
72:92:02:dc:36:5a:5f:e3:91:d4:08:db:d5:74:58:
bb:aa:87:8b:a9:6c:33:fd:9f:ae:7f:85:fd:88:e4:
9e:7d:00:a3:64:93:a6:90:ca:d1:6b:12:95:18:bd:
ac:2a:17:58:e9:07:6a:9d:d3:bb:16:cc:5e:9d:7f:
07:5f:34:87:ae:4b:7e:3c:69:ac:81:3a:b1:0b:79:
bf:3d:cf:d6:13:51:d9:bf:94:c1:b1:80:52:b4:59:
29:3f:8a:61:ae:d6:34:af:7f:cc:ec:e1:d0:76:9e:
f7:63:b4:79:29:12:d7:9b:fa:65:ec:e0:85:5c:55:
61:11:e8:7e:8b:2a:58:0a:ef:e3:da:7c:04:20:97:
e3:ed:5d:ba:16:b7:c6:27:ca:28:22:52:e2:7c:b5:
25:3c:32:33:e9:a8:9a:11:cc:f0:c5:e9:98:d4:49:
1c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7D:B8:EB:81:BD:0A:DF:4C:5B:B7:89:B3:52:5B:FE:2D:A0:A4:3C
X509v3 Authority Key Identifier:
keyid:29:5A:92:B7:78:ED:DF:A8:DC:D9:17:CB:B8:7C:DE:31:BA:2C:73:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVqSt3jt36jc2RfLuHzeMboscy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/7570e1-ae3d-4901-9c85-dcdc5cee276f/1/KVqSt3jt36jc2RfLuHzeMboscy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:20:f2:64:68:63:00:50:16:ac:20:b2:12:72:f0:39:79:c7:
53:42:e9:7e:1b:65:e9:b9:79:55:2b:71:8c:5e:f1:fa:17:1f:
96:4e:08:38:bc:d5:b1:dd:70:0e:ec:d2:fa:96:09:5c:d0:61:
e6:a1:ef:12:2b:f5:64:2c:02:f1:8f:0f:ee:9b:08:cf:77:3c:
b8:79:ef:1d:4b:1a:5d:be:4f:d3:96:d5:0c:10:6f:b2:29:5a:
fd:4b:ba:f3:b3:ef:5a:a6:7f:22:5b:70:6b:23:22:f0:70:16:
e8:eb:8a:41:b6:53:3c:13:61:f0:87:0b:fd:8f:66:d9:4f:22:
71:1c:b0:19:77:0f:ff:45:bd:d8:20:3f:bd:9a:40:2d:de:57:
27:d4:d6:5e:41:87:93:5b:b0:25:e5:93:77:e9:0a:06:ae:46:
34:ca:f0:4b:6d:aa:aa:e7:03:d9:93:06:05:c9:bb:3f:04:9d:
9d:b0:e2:84:c6:59:cb:53:01:31:a5:f1:2f:83:11:81:f9:5a:
7a:84:20:9e:73:d4:75:e8:1e:5a:bf:fa:70:50:99:0f:fb:d3:
39:40:f9:ff:bf:b7:88:ce:6d:61:92:3e:e7:2e:1c:2b:d4:b4:
35:d0:a7:c8:ee:16:a3:75:0a:c8:aa:ca:d7:ce:a4:51:82:17:
d6:80:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:17:55 2025 by rpki-client