Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
File: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft (raw, json)
Hash identifier: GGgltVvDYlS5lUKW6LTnQvFTu1NAoHwdpfa5Wq4H5mc=
Subject key identifier: A3:9B:AF:4E:25:8F:CD:54:D3:55:6B:D0:55:C8:0C:42:9D:05:86:FD
Authority key identifier: 29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
Certificate issuer: /CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Certificate serial: 0196A276C664037E1B2E0727E9AFAC2C4F49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
Manifest number: 111C
Signing time: Mon 05 May 2025 22:00:15 +0000
Manifest this update: Mon 05 May 2025 22:00:15 +0000
Manifest next update: Tue 06 May 2025 22:00:15 +0000
Files and hashes: 1: Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl (hash: RLt7M1yfxi7w6MtYJoz57t/FBsun5hszohB0Gs+cIR8=)
2: wWu_mnG1mF1XhVWaW0DZDLRaMZA.roa (hash: OxlFGiJEt7spgwhfyEKbeiDTLip5JYbp9FNAPkL6rNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:76:c6:64:03:7e:1b:2e:07:27:e9:af:ac:2c:4f:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fb7da3b44e41b32369e4a5c790d3081fc69aa9
Validity
Not Before: May 5 22:00:15 2025 GMT
Not After : May 6 22:00:15 2025 GMT
Subject: CN=a39baf4e258fcd54d3556bd055c80c429d0586fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b6:dd:d0:42:5b:67:06:54:fa:bc:0c:18:a0:
33:ce:00:b1:14:13:d5:de:b5:36:b0:a9:a0:15:d7:
1f:94:ff:2a:8e:95:61:83:f0:0b:00:b1:82:12:1c:
46:7c:d1:a8:ef:f2:0a:fd:0b:66:67:53:17:2e:6e:
31:ee:d1:eb:c2:af:a2:98:7d:6b:0e:e2:1a:ea:77:
e4:e7:e8:67:35:b2:fe:55:ff:d8:2a:c3:df:d6:78:
56:62:f1:22:2e:05:c2:57:13:00:3e:08:7a:16:cd:
66:5d:62:9a:4c:e3:06:52:fd:d8:dc:a9:96:61:f9:
1d:e5:53:d1:13:6c:7a:13:e2:c6:9f:af:f1:4d:6b:
d5:73:ca:ea:d5:32:3e:0b:3b:a6:1e:b9:44:e6:13:
1b:e4:99:2e:76:76:e6:ab:65:a0:38:b2:4e:a2:e5:
a4:f8:ec:98:dd:7d:bd:f8:0c:b9:fe:d4:30:1a:93:
46:36:6f:3b:39:da:7e:d2:89:f4:be:05:57:55:09:
28:2f:e0:9d:3b:e8:aa:6d:6e:86:56:9d:7c:18:c1:
34:2f:61:3d:e7:0c:56:8b:0b:bb:f8:74:9d:5e:b7:
90:42:5a:16:24:c2:4a:48:af:6b:3f:33:49:d7:9c:
43:4b:ee:b2:32:68:d7:22:7f:58:72:7c:d1:90:a2:
b0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:9B:AF:4E:25:8F:CD:54:D3:55:6B:D0:55:C8:0C:42:9D:05:86:FD
X509v3 Authority Key Identifier:
keyid:29:FB:7D:A3:B4:4E:41:B3:23:69:E4:A5:C7:90:D3:08:1F:C6:9A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/17a016-26c7-424c-862f-bcac8b552a9a/1/Kft9o7ROQbMjaeSlx5DTCB_Gmqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:bb:d7:57:c4:4b:55:85:76:61:5d:2a:29:8e:ab:c7:af:21:
b9:4a:c0:f4:4a:b4:69:01:3f:0c:68:ce:70:ec:05:d1:44:76:
1c:29:59:82:f2:f8:29:d8:e0:b9:5f:75:ae:79:5f:38:2c:60:
e6:c8:32:32:f5:cb:e3:a6:55:eb:78:53:98:b5:ad:4d:aa:c8:
62:2c:69:4d:4d:f5:97:31:69:b5:22:7e:f0:15:c9:26:75:4e:
70:44:bb:4e:38:15:aa:ad:cb:18:1c:91:09:bd:3b:23:9f:4a:
d7:2d:01:c3:21:73:cf:12:72:5c:60:df:5f:80:6c:29:a0:1d:
51:4e:bc:bf:ee:f4:e6:d9:01:ec:9d:4f:fe:5c:c4:18:71:62:
1d:c5:34:f0:6f:0b:f2:af:54:fd:01:f7:e1:79:fd:3a:69:f3:
91:79:27:49:89:25:14:0d:be:38:a9:a0:8b:c4:73:d5:75:cc:
09:96:91:30:de:d7:44:1e:8d:7a:3e:64:36:eb:a5:7d:af:3c:
eb:fc:e1:ad:f5:bb:51:9d:a7:de:ca:b3:71:f4:42:d1:f2:c4:
dc:0c:e5:73:76:84:7a:7b:60:70:c6:d5:13:9d:2a:03:88:e2:
7f:3a:76:90:07:ff:97:91:5d:b7:49:47:1b:e7:20:bd:8a:34:
a1:0a:e6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:35:49 2025 by rpki-client