Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: 4Ko3udZvR5mL63h7XLukYekClLhY0Niaw5rSajjq9m4=
Subject key identifier: 12:45:A5:44:7A:43:EF:60:A9:3A:5B:95:40:EA:2E:95:3A:93:8F:94
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 0196594B817C55B9E480EAAD6B9A981CD698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1502
Signing time: Mon 21 Apr 2025 17:00:42 +0000
Manifest this update: Mon 21 Apr 2025 17:00:42 +0000
Manifest next update: Tue 22 Apr 2025 17:00:42 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: gLjajsMCgjj7xr5qAed9iFQ05/RbS3aqq1BTbgYcBOE=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:81:7c:55:b9:e4:80:ea:ad:6b:9a:98:1c:d6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Apr 21 17:00:42 2025 GMT
Not After : Apr 22 17:00:42 2025 GMT
Subject: CN=1245a5447a43ef60a93a5b9540ea2e953a938f94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:90:6e:eb:c2:12:4f:68:f1:ff:41:e5:d0:
39:7e:11:cf:15:98:ef:4a:8f:18:66:12:c6:0b:16:
b0:49:0b:13:9b:a1:08:8f:e5:df:27:ef:e8:ca:1b:
9f:85:09:db:df:e4:cb:1d:ac:c7:1d:9b:25:68:55:
48:f0:b5:3c:03:36:b2:a7:03:e5:f2:b9:de:59:db:
50:92:36:08:13:f6:93:d4:f3:7f:ad:e1:8a:63:03:
4b:10:eb:82:8c:fa:87:6c:d5:24:7e:43:1d:99:df:
8f:d5:ab:79:b6:05:bf:ac:34:5c:c9:73:b5:3d:12:
1e:6a:ab:02:31:01:fc:78:8e:39:20:bc:5b:72:8e:
10:6e:9e:51:b6:15:70:9b:50:44:4f:40:b6:af:fb:
49:4f:d1:1a:e4:5a:11:14:40:65:70:eb:bd:db:6f:
9d:33:65:2d:dd:0d:a8:51:5d:72:45:b8:3e:2e:ce:
c6:2c:cc:c5:ac:78:9b:af:01:15:bb:16:90:6e:b1:
39:59:8b:a2:aa:9c:67:38:9f:7b:09:ae:f2:5a:6c:
47:23:18:52:51:29:e2:e7:03:8f:ef:0c:b8:6d:57:
39:5c:d7:75:6f:75:ce:4d:04:d6:50:4d:44:8f:87:
fd:d1:1d:5e:fe:d8:cc:a9:b3:9b:73:a0:15:3d:a7:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:45:A5:44:7A:43:EF:60:A9:3A:5B:95:40:EA:2E:95:3A:93:8F:94
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7f:a3:be:d8:8c:c3:e6:ad:f3:a9:7e:1b:d0:21:64:a9:5b:
0e:3f:cd:81:0c:e5:6e:89:bc:ba:ae:ef:e2:c8:d9:cc:84:7b:
b4:ac:88:ce:1e:78:b0:70:3d:50:a1:89:15:3f:7d:ca:5b:aa:
9e:ae:be:30:4c:42:25:5e:a5:05:1f:98:a0:1c:2c:e8:69:37:
3e:48:e7:7e:b9:24:7f:9e:ae:e3:c5:51:4b:af:c0:9f:b3:aa:
1d:f0:61:42:dc:f5:ac:ac:9c:28:fb:69:36:19:8f:43:b9:ed:
ef:92:f9:3b:ce:dc:93:60:81:6c:a0:6a:6b:98:e6:2b:4d:fe:
85:02:f9:01:37:c9:2b:72:3c:61:4c:47:bd:a1:2a:32:75:fd:
ff:3d:f1:ca:65:0a:15:44:45:3f:f5:66:73:27:f4:ab:82:4d:
2c:94:a4:28:55:2c:7e:96:3d:17:b3:60:49:54:4e:b8:31:c8:
d3:97:1f:d8:a8:6e:ae:31:ff:e1:0d:c4:80:b2:c3:aa:57:4c:
be:18:9b:a1:0c:9b:ba:be:47:50:8c:3d:2d:20:5e:02:f7:e4:
44:8f:2e:6d:f3:83:16:aa:20:06:68:4e:8f:fd:d6:fd:e7:aa:
24:9e:51:13:db:35:da:e9:e7:7f:12:c4:ba:90:e6:be:b2:1d:
dc:f3:ac:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:54 2025 by rpki-client