Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
File: kIp-pxKAHkyP64Wz8HjQW6EBquE.mft (raw, json)
Hash identifier: aQmumk+k8tJqxT+1wpImlComTP/rSeOSzSc7p3oMqaY=
Subject key identifier: DE:C3:4C:56:02:6F:97:D5:58:9E:4D:83:35:58:24:2F:35:1B:63:DA
Authority key identifier: 90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
Certificate issuer: /CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Certificate serial: 01969E6377AB3460EFBD79782E77C6B0117E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 03:00:40 +0000
Manifest this update: Mon 05 May 2025 03:00:40 +0000
Manifest next update: Tue 06 May 2025 03:00:40 +0000
Files and hashes: 1: 5otqJznFN06_a5lb9QnpMCQFqQI.roa (hash: NxQ406RCVAu9Gv14nckV258lPo22JEB7yBMbejU2osI=)
2: kIp-pxKAHkyP64Wz8HjQW6EBquE.crl (hash: 9g2olbRd/qjPiDnkpNLVzRQGTnm36Uh5wp1gRT6QOmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:63:77:ab:34:60:ef:bd:79:78:2e:77:c6:b0:11:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908a7ea712801e4c8feb85b3f078d05ba101aae1
Validity
Not Before: May 5 03:00:40 2025 GMT
Not After : May 6 03:00:40 2025 GMT
Subject: CN=dec34c56026f97d5589e4d833558242f351b63da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:86:a9:64:a8:5f:be:2a:01:42:ee:18:59:b3:
d3:fe:70:92:20:f8:a2:dc:a0:07:1e:05:d9:c8:89:
2c:ce:3e:61:ab:35:7b:cc:90:2f:4e:9b:c0:64:fc:
4d:be:50:b7:e9:53:70:3f:8f:ee:25:b8:0b:86:17:
49:c4:38:79:28:d9:d1:71:3e:13:95:06:36:28:23:
1b:7c:ca:87:e9:06:47:32:0d:e6:50:68:13:9a:89:
01:7a:07:44:ec:fe:38:01:d1:10:bc:6b:1e:7c:28:
59:5c:09:f2:aa:24:5d:fd:50:86:60:d6:46:c6:2f:
2c:14:87:eb:c7:25:36:bc:66:ed:bb:93:31:bb:13:
9e:f3:34:1d:85:b2:38:d0:ab:b5:d1:43:6a:85:5a:
35:14:17:b5:55:cb:d4:b8:af:3a:d9:f6:0f:91:c5:
e2:ff:94:30:48:7e:1c:ef:35:9c:39:5f:d6:c1:6c:
9e:cc:79:e8:96:09:f7:53:67:3e:34:0f:a4:fd:7d:
9b:5a:7d:56:e2:b0:cb:ab:8f:4c:1d:cc:7d:9e:0f:
82:5e:10:72:a8:4e:85:8a:0e:9e:6b:37:30:a6:11:
72:8d:fb:88:c9:75:3d:fb:d5:4d:1b:b4:d3:5f:da:
03:b1:5c:d7:90:de:5e:d8:0c:7c:d0:2b:ff:e4:b8:
bc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:C3:4C:56:02:6F:97:D5:58:9E:4D:83:35:58:24:2F:35:1B:63:DA
X509v3 Authority Key Identifier:
keyid:90:8A:7E:A7:12:80:1E:4C:8F:EB:85:B3:F0:78:D0:5B:A1:01:AA:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIp-pxKAHkyP64Wz8HjQW6EBquE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/8605e6-d9f4-4c32-b4d1-1a12cc0b0406/1/kIp-pxKAHkyP64Wz8HjQW6EBquE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c1:df:44:96:e2:85:71:ad:b2:40:7b:18:8e:d7:dc:09:1f:
b6:81:53:6e:50:0a:e7:84:02:cd:1f:0c:83:63:19:f9:ad:e9:
45:a4:e1:8d:6c:cd:50:c3:84:31:62:3a:62:e8:5d:48:3b:dd:
2d:b5:56:b5:61:24:9e:f6:f3:de:1d:6f:6e:fe:d1:58:9b:50:
54:d5:51:b3:ff:5e:34:60:2d:f3:5d:d3:d2:d4:cc:f7:72:b4:
86:29:cf:89:76:23:b9:c5:13:80:d4:82:8e:3b:25:ea:ca:b5:
83:7e:cb:1e:b7:f7:2f:f6:2f:b9:30:b3:89:ad:d2:bd:e1:88:
b9:6e:c2:e2:40:83:90:a3:e2:0c:d0:82:a4:aa:70:5c:a3:6b:
d0:aa:1e:4d:7f:c7:08:48:bc:a3:02:3c:06:ec:b3:99:70:39:
3a:eb:d7:32:3b:01:7c:5d:e3:3f:cb:75:e3:8f:93:bf:b5:26:
d7:5c:48:3d:36:41:bc:17:54:94:cb:bd:d9:44:17:7d:44:c7:
e2:3f:85:62:c0:64:90:66:61:87:69:c9:0e:f4:73:ab:e2:0a:
59:b7:45:d7:88:fc:99:a0:a3:36:89:39:7f:24:5f:c6:a2:e2:
24:6a:f8:48:ee:f0:e1:b1:5d:4e:fc:e5:7f:cb:c0:fb:cc:4c:
f0:b4:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:19:09 2025 by rpki-client