Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
File: KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft (raw, json)
Hash identifier: 1tr8dY2Wx6e1Hw4khNwdwnNjIaC0CIsb1A0XFW+dfOE=
Subject key identifier: 5B:CB:14:D4:B4:57:8A:AB:8A:75:98:6B:3E:83:40:03:23:C0:08:2E
Authority key identifier: 29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
Certificate issuer: /CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Certificate serial: 0196E043EAE984B5AA29289E93E52D4EE23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
Manifest number: 07D4
Signing time: Sat 17 May 2025 22:01:09 +0000
Manifest this update: Sat 17 May 2025 22:01:09 +0000
Manifest next update: Sun 18 May 2025 22:01:09 +0000
Files and hashes: 1: IrS-qV3W0Ik-KE138sR-ycmjsj0.roa (hash: ZrhZqy7V3sNpl24EYUX1sc+YyDytYvN7JDm/U17ihTc=)
2: KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl (hash: pJJAN7Hu9VySYv/UGj8/Cpp2OeZSO7hhSG5E1HHZ8Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:e0:43:ea:e9:84:b5:aa:29:28:9e:93:e5:2d:4e:e2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297a4229714f34e29d3d92b25f7b59c748f0dfc6
Validity
Not Before: May 17 22:01:09 2025 GMT
Not After : May 18 22:01:09 2025 GMT
Subject: CN=5bcb14d4b4578aab8a75986b3e83400323c0082e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:45:b0:f6:11:e2:1c:fc:18:90:8a:73:70:03:
95:06:04:5c:ad:b5:7a:e8:21:b8:8f:3c:a8:01:6a:
b6:43:a3:ea:0c:b1:28:29:89:8a:e1:31:28:1f:4e:
f6:5b:6f:dc:fe:ed:d5:1c:00:9e:ee:e5:9f:12:01:
b0:b4:bb:af:a6:c0:7f:c8:d0:48:77:1f:2b:2c:0e:
01:02:ac:4b:13:9b:ad:1b:ba:b2:8a:bc:50:47:14:
31:b3:2a:59:c6:43:47:6d:a7:cb:a1:6d:1d:f8:37:
89:10:07:07:de:e7:93:b4:71:56:d0:54:2e:f2:a8:
50:92:87:9c:af:18:30:51:8a:a0:3d:12:0f:f3:d8:
f0:44:15:49:14:d0:7c:ee:e1:6b:4d:61:b8:06:21:
f5:6d:f3:f4:86:9e:ba:7e:fe:4f:ec:a5:70:1a:91:
0c:f0:03:6a:69:1c:95:6d:52:92:6f:53:9e:87:dd:
af:33:6f:96:6d:50:f6:19:fb:64:db:dd:fd:38:21:
cc:24:69:b5:0c:0e:0e:78:4e:d3:7f:d7:c3:00:f2:
06:ef:4e:99:a6:32:ae:c3:30:61:f2:c3:4a:ab:6a:
fc:90:f5:27:d1:ae:f9:fb:2f:d2:34:c4:64:c8:db:
98:04:f3:ba:6c:9c:15:e8:14:59:09:25:50:f4:b0:
67:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:CB:14:D4:B4:57:8A:AB:8A:75:98:6B:3E:83:40:03:23:C0:08:2E
X509v3 Authority Key Identifier:
keyid:29:7A:42:29:71:4F:34:E2:9D:3D:92:B2:5F:7B:59:C7:48:F0:DF:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXpCKXFPNOKdPZKyX3tZx0jw38Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1d72ce-be4c-4498-a823-3aebc9f817ce/1/KXpCKXFPNOKdPZKyX3tZx0jw38Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:42:8f:43:ec:62:45:53:2d:83:2b:80:b2:38:e6:58:e5:07:
fc:75:51:aa:f3:0c:52:3f:1b:6d:b1:f1:e3:3a:60:61:9e:2d:
82:e5:4c:ca:04:c0:10:f0:e9:45:cc:fe:8a:a5:24:af:44:22:
fd:91:30:f8:8d:08:e1:d9:da:bc:d7:35:d1:ac:e8:f7:36:db:
db:cb:cb:fc:7c:88:21:77:23:af:cc:e0:e1:7a:29:10:b8:54:
40:77:b2:aa:e5:0c:14:d7:72:d6:05:54:4a:3f:21:24:5b:98:
07:6b:bb:33:cd:c5:09:21:89:57:bb:89:61:19:57:a7:54:1b:
98:e7:45:63:8c:b5:4f:2c:ed:92:95:d8:e4:ce:f2:17:b5:58:
56:75:17:9c:14:2a:0c:15:e7:a5:aa:5c:dc:f7:7f:32:b5:d5:
8f:92:5b:91:65:08:34:44:cb:bb:85:80:53:d7:22:90:83:c8:
a7:25:33:1d:b5:fb:77:fc:58:34:6c:a7:5b:5b:89:0a:d3:8d:
9a:20:a5:0b:ee:77:76:3a:c6:7e:4f:ff:67:27:6e:e5:0c:3e:
c6:f7:2f:0d:9e:ab:cd:ec:b4:13:11:de:16:e5:de:ca:90:3f:
f3:29:a6:84:75:f2:bd:c2:c1:4f:cb:23:55:30:db:fa:4b:59:
25:a7:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 18 04:41:05 2025 by rpki-client