Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: ZIt/OMXhCArrAZhaFhE8a4V/OhbOG/MWt25NyVrd6zY=
Subject key identifier: C3:B4:7E:DB:F5:8F:44:99:BF:4A:50:A4:E2:68:5D:C2:18:80:52:53
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 0196B4EB09417DEBC3316A9DA73D9BD699F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 12:00:24 +0000
Manifest this update: Fri 09 May 2025 12:00:24 +0000
Manifest next update: Sat 10 May 2025 12:00:24 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: wtnK8imo2D4sYWv6PMTqJklHbGCyQC1ySoqrtsG9AMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:eb:09:41:7d:eb:c3:31:6a:9d:a7:3d:9b:d6:99:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: May 9 12:00:24 2025 GMT
Not After : May 10 12:00:24 2025 GMT
Subject: CN=c3b47edbf58f4499bf4a50a4e2685dc218805253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:92:a3:f2:d6:8d:e8:61:f0:49:df:65:d7:f2:
d0:72:f4:fc:3d:52:d8:a0:47:48:85:4e:4f:75:e2:
01:16:9a:93:ac:0d:bf:5b:9d:82:c7:38:74:d7:2e:
20:75:94:47:9f:38:ac:e0:d9:29:ef:95:e4:65:31:
df:58:7a:7e:3c:11:88:91:fa:f9:b8:3f:60:77:c0:
e2:e3:cf:ce:54:14:86:73:be:1c:be:36:be:55:5a:
42:7a:1b:e3:02:fd:77:66:1b:7f:6c:d7:5e:3f:cb:
52:02:fd:c6:93:a2:44:65:92:6c:b8:21:4b:11:31:
4b:14:e6:70:67:55:7b:2a:b6:9a:60:ac:05:13:2c:
13:bd:25:ad:cc:be:82:70:1c:bc:43:f4:37:47:a9:
63:7f:62:e6:8a:0a:8e:67:5a:83:9b:6e:54:3c:6b:
7e:83:70:fc:1f:7f:9a:49:bc:e2:cf:81:eb:a3:09:
6a:a0:8a:13:23:f7:08:48:d7:39:a0:37:2b:49:59:
9a:d3:66:38:9c:c4:35:f0:f3:51:88:2d:9a:fb:0f:
ab:29:c1:aa:84:db:1a:91:e9:41:0b:de:48:25:f3:
6f:c2:79:23:fa:84:40:c7:fc:fd:ae:43:a6:ce:88:
84:3c:fd:53:81:5b:14:70:52:5c:50:67:ed:cc:cf:
4f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:B4:7E:DB:F5:8F:44:99:BF:4A:50:A4:E2:68:5D:C2:18:80:52:53
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:7d:ac:6a:10:64:40:a8:76:f5:f7:35:94:29:7e:14:e7:89:
e8:1f:0e:ec:41:0d:54:bd:98:98:38:6d:3b:2d:ed:9f:8b:06:
3f:0e:65:6a:9b:9d:49:ca:4c:82:65:e7:00:36:4e:e5:c7:9e:
0d:9e:37:62:36:3f:d9:67:43:72:5f:e7:d8:33:6b:23:d1:76:
a6:54:20:ee:48:42:d5:ec:5b:29:41:34:1b:93:79:1b:2a:f2:
ab:cd:c2:1e:4e:95:4b:77:8e:9c:dd:91:06:c9:9d:2d:a6:42:
35:80:c1:40:9d:c5:e2:c8:06:99:ee:37:72:f4:74:b1:8a:a0:
34:01:d8:9f:48:d9:51:3f:7a:5d:9d:1a:5f:d9:4b:d3:81:d8:
c4:be:9f:9b:2e:d4:1e:b6:79:ec:30:0b:36:e7:00:e9:67:a4:
bf:e1:9e:b3:91:87:22:7b:78:aa:b4:12:05:3e:07:d3:f2:19:
60:f0:e1:7e:3f:f7:dd:a1:4e:0c:73:59:79:b4:1c:56:3e:81:
6f:c0:03:45:34:42:34:94:5d:14:ae:de:0d:4f:9a:87:f3:f6:
31:92:ce:fe:1f:97:5e:42:4e:43:06:70:48:57:8b:f8:fd:e8:
d3:4c:fd:42:48:cd:ad:28:2d:2d:d4:54:50:c7:94:f5:95:7c:
22:ce:be:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:52:58 2025 by rpki-client