Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
File: KqggK00MXBEdN08emLc9tJJNZLE.mft (raw, json)
Hash identifier: ySpOYSgnWj0MluNngPnjhpRmAfInx0GRW41ApJoSgJ0=
Subject key identifier: 0F:C0:8D:F5:42:2F:A0:C4:3A:83:F9:6A:8E:58:FD:2F:B0:D8:2A:DB
Authority key identifier: 2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
Certificate issuer: /CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Certificate serial: 0196AC55DA83941D192E0DB0F7D3A2D3FFE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
Manifest number: 0B60
Signing time: Wed 07 May 2025 20:00:29 +0000
Manifest this update: Wed 07 May 2025 20:00:29 +0000
Manifest next update: Thu 08 May 2025 20:00:29 +0000
Files and hashes: 1: 8nLoMcIcsiOT94ggaJIYQQl2oRM.roa (hash: qT9FeEnewJoNeBMjY4zbOI1Gsyx72sYu0a6uEXjvmkY=)
2: KqggK00MXBEdN08emLc9tJJNZLE.crl (hash: MnwZC26MAAx9uIxAzIthKQFKQSIIKKRYFkTs0H1oxw4=)
3: vT6MkqafH5VOMm1ZMgN21UjQYFs.roa (hash: dIHvBtvVugb4PHXdIHdFzDigve4LKcNg9oX/bIFSdDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:55:da:83:94:1d:19:2e:0d:b0:f7:d3:a2:d3:ff:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa8202b4d0c5c111d374f1e98b73db4924d64b1
Validity
Not Before: May 7 20:00:29 2025 GMT
Not After : May 8 20:00:29 2025 GMT
Subject: CN=0fc08df5422fa0c43a83f96a8e58fd2fb0d82adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:14:85:22:13:f3:12:3e:b4:b9:af:1d:8d:73:
30:d6:19:88:da:9b:c4:a1:3e:29:91:dd:84:5a:52:
fe:07:98:09:f4:42:0c:d3:51:e7:19:eb:47:aa:be:
43:e9:d8:43:3e:d3:47:80:3e:43:25:01:88:ec:70:
57:70:33:f0:b2:60:3c:93:b1:0d:da:e9:db:6c:e7:
2e:df:46:aa:19:63:9c:be:59:4e:b7:a8:aa:06:75:
56:c4:46:56:59:24:71:1d:a7:5e:20:0e:97:8c:ed:
2e:26:2e:87:ca:99:4c:c9:f2:1f:77:88:c5:39:f9:
63:4d:8b:1d:00:73:9a:25:30:76:3b:f7:0b:03:7d:
8f:8b:a9:66:48:1b:17:9e:83:71:2c:36:2d:dd:8d:
59:c8:ab:9e:6e:c6:c0:18:a3:86:84:d0:ed:8a:0c:
bd:8b:46:55:e1:b0:ba:b9:01:52:e7:93:3e:39:10:
55:07:72:80:d6:c1:bb:a2:75:21:7f:8e:0b:3f:8a:
17:bd:aa:ea:e4:1a:49:0e:72:a9:17:90:39:f8:0e:
0c:8c:60:4f:a0:fc:61:15:8b:67:26:3c:38:55:fe:
00:86:dc:7a:23:28:87:9c:49:e7:88:a2:83:a7:7d:
16:d8:72:32:de:3a:28:8e:ef:2e:4a:d9:11:a0:e7:
35:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C0:8D:F5:42:2F:A0:C4:3A:83:F9:6A:8E:58:FD:2F:B0:D8:2A:DB
X509v3 Authority Key Identifier:
keyid:2A:A8:20:2B:4D:0C:5C:11:1D:37:4F:1E:98:B7:3D:B4:92:4D:64:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqggK00MXBEdN08emLc9tJJNZLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/27b3b3-4b22-4740-a65a-6e7bae5ff898/1/KqggK00MXBEdN08emLc9tJJNZLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:b7:3f:bb:be:1c:b2:b9:c3:86:c5:5f:da:b2:07:df:78:7b:
78:73:5d:a7:f0:72:95:f1:4d:79:11:5c:34:8e:f8:fa:ff:f1:
56:c6:25:54:bd:51:23:c4:ca:c4:04:94:94:af:07:69:47:a1:
0f:15:1a:d8:b2:a9:70:da:a6:cc:49:a4:bb:ba:3e:86:7d:24:
f2:3d:27:da:73:e6:c8:73:e6:90:d6:dd:99:fe:5f:f1:37:76:
65:7e:7c:c2:64:bb:7d:ce:c0:42:51:7b:64:bb:d6:ec:da:cd:
52:e7:1f:35:f4:34:21:de:c0:3a:e2:aa:67:00:11:ec:da:a9:
88:30:f3:34:97:10:23:48:e7:43:f1:5e:de:e1:62:92:58:0c:
f5:15:9a:64:8d:15:76:38:7a:a1:ce:d5:d6:5f:43:69:52:67:
75:46:b0:fd:ad:26:1f:59:c9:28:66:8b:f4:55:6f:1c:c1:eb:
9c:8b:e0:7f:03:18:3d:4e:bc:04:69:fa:9b:e1:a3:87:36:a6:
79:cb:f0:b1:08:f7:73:ae:8d:75:8c:0f:d1:fc:b4:31:82:5c:
5e:1a:69:28:21:8d:1c:cd:63:a5:1c:a2:84:9c:63:c2:ca:89:
b4:41:f8:0b:38:b7:4a:ce:53:cb:1b:eb:85:50:76:4f:49:21:
d7:78:7a:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:11:07 2025 by rpki-client