Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
File: kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft (raw, json)
Hash identifier: eJ5sWVh7ULWYew70HFpG3tw1a/iV/YN03S7awkGSd38=
Subject key identifier: 61:37:8B:06:BC:F0:80:C6:D1:15:8A:1D:53:C4:87:F6:0C:F8:36:95
Authority key identifier: 90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
Certificate issuer: /CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Certificate serial: 0196C2A6E7E9A89910B039BD55983D5FC20A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
Manifest number: 0596
Signing time: Mon 12 May 2025 04:00:40 +0000
Manifest this update: Mon 12 May 2025 04:00:40 +0000
Manifest next update: Tue 13 May 2025 04:00:40 +0000
Files and hashes: 1: KC67bUzfDKSrHmCB6UUpuneAEt0.roa (hash: kjD/C1Ln2i2diMcFsx9dGCTAO1I1ywN8NGufWziFBfg=)
2: kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl (hash: rc9Dd5HGDJukRif24aDyFF/HlRvtii7x9EFUjY5WYKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:a6:e7:e9:a8:99:10:b0:39:bd:55:98:3d:5f:c2:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=905a109336de89712e249c9846c9dbb1b3c98c7e
Validity
Not Before: May 12 04:00:40 2025 GMT
Not After : May 13 04:00:40 2025 GMT
Subject: CN=61378b06bcf080c6d1158a1d53c487f60cf83695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3e:a9:a2:e8:03:99:51:34:a4:2c:b1:7b:a8:
d2:af:a0:9f:1e:24:7b:14:bd:c5:e0:7a:f8:37:92:
08:68:76:a5:24:e8:e5:5a:fc:0e:ab:b4:01:ad:a0:
97:98:3a:88:db:1e:1b:a7:98:72:26:33:ba:05:13:
75:6f:01:30:5e:77:ff:4f:49:27:d2:1f:c2:a7:a2:
c5:89:fe:01:4e:09:2b:6a:3d:af:3c:76:d9:41:c3:
a1:45:a7:37:86:a0:b7:e7:00:b4:49:3d:0b:57:dd:
ad:cb:5a:cc:09:24:2a:52:d2:27:97:11:64:8e:86:
8f:4b:be:e0:4a:a0:50:d0:8d:82:9e:22:87:9c:fa:
76:49:94:48:cd:42:39:75:71:77:f6:91:fd:99:cb:
8e:8d:f5:59:b1:d1:bb:a8:c2:0c:84:4a:6f:03:85:
5e:e1:e4:69:05:98:12:8d:4d:56:67:b1:c9:26:ce:
35:54:fa:38:29:f0:8f:39:26:fc:52:8e:1e:bb:30:
40:e4:ad:7f:ae:8f:50:ae:f4:89:ec:61:a3:11:a8:
4a:e9:41:09:46:df:40:66:c1:c8:39:39:65:41:f6:
cf:c7:1e:e7:79:90:cf:9b:df:19:b5:df:d3:3f:be:
a9:b1:6a:a7:bb:c5:05:88:84:f3:00:3d:a2:b1:b1:
3a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:37:8B:06:BC:F0:80:C6:D1:15:8A:1D:53:C4:87:F6:0C:F8:36:95
X509v3 Authority Key Identifier:
keyid:90:5A:10:93:36:DE:89:71:2E:24:9C:98:46:C9:DB:B1:B3:C9:8C:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFoQkzbeiXEuJJyYRsnbsbPJjH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/dab6ae-dba8-4b28-9c8f-b248cfa96a69/1/kFoQkzbeiXEuJJyYRsnbsbPJjH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2d:0e:66:3b:00:1e:43:8f:ee:d9:68:ba:4d:ef:57:74:9f:
53:bb:2a:44:b9:4b:f7:13:c2:d1:ab:9d:be:58:c1:ae:9f:87:
c4:53:be:9c:b0:e3:07:db:e9:bd:46:6e:a9:25:70:d0:dd:45:
8c:e3:7b:a2:6d:23:21:be:2b:57:5c:d3:02:64:ec:5a:4a:31:
6e:ae:bf:46:57:df:1b:91:ca:61:f6:40:17:29:be:f4:e5:19:
b1:79:68:de:4a:87:f5:b4:bb:e1:5a:a7:3d:cf:df:3d:fb:a8:
c3:46:e6:98:56:29:fe:8c:25:4a:9d:83:06:b5:67:5a:a2:60:
6d:62:88:08:0c:f5:0b:ca:16:76:78:bb:74:18:46:7a:9a:20:
e2:29:a7:2b:74:91:67:27:43:14:4b:5f:1d:8a:4b:50:c0:fd:
9a:72:a1:fd:01:6d:77:5b:92:fe:ef:88:9a:b4:1d:6f:91:48:
51:70:1d:aa:0f:2e:9d:38:df:d0:32:85:2b:39:a9:ab:06:97:
f0:c7:27:6a:62:88:56:cf:fa:73:2d:27:57:bc:23:6d:38:e0:
c9:92:53:ad:cf:2b:8e:1a:b2:17:80:90:dd:4f:76:02:7b:71:
1f:67:52:5d:4b:59:c1:59:05:3d:c0:e5:90:80:e8:8e:e3:ad:
ac:6c:89:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:46:06 2025 by rpki-client