Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
File: kBewvZCCfeCNJP72G8xEhiAkv34.mft (raw, json)
Hash identifier: jMUz2Q9K2wFWuVQelqHHkst4CTKhi/+8VsYJv0To11s=
Subject key identifier: FD:EF:90:5D:43:C5:3D:A0:60:C6:62:BD:2B:8A:AB:CD:27:12:93:F7
Authority key identifier: 90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
Certificate issuer: /CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Certificate serial: 0196561325FE2CADDEECDA77198C62C96D88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
Manifest number: 0B93
Signing time: Mon 21 Apr 2025 02:00:17 +0000
Manifest this update: Mon 21 Apr 2025 02:00:17 +0000
Manifest next update: Tue 22 Apr 2025 02:00:17 +0000
Files and hashes: 1: GDngKunQly0rXAZJTM9K6ouZldE.roa (hash: srWtclzCrCIl56nGBNOU8VqqYjtRTWRgnKIo2g1oYz4=)
2: kBewvZCCfeCNJP72G8xEhiAkv34.crl (hash: f4qxug+htfHImFJ8ZpdjBXGjUGMJODbEcSj1KEhfNhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:13:25:fe:2c:ad:de:ec:da:77:19:8c:62:c9:6d:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9017b0bd90827de08d24fef61bcc44862024bf7e
Validity
Not Before: Apr 21 02:00:17 2025 GMT
Not After : Apr 22 02:00:17 2025 GMT
Subject: CN=fdef905d43c53da060c662bd2b8aabcd271293f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ad:4e:3e:e7:43:e9:19:90:c0:c4:e3:b2:dc:
9c:b7:2a:ae:7d:5e:70:8e:3e:a3:b7:36:5d:c0:b3:
53:64:5f:ce:a7:56:50:69:27:5f:33:a1:7b:7d:af:
92:c2:d6:24:5f:d0:60:23:25:5e:2f:eb:96:ca:47:
8b:93:6d:67:30:e0:03:4f:f4:23:c6:bf:dc:d5:c7:
58:7b:90:dc:5d:9f:b7:c7:e6:7e:a6:ba:ec:c8:57:
ac:9e:67:2e:46:36:7e:d7:54:d0:a9:16:38:41:b2:
3e:85:52:24:9d:98:9a:d7:37:48:97:3a:ec:15:8e:
d5:a2:35:5c:f0:e8:dc:84:d3:e6:b7:97:ab:ca:e1:
9b:85:ea:6a:5a:79:72:e0:54:21:e4:3e:6b:34:09:
1d:31:f8:55:43:7f:4d:2c:81:d2:4f:ba:44:3e:2b:
38:fc:d4:c2:c7:c8:e9:26:5a:d0:7b:ed:0d:28:08:
75:dd:4d:dd:90:90:fa:4c:f6:25:af:43:fb:68:35:
90:47:ce:ad:e4:91:ea:34:21:f8:48:0b:f1:41:19:
c4:dd:99:e5:7d:7a:cb:6b:03:af:8a:25:e4:25:a6:
08:55:f1:06:57:f5:50:73:68:d8:09:06:0f:a2:81:
4d:06:c7:e1:64:43:4b:17:4f:78:c6:c5:f7:d2:16:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:90:5D:43:C5:3D:A0:60:C6:62:BD:2B:8A:AB:CD:27:12:93:F7
X509v3 Authority Key Identifier:
keyid:90:17:B0:BD:90:82:7D:E0:8D:24:FE:F6:1B:CC:44:86:20:24:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kBewvZCCfeCNJP72G8xEhiAkv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/bb560a-4284-4fc0-b05d-a8be9932aa89/1/kBewvZCCfeCNJP72G8xEhiAkv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:df:a4:99:4d:08:54:2d:78:dc:e4:87:30:5f:0e:0b:d8:cc:
ea:aa:c5:67:40:9e:f9:57:ea:3e:ff:8f:26:34:26:e4:a5:15:
49:d3:a3:e6:ab:8f:2a:ce:a5:08:ac:0d:d1:6e:05:c0:ee:5e:
5e:67:43:1d:29:28:61:9b:e6:1b:f1:56:ef:30:ae:3f:36:c7:
88:56:bf:24:90:ba:ae:e9:b3:ad:99:d5:34:4b:32:1c:b8:c6:
0b:1a:04:29:df:6f:1e:07:c3:85:38:58:63:c3:97:74:6f:45:
c8:28:18:00:96:6e:6d:55:74:70:aa:88:0d:67:a1:d3:aa:ce:
fd:85:d3:02:b8:2b:5d:bb:67:06:d5:3b:9c:d1:63:15:79:e8:
c4:80:1c:91:d5:c6:b5:e2:3e:13:33:94:53:00:b7:da:41:12:
22:f3:33:ea:e4:e8:58:b5:88:3e:c0:d8:4a:ac:87:27:cc:a3:
9c:72:6c:20:11:bd:00:42:2a:d4:9f:69:76:55:2d:5a:f1:c9:
88:ed:c9:31:48:a8:ef:87:fb:36:bc:b1:b6:17:4c:1d:bd:da:
ef:e8:08:6e:27:a6:54:48:00:7a:51:e4:1a:1a:79:c1:fe:41:
b7:ec:00:68:24:16:c8:6b:28:36:e9:81:0b:ec:a5:a6:a1:d6:
1e:0d:26:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:55:59 2025 by rpki-client