Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
File: KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft (raw, json)
Hash identifier: AF0JHcEJdV9Ckic9kYXU1GU9N4e10sZvjFEHafm9upU=
Subject key identifier: 47:28:C2:0F:72:25:A9:92:E4:0B:6A:10:F7:9C:68:E5:92:C6:67:98
Authority key identifier: 2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
Certificate issuer: /CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Certificate serial: 0196BF6E939274521EAFDEB88CC03847FE0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
Manifest number: 153B
Signing time: Sun 11 May 2025 13:00:16 +0000
Manifest this update: Sun 11 May 2025 13:00:16 +0000
Manifest next update: Mon 12 May 2025 13:00:16 +0000
Files and hashes: 1: 3WOQMHHA_gyX03awABhKzOim3Bs.roa (hash: ZA+s/EckArtDe+QZpgBb9d1KuxQcRDkEk6RSEwu6Y0k=)
2: 7KoL3jGlfNGPpyhqV9AtZAaoaI0.roa (hash: Nb/Vw+/Ylb4cSX8JKW25BkVIJgSx13SRW+VCTwm5sJ8=)
3: HL23JkhmDLszmlcMKIQLjOYgOlw.roa (hash: UcG0dWZ6JWWkmOHgvKVtqjoii96EVOB2hFdkb/AhZXs=)
4: KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl (hash: fH2ddheKhxiumaitDBimhAjdwWdOzB4HzJLD67dYbjY=)
5: bLZSbio8bkJcYZljrUphK1wwfiI.roa (hash: 8pmPyotbXxfraqC1rKstG9Ljo1wkSagV+FMWF45wlzU=)
6: pZ6QLhb3L-zU8HaIuMWziHfarGQ.roa (hash: bAsLcg/vcZKidF7bKnaCdDmEHtuPe3QKZhFTHIqySAA=)
7: vgrDVzIHM-lfYbprXn7b8oE_EG0.roa (hash: pmw87KrkZDI/w+UgS4DgQBhIgi8uItz6U8fozdzX4sc=)
8: yIaElboDEcTWK_3VfQrVd7rO3sU.roa (hash: dRcI0G+6+49AKUKXqa7HKsOOK4Sxw6VtAfiMSWdhRnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6e:93:92:74:52:1e:af:de:b8:8c:c0:38:47:fe:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac64dc21cb5fd4d0bcb02cc2b43fd751fd91e1e
Validity
Not Before: May 11 13:00:16 2025 GMT
Not After : May 12 13:00:16 2025 GMT
Subject: CN=4728c20f7225a992e40b6a10f79c68e592c66798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:e7:eb:9a:a1:08:60:d6:f4:c5:e7:50:67:
53:2d:22:17:84:ac:de:ed:f6:0a:f9:d7:09:a8:d8:
cc:e7:26:64:8b:a7:30:1b:a2:43:bb:d8:34:29:a4:
dc:ae:5a:1a:05:35:20:a1:77:b2:76:3e:3e:94:ce:
37:48:55:17:65:b0:4b:6c:4a:b0:db:b5:54:63:9f:
2c:3f:c4:00:88:06:1f:5a:d6:91:2e:55:3c:94:51:
4d:f6:df:18:1b:23:29:c3:30:c9:b1:99:83:86:9d:
93:37:a6:4a:3e:c9:dd:9c:8a:ac:6a:48:fa:4f:98:
2f:89:6d:b4:49:b9:89:34:a9:5d:42:1a:ec:9c:a0:
f8:16:f2:f2:40:e9:63:bf:bc:e1:9b:a1:8b:86:e5:
7f:f4:80:f1:15:10:fc:1a:52:5b:c0:b9:75:8c:e5:
0f:0c:de:1b:00:ab:d2:da:8a:54:07:ed:c7:ec:ad:
3f:f0:f5:4b:f2:b2:f7:22:8b:54:df:15:8b:72:a9:
36:af:21:3b:80:53:89:bf:82:93:22:49:52:a3:fc:
65:67:b3:a8:af:98:34:e0:6f:c6:5f:da:1a:a0:69:
04:54:be:00:13:93:4a:53:6f:e8:a5:03:21:70:11:
ae:e6:4c:f1:c4:a8:0f:c2:a0:4c:87:aa:1c:d8:52:
2a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:C2:0F:72:25:A9:92:E4:0B:6A:10:F7:9C:68:E5:92:C6:67:98
X509v3 Authority Key Identifier:
keyid:2A:C6:4D:C2:1C:B5:FD:4D:0B:CB:02:CC:2B:43:FD:75:1F:D9:1E:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsZNwhy1_U0LywLMK0P9dR_ZHh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/de1db4-ec78-4e41-9570-097c3c1c2540/1/KsZNwhy1_U0LywLMK0P9dR_ZHh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:17:c0:e8:10:24:c0:2c:b3:b6:7c:99:1a:07:79:cf:e2:0c:
30:8e:a4:51:d3:c7:9b:06:61:b1:56:84:20:f7:7a:6e:e2:9d:
32:11:0f:88:b2:9b:aa:03:97:ce:e5:f5:bd:82:d8:56:fa:71:
b0:4a:5c:4a:46:e8:4d:f4:84:3b:16:03:1c:13:90:d3:1d:fa:
81:f1:60:66:30:0f:c6:6c:cc:d8:8d:2d:4c:89:c2:f1:c8:ef:
f3:cc:a2:c5:4e:4f:46:46:e2:d7:27:b3:05:e7:e1:41:f2:50:
6d:ee:0e:ac:5d:fd:69:bc:12:5a:65:12:e9:57:40:d1:a4:40:
c4:88:3b:d3:78:94:9e:6b:b3:ba:e3:81:7e:d6:69:a5:ba:43:
18:0e:7b:99:93:9f:dd:f0:10:0a:58:f4:c1:7d:f3:49:14:27:
8a:35:33:f1:5a:fd:72:e9:3c:e7:e2:cb:42:2b:bd:73:bf:fa:
7e:8e:a3:5f:1a:fc:2c:bd:af:21:4a:00:15:8d:7f:8b:9d:e1:
fe:e1:0e:dc:8a:48:2b:8a:d3:36:de:6b:1a:70:cf:ef:17:80:
a5:09:35:23:2b:a3:b6:52:ee:4e:4c:55:67:08:16:89:c5:20:
97:84:77:e6:53:4f:5c:70:11:ca:95:9a:54:8a:1c:18:08:35:
ee:b5:1f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:43:00 2025 by rpki-client