Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
File: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft (raw, json)
Hash identifier: fM8Jx6Iu4RcN7OXagRzippJLPuaWilOntsZB/Z7P+4U=
Subject key identifier: 42:8F:21:8C:E9:D2:31:AD:C3:95:CB:72:D2:00:CB:29:A8:FD:61:E8
Authority key identifier: 28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
Certificate issuer: /CN=280c3860fb96a823971e2ee62f8abff093861604
Certificate serial: 019655A5F85ADB54C2176980B7B7509B4CC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
Manifest number: 016B
Signing time: Mon 21 Apr 2025 00:01:02 +0000
Manifest this update: Mon 21 Apr 2025 00:01:02 +0000
Manifest next update: Tue 22 Apr 2025 00:01:02 +0000
Files and hashes: 1: KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl (hash: 301ysOU2p496BbzzG/urBpymIpxLHb6XKQ+VqRBwsIA=)
2: vSQNJQ-TqAY10tditE63QDgLi4U.roa (hash: OmFUSF7SfEkV+4PCWG7ne1LHCjmLdydl9a/jqJ2m+sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:f8:5a:db:54:c2:17:69:80:b7:b7:50:9b:4c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=280c3860fb96a823971e2ee62f8abff093861604
Validity
Not Before: Apr 21 00:01:02 2025 GMT
Not After : Apr 22 00:01:02 2025 GMT
Subject: CN=428f218ce9d231adc395cb72d200cb29a8fd61e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:5a:ee:23:6d:06:0e:34:98:18:c5:3e:87:
32:34:83:c2:3f:fa:e4:c2:82:64:55:80:30:51:e6:
c6:9c:85:96:2b:16:f9:52:66:7a:b8:e4:a1:d7:21:
44:33:8a:af:47:16:98:98:d3:81:c5:60:36:96:73:
37:26:cd:29:0b:a4:e7:34:a9:5b:b1:15:ab:31:74:
86:84:97:ed:35:ba:26:3c:63:84:b7:6f:8f:b0:c1:
88:c0:7a:e7:ea:bb:1b:a3:17:c5:f8:4d:a8:74:f4:
a1:dd:42:d5:f9:0e:f7:8e:49:02:da:8a:8c:22:75:
8d:15:fb:14:11:0c:8a:ae:55:98:cf:57:a5:dc:a0:
29:51:7e:7f:9c:dd:c8:2f:1c:b0:c5:44:4d:e6:9d:
17:5d:d9:8b:d4:c9:58:83:25:95:a7:21:48:46:eb:
e5:50:17:c8:aa:ad:1b:cb:f7:20:68:45:5c:85:4d:
cf:dc:dd:db:cc:4c:18:f4:1f:b7:da:71:c1:cc:8b:
ae:ac:1f:1b:d4:e3:b9:fb:13:96:ea:9d:a6:bf:08:
3a:e7:12:08:9b:27:6c:82:28:8e:fc:14:56:87:05:
3f:d8:2e:54:6f:7c:0a:9d:c2:06:db:9f:7c:49:4a:
d7:0e:39:ae:ea:b3:0c:50:78:d6:2e:25:44:88:ae:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8F:21:8C:E9:D2:31:AD:C3:95:CB:72:D2:00:CB:29:A8:FD:61:E8
X509v3 Authority Key Identifier:
keyid:28:0C:38:60:FB:96:A8:23:97:1E:2E:E6:2F:8A:BF:F0:93:86:16:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b134b7-7843-4e0b-ac1d-063aea93ad7d/1/KAw4YPuWqCOXHi7mL4q_8JOGFgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:40:6d:ae:15:44:45:e6:16:0f:aa:77:91:06:bc:98:26:36:
dc:8f:98:b5:19:85:4d:9a:6a:30:c7:76:59:ac:09:35:9b:1a:
4f:71:b2:55:da:ae:32:00:0f:b3:c2:96:d3:aa:98:92:52:64:
5e:96:d7:ca:92:e1:a6:40:11:eb:ec:97:51:ec:bb:94:26:48:
38:9e:a9:2a:de:50:64:b5:23:16:b9:cb:c4:c0:2d:b4:db:f9:
95:0c:4b:74:b6:34:07:38:99:cc:e8:2c:0e:e0:19:e2:2f:53:
ee:e8:31:62:d8:7d:94:9f:50:41:24:01:41:47:a0:ba:05:87:
cf:a9:4b:b8:4e:7c:50:06:d8:a9:90:ab:cf:a5:45:f0:a2:35:
b7:7e:89:49:99:b6:1a:53:83:70:da:3b:11:eb:02:a9:3b:a6:
b5:f6:a6:bb:c6:ba:b8:5f:7e:e6:c1:88:b7:1b:0a:13:8c:b1:
b4:74:13:14:9e:d8:9f:7f:25:3a:63:f4:19:1e:ab:64:3e:69:
52:4b:b8:79:78:0d:8e:53:72:bd:af:5c:2e:1c:ad:c1:95:31:
f3:8b:f1:36:19:95:30:d3:44:88:65:99:25:cc:c7:78:e8:ef:
93:2c:69:d4:b6:81:e0:1c:69:ed:ef:93:cb:4c:2a:b1:f6:2c:
a8:74:30:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:34:32 2025 by rpki-client