Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
File: KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft (raw, json)
Hash identifier: MmfVMF5Fioha8cYtOoOg9jfz8GP1+36tcHU16U2Nhoc=
Subject key identifier: 93:E9:F1:D0:DA:06:19:81:12:94:30:85:DF:5C:72:97:E4:13:24:AC
Authority key identifier: 28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
Certificate issuer: /CN=2841262acd62c90e68081a6f777375df2c3713c2
Certificate serial: 019656B832BD6751E970B381C0D47CC0DB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 05:00:34 +0000
Manifest this update: Mon 21 Apr 2025 05:00:34 +0000
Manifest next update: Tue 22 Apr 2025 05:00:34 +0000
Files and hashes: 1: KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl (hash: QKHCpW0DX3gvnLi/q9Rd8GX5bhPdaidyuBQKFOnRvG0=)
2: m0XExKmyfiqbc39X_t0r3f-rPnw.roa (hash: FEVTKa9GfQK+wd1z7OERkMrYF0fGkCabFyfJNv3Ffiw=)
3: rqU6u3hoknN-3UdF3hZxUQWu0pY.roa (hash: NDMORKcf0xpEpr+RJnB8nufh5JN+9UGeMs7mpyek8O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:b8:32:bd:67:51:e9:70:b3:81:c0:d4:7c:c0:db:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2841262acd62c90e68081a6f777375df2c3713c2
Validity
Not Before: Apr 21 05:00:34 2025 GMT
Not After : Apr 22 05:00:34 2025 GMT
Subject: CN=93e9f1d0da06198112943085df5c7297e41324ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7a:69:c5:29:e1:a4:96:d8:45:67:dd:73:25:
9f:b1:fb:32:83:06:40:34:a5:e3:f6:02:34:2f:0d:
1d:64:37:42:d9:42:7c:60:32:00:00:18:de:f1:66:
e3:f5:cb:3d:cb:6c:5a:47:61:9a:9a:36:4d:b5:f5:
e4:97:f8:99:da:5e:cb:9f:71:0a:d8:b7:3b:22:d0:
67:a7:77:99:a2:aa:13:26:79:2c:c4:59:fa:52:ed:
de:45:d3:78:32:46:d2:64:78:59:f4:80:0c:20:3e:
57:f8:6a:19:44:a4:4f:5b:c9:55:f8:ea:de:5d:27:
7c:9d:25:15:ef:79:5e:7a:bb:e9:ed:4a:f2:ed:85:
56:c3:bb:44:a1:a6:4d:da:26:d8:a6:7b:5f:4e:19:
93:b0:bc:5a:cf:56:fb:84:c7:a9:b7:74:53:45:fa:
52:6d:c5:dd:29:5d:87:f3:1d:d7:32:d5:3b:ae:52:
cd:11:15:04:12:12:87:c4:1e:99:d0:0d:fd:c2:fb:
10:a0:46:6e:a9:04:ee:67:5b:f8:d4:ce:4e:0d:68:
0d:79:2f:64:6f:e5:5d:74:fd:fd:5e:7a:e1:1a:2a:
c5:a8:17:6f:a3:73:de:47:ae:ea:45:ca:7a:1a:35:
53:55:1f:e8:25:26:13:b8:9f:c3:9a:62:6d:25:71:
96:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E9:F1:D0:DA:06:19:81:12:94:30:85:DF:5C:72:97:E4:13:24:AC
X509v3 Authority Key Identifier:
keyid:28:41:26:2A:CD:62:C9:0E:68:08:1A:6F:77:73:75:DF:2C:37:13:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEEmKs1iyQ5oCBpvd3N13yw3E8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/032276-25dc-4c30-8a7b-95a33e12a3ad/1/KEEmKs1iyQ5oCBpvd3N13yw3E8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:28:23:fc:a0:09:ee:bd:6f:49:b0:2e:f8:2c:db:85:bc:94:
65:e2:75:e7:b7:bd:9b:c5:37:3d:c8:30:e8:f9:25:7b:3d:d6:
e0:5e:82:f6:bf:9a:f1:b9:58:2a:09:83:3e:6f:fc:3d:1c:e3:
b6:59:4e:3a:e1:37:f9:4e:30:c9:5c:9b:ee:75:5f:f3:ef:b7:
fd:9f:fb:6b:64:a1:ca:52:56:c9:05:6b:ac:7a:16:23:00:85:
60:0e:3c:c3:88:9c:09:f3:97:93:f2:cf:b3:3d:02:05:04:89:
94:bd:32:ed:86:0a:2b:b9:16:7e:fd:3a:54:4b:be:a1:9a:45:
e3:8a:4b:4b:38:01:9f:58:a7:72:f8:8e:03:9b:3c:13:74:9d:
b9:b7:9c:2a:8f:26:72:dd:3f:5a:da:87:22:41:7f:36:33:b9:
27:d2:78:fe:e5:67:6f:73:60:fd:b9:5f:c4:6f:59:74:63:6a:
77:53:32:a2:43:95:64:b9:0e:e9:a6:55:ec:67:af:fb:69:9b:
08:b2:21:a3:c9:c2:46:4b:84:7a:bc:32:79:59:5f:50:f9:1a:
0a:75:8c:6b:04:af:ef:06:4c:51:15:95:bf:4f:8b:47:82:96:
b8:66:78:22:54:0a:c9:98:98:54:8a:3a:e2:96:75:1a:a0:e9:
20:53:c0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:07 2025 by rpki-client