Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: sWRTVnOvHqMAktWIVGQdF5av0BckfCTo1zWApdpDAnY=
Subject key identifier: CE:AC:24:01:AB:5C:EB:5A:92:9E:47:8B:7F:E8:A2:00:D7:9F:4B:63
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 0196AC8D0582928739E9586DA8277A202926
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0D7B
Signing time: Wed 07 May 2025 21:00:45 +0000
Manifest this update: Wed 07 May 2025 21:00:45 +0000
Manifest next update: Thu 08 May 2025 21:00:45 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: TNgap5W-osn_Rfol75raxYUJNcQ.roa (hash: v9eCsfXIr5Y/Gysizic1m9zP115asEh2Yiu1o/todaA=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: su8fpdj8+W+04XYs+alvU6LOZqaaC7rMgPass/dH5Xs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:8d:05:82:92:87:39:e9:58:6d:a8:27:7a:20:29:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: May 7 21:00:45 2025 GMT
Not After : May 8 21:00:45 2025 GMT
Subject: CN=ceac2401ab5ceb5a929e478b7fe8a200d79f4b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:c6:a5:0e:e4:dc:29:50:87:52:b5:28:c5:
af:43:c4:d2:ed:4d:db:85:c9:ec:80:d1:7f:24:ce:
fb:7b:0c:32:c0:58:3a:8d:20:cd:9e:19:05:e7:82:
8d:eb:23:04:9a:88:df:da:f4:2c:e6:6d:e7:c1:f5:
6d:de:ef:26:31:e0:6f:15:22:e9:67:2c:16:4c:c3:
d7:a2:49:36:d6:c5:31:2b:5e:02:7f:5f:65:a8:2c:
14:9d:dc:d0:06:8e:3e:e2:f0:a9:42:6a:7c:25:bc:
b7:69:6f:19:79:92:1e:bc:47:86:3d:c2:d7:d5:56:
af:bb:72:4d:d4:c8:1a:e0:4e:7b:c2:f8:86:58:9a:
32:8c:23:39:c3:62:4c:93:bb:33:51:92:a0:78:d7:
0b:06:0f:0b:d8:0e:8a:f5:3f:10:e4:bf:20:15:8c:
fb:e5:4a:3b:28:96:38:df:12:b6:ac:39:a7:d8:6d:
90:9f:e8:f2:06:43:39:1a:b4:00:8b:02:25:ad:3f:
13:4b:c2:8b:ec:f4:6b:6a:8d:e6:0a:3d:e2:61:7d:
c5:ea:32:fb:5c:ad:4e:f7:99:78:ce:1d:ba:25:67:
97:fa:e8:01:eb:d5:fc:e6:95:48:1e:f8:be:2e:9b:
cf:28:96:ac:b2:0b:0b:4a:a7:50:2d:32:0b:f5:7c:
79:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AC:24:01:AB:5C:EB:5A:92:9E:47:8B:7F:E8:A2:00:D7:9F:4B:63
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a5:82:15:4b:61:82:a1:7d:63:5f:23:df:c9:0e:5d:a1:04:
cd:f2:54:25:aa:74:9a:38:44:d9:dc:09:9d:bd:47:68:ac:92:
53:bd:30:c8:58:22:7a:19:8b:c6:ba:97:8f:a6:22:24:3d:78:
7f:ce:e0:f6:24:02:da:ee:c0:43:c9:00:3e:a3:ee:01:bf:6a:
f3:3d:74:a0:31:16:ef:71:ed:c1:37:0b:f8:25:7e:28:70:ad:
3c:6d:e0:fa:15:c0:ef:f0:59:20:a2:5b:20:15:e7:34:76:bd:
94:d4:4b:ee:7b:68:04:91:73:48:63:7c:23:f1:a2:77:bb:c6:
fe:d6:7f:a6:e2:10:6b:0c:c1:12:8e:e4:f1:89:6b:9b:07:03:
81:a1:2e:00:88:02:d5:e0:2b:43:3b:3a:ef:75:db:d5:d1:3c:
dd:77:46:7b:e0:89:5a:49:ab:ed:fa:f5:41:ca:25:44:bc:e0:
8c:e4:5a:93:e0:a1:0a:8f:ca:ed:4d:77:eb:0c:99:bc:f8:76:
35:85:39:aa:cb:5e:6c:53:17:18:14:1b:d2:8f:75:6e:5a:5d:
8e:64:b3:53:f1:55:2e:dd:9a:fb:63:01:6d:28:06:f2:86:5a:
a1:11:5a:44:7d:38:cf:e8:b7:dd:df:f2:1d:e9:42:ef:51:e9:
8f:6a:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 04:13:42 2025 by rpki-client