Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
File: KgGcraFj42jMM2J2PyBrPerE0yA.mft (raw, json)
Hash identifier: FPJgyZRYE/rJkq2WSqvA/NHUL8sUIdgagpiSxpub4/o=
Subject key identifier: 01:96:DD:36:6E:CC:FF:5C:32:64:89:0B:9F:48:0D:47:75:33:11:E7
Authority key identifier: 2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
Certificate issuer: /CN=2a019cada163e368cc3362763f206b3deac4d320
Certificate serial: 01969FAD28456D8AD13182BF71A373468BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
Manifest number: 0A93
Signing time: Mon 05 May 2025 09:00:47 +0000
Manifest this update: Mon 05 May 2025 09:00:47 +0000
Manifest next update: Tue 06 May 2025 09:00:47 +0000
Files and hashes: 1: KgGcraFj42jMM2J2PyBrPerE0yA.crl (hash: AsKuzmL1t2PeWfBTSVMetu4lT/6Lqbsj7kf2gDD54YI=)
2: aZtA3Tb82BUczOl9SsTYverE7lI.roa (hash: LK8Z2BqrNCcDSNuABGRySwkLhGqKgLJf/sHl1VyEOIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:37:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:ad:28:45:6d:8a:d1:31:82:bf:71:a3:73:46:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a019cada163e368cc3362763f206b3deac4d320
Validity
Not Before: May 5 09:00:47 2025 GMT
Not After : May 6 09:00:47 2025 GMT
Subject: CN=0196dd366eccff5c3264890b9f480d47753311e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:38:40:dc:1d:27:15:8d:5f:49:09:bf:02:5c:
be:f7:27:47:ef:54:17:42:ac:7a:31:57:62:4d:e4:
7c:f3:dc:63:51:b5:c8:68:ee:9a:15:93:3d:34:fc:
5d:33:63:9e:72:5e:85:97:5b:6b:5b:dc:a0:ee:04:
26:e7:32:12:c3:bb:e6:07:ae:e4:4a:79:52:10:0b:
69:b0:65:29:84:53:35:28:12:1a:2f:34:95:b3:24:
0d:97:a5:db:78:e7:dc:d7:83:b3:6a:67:ca:22:23:
b9:c4:23:a4:c0:5f:43:7e:8a:59:a6:e1:e7:ac:54:
c9:c9:ea:19:13:56:93:a9:14:4f:47:05:b2:28:3a:
de:5e:c4:72:76:44:ae:10:2d:c3:b9:75:a6:7f:41:
dd:d7:63:bb:77:42:e2:93:08:da:76:79:0e:9a:9a:
1d:b0:5e:0c:28:9b:38:c1:33:89:28:ef:65:21:41:
b1:e7:9f:25:00:95:17:39:3d:17:64:55:74:ba:fb:
59:6c:39:70:89:0b:da:85:77:5e:54:6a:75:e4:39:
c0:2f:88:9f:0d:7a:c3:4a:aa:6e:d7:7d:8c:f1:f5:
ab:2b:8c:40:ed:f0:ec:32:cb:2e:d6:95:81:72:81:
56:02:0f:c5:51:88:3a:4c:d5:df:9c:13:72:62:7a:
ec:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:96:DD:36:6E:CC:FF:5C:32:64:89:0B:9F:48:0D:47:75:33:11:E7
X509v3 Authority Key Identifier:
keyid:2A:01:9C:AD:A1:63:E3:68:CC:33:62:76:3F:20:6B:3D:EA:C4:D3:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgGcraFj42jMM2J2PyBrPerE0yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/43a672-d151-4c4e-9809-149f6365ffda/1/KgGcraFj42jMM2J2PyBrPerE0yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a5:e9:46:d9:60:77:f8:2f:e9:45:14:29:a9:1b:aa:55:89:
a4:07:32:4d:51:c7:37:84:24:d5:c4:0f:ee:62:f4:10:1c:6d:
9d:aa:b1:9e:84:32:dc:e0:fa:77:a8:ff:0d:56:d8:21:bb:66:
ac:c0:70:0f:07:5d:dd:f9:66:01:eb:70:27:c2:33:ff:7d:ad:
65:c4:de:cd:0d:e2:f0:76:8f:0d:95:f4:20:cf:9d:28:08:56:
ca:ff:b7:39:66:5d:7b:d7:17:41:39:d9:84:ca:d4:fc:ac:a1:
b8:1c:51:96:03:b8:75:de:0f:ac:01:86:a4:c7:37:35:d3:e8:
34:84:28:e7:f0:70:83:53:09:83:8d:cc:80:4d:f7:75:ea:80:
cd:d7:d1:6a:74:1a:17:a3:92:fc:40:ce:2d:ec:5a:2b:8a:06:
35:db:77:3c:4b:58:05:23:c4:0d:17:42:e7:e5:8f:95:4d:1d:
a3:77:ae:ce:34:28:54:b7:00:5d:e8:6f:b0:25:f6:70:1f:9b:
86:8d:ed:19:5b:29:70:91:79:54:4c:25:1f:b6:97:2b:29:59:
e6:c8:4f:e1:22:e2:f5:b1:af:36:03:76:5c:e8:c3:ff:d4:e2:
f0:d6:d3:dc:3e:c5:4c:fc:71:4c:36:4c:82:88:82:8c:42:c5:
91:ad:c8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:29:49 2025 by rpki-client