Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: pMhfOS8F6YA1yUC0ztgm3s3s9qMs5QS8RZ0Zwi30bYI=
Subject key identifier: E3:5C:31:AE:3F:31:22:6C:9F:6A:21:26:67:7B:C4:0C:7F:8A:C8:85
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 01964C6B459353915D220ECCECDD00F70C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 01CD
Signing time: Sat 19 Apr 2025 05:00:20 +0000
Manifest this update: Sat 19 Apr 2025 05:00:20 +0000
Manifest next update: Sun 20 Apr 2025 05:00:20 +0000
Files and hashes: 1: NT1QDrMKsOVILzcOXnhpnfJyMhI.roa (hash: 9+BV5zYO8wTAitnkhk1uaQv1Ka5SPfIsNZ8LLhRy68U=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: l2DzOnQiNcIq3bgISXYe12GQm4MtMHEjSr14cXJpCk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 05:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:45:93:53:91:5d:22:0e:cc:ec:dd:00:f7:0c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Apr 19 05:00:20 2025 GMT
Not After : Apr 20 05:00:20 2025 GMT
Subject: CN=e35c31ae3f31226c9f6a2126677bc40c7f8ac885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a8:a6:de:58:d6:12:19:22:99:ab:d5:f1:ac:
5c:73:54:6e:e4:78:aa:4b:07:7f:f2:31:f4:c5:0b:
29:d8:5c:91:3d:8b:a7:c3:62:ff:dc:0c:6c:90:10:
43:23:b8:f0:bf:50:67:fb:69:cd:5e:70:62:61:9e:
80:41:80:9a:d1:73:48:6e:fe:5d:d1:6b:45:4c:24:
31:9b:b8:35:72:5f:6f:52:e0:9f:23:7c:fa:66:b7:
ae:ec:4b:d3:bd:1c:9e:76:bb:eb:84:e1:ef:a4:06:
61:01:28:d0:e5:82:11:ac:75:d5:cd:9d:04:3b:5c:
2a:8f:56:20:70:d3:dd:5e:e0:32:11:08:53:fa:c5:
58:55:8d:2b:cc:64:e7:cc:1a:46:83:09:11:0b:06:
2d:35:a2:81:67:9e:21:e2:59:99:13:cc:78:06:35:
16:20:26:8f:d5:4a:a0:b9:af:b1:f7:33:51:5f:9f:
cd:cd:f8:9c:d5:a0:f6:c1:bd:6c:b6:c9:48:c9:e1:
e8:16:13:f4:3c:d4:7d:ad:5a:72:9c:14:cf:1f:ca:
45:e0:a9:c7:57:93:82:bb:e8:4a:18:94:d5:05:a2:
6a:08:6c:59:d0:4b:dd:e4:a0:53:fb:3a:e9:9e:d0:
95:8d:f9:c5:5e:80:38:a2:ba:56:44:6f:ac:ca:f0:
f6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5C:31:AE:3F:31:22:6C:9F:6A:21:26:67:7B:C4:0C:7F:8A:C8:85
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0a:91:52:f7:47:5d:6a:23:e1:8c:1b:85:ea:cb:cf:28:84:
0c:09:58:81:60:6f:4d:ff:67:91:70:3d:b2:f0:b8:b9:95:2e:
61:27:02:6a:34:ef:f7:d1:0f:53:13:55:7f:60:0f:0f:9f:f1:
b6:e6:0a:5f:68:4f:16:80:1e:57:b6:b2:ac:5d:bb:dd:8b:f7:
4b:32:bd:6d:e0:ef:67:9d:56:0e:65:8a:81:a9:87:77:91:7d:
51:84:42:0d:f3:3a:eb:1a:06:dc:e8:63:4c:bd:4f:7f:47:87:
82:ef:a1:8d:6a:83:b5:c4:10:3b:39:9a:9f:01:ee:92:14:cd:
7d:0a:1c:31:83:40:d9:de:b9:72:96:3b:84:23:aa:63:cf:c2:
d2:98:4a:74:95:39:7d:a4:be:fa:d7:10:da:4c:13:8b:47:07:
5b:fb:b2:01:4d:2a:20:a9:c5:d4:2f:fd:12:51:12:e4:07:b8:
17:66:9e:f7:2e:01:0b:7a:ac:bf:22:80:77:9a:8b:ac:77:17:
bc:7c:40:09:3f:c7:4a:91:93:0d:ce:54:6e:74:65:3e:72:91:
5f:55:33:ea:e4:ee:96:39:23:78:e2:33:17:5e:d6:88:75:5f:
89:7c:f4:f4:39:02:46:c1:9f:50:fd:54:4a:1b:c5:7d:d3:08:
d0:e9:0f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 15:27:54 2025 by rpki-client