Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
File: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft (raw, json)
Hash identifier: DqLD6AoegspZKnPV22J6Ni9LZULwcRSTvwlahApH6cE=
Subject key identifier: 78:12:7E:B9:84:CE:D2:E3:D6:6F:F0:17:32:22:5B:7B:36:71:AD:48
Authority key identifier: 2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
Certificate issuer: /CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Certificate serial: 0196A389CA6069816B332D3A561D0FCD0059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 03:00:38 +0000
Manifest this update: Tue 06 May 2025 03:00:38 +0000
Manifest next update: Wed 07 May 2025 03:00:38 +0000
Files and hashes: 1: 0GPPNqD70BhEEc5OGdElRSZQ_uA.roa (hash: d+8R//aHUIcUEfpxVOLBHR3p78wpduw1XLPn+Xxxlzo=)
2: Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl (hash: 8r54y/+S3cUjYzv5T6uDUNmWCKaUHNHH5bstrwdJzAk=)
3: NA2ltT3Sfb3V_iisdx5vwEvFMeE.roa (hash: vazWrh+R+LWtlS3ZJjQYp6mVJnmrGyyhkAQ7rsXsUf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:89:ca:60:69:81:6b:33:2d:3a:56:1d:0f:cd:00:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a1e65f8083c859bcd0d2c52a1e061eb5131f5f1
Validity
Not Before: May 6 03:00:38 2025 GMT
Not After : May 7 03:00:38 2025 GMT
Subject: CN=78127eb984ced2e3d66ff01732225b7b3671ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:f6:35:09:8f:64:e3:dc:51:40:9e:83:b0:
69:b0:a9:5c:87:14:ee:80:a6:68:9f:bf:ef:16:05:
2c:bf:9a:6d:5d:6c:56:68:49:31:d8:0e:7f:47:86:
0b:f9:48:55:d4:d0:4a:26:d8:92:ae:e9:1b:f1:07:
65:b3:15:73:ba:e4:2b:89:d6:2e:6d:6d:12:5f:a0:
c4:2f:c4:e1:e0:67:78:cf:bf:40:87:af:f5:c7:c8:
78:51:29:c4:15:90:4c:8f:f5:f7:36:23:f7:dd:68:
c0:50:17:ed:1d:88:2b:9c:f3:61:2d:c1:43:2a:e1:
cb:bc:f5:b0:25:70:d4:13:87:62:e1:2e:3b:5c:fd:
31:2c:95:f8:71:b5:f2:1d:23:a7:b9:06:43:56:41:
00:06:c3:31:5a:dc:0f:86:0e:1b:d9:b9:13:fb:7f:
65:7f:95:e9:e5:26:1c:15:01:a8:d7:5d:ee:92:30:
99:37:b2:02:cb:ff:07:40:c3:d3:eb:d1:65:60:b4:
56:f7:da:2e:6e:7a:7b:57:12:02:73:cc:5a:37:15:
b7:8a:69:2e:81:99:a6:31:9c:1f:e4:09:86:7c:01:
2f:2f:4f:72:63:6e:5b:74:96:a6:8f:34:3a:c1:d9:
ba:4f:2c:c0:19:87:be:8d:c1:b2:33:3d:7a:a6:9c:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:12:7E:B9:84:CE:D2:E3:D6:6F:F0:17:32:22:5B:7B:36:71:AD:48
X509v3 Authority Key Identifier:
keyid:2A:1E:65:F8:08:3C:85:9B:CD:0D:2C:52:A1:E0:61:EB:51:31:F5:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/d097bf-b0f5-43e1-86a2-cfb8da549067/1/Kh5l-Ag8hZvNDSxSoeBh61Ex9fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:17:08:89:cf:c4:d5:ab:93:08:8d:9a:09:fa:43:3e:1a:51:
81:81:46:d3:5c:74:d9:d2:d3:5f:75:5b:58:4b:39:35:f5:72:
5c:08:a5:a0:79:a3:3b:76:5e:ff:83:8b:c3:3a:f6:66:1d:d2:
3b:87:41:41:17:b9:77:d5:4d:96:07:b0:46:07:4c:ff:8b:71:
90:0e:e9:b9:a6:98:d2:57:e4:42:d7:85:fc:9a:f1:6a:7a:1d:
07:96:cc:18:ab:cb:12:de:ff:9e:f0:73:3e:fc:85:52:61:b1:
ea:cc:d6:6f:b9:a1:11:6f:96:55:2f:9e:f9:35:f2:54:1f:25:
57:d7:2d:ee:1f:25:b0:4b:6a:78:2a:88:7e:dd:24:9b:49:8d:
35:33:9e:fd:bb:d9:97:db:91:59:97:24:11:4e:4d:cf:83:c7:
8d:c5:bf:49:43:55:ab:31:44:ea:ed:7a:e1:a6:ae:f5:f3:3f:
86:de:a3:a5:ad:8f:73:3a:22:13:61:91:48:0b:ad:25:9a:16:
29:38:72:82:7d:35:ad:e6:18:1d:76:cd:0f:5c:1b:86:38:c1:
ab:ac:e6:13:bb:36:ec:75:4c:f1:8c:08:fd:d8:b5:56:df:87:
87:9b:91:63:e8:51:d5:6b:55:30:9e:d2:47:0d:47:90:f6:0d:
3b:9e:37:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:21:47 2025 by rpki-client