Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
File: kHb3fahBt7lCFbb6wtQaccIVFgE.mft (raw, json)
Hash identifier: TRqjqRZC0ATDkF04FmnOTbG/stYwcmDq81NGAhLeKiI=
Subject key identifier: A0:0D:A6:9E:45:62:2A:D5:65:A8:4F:7A:30:34:CF:50:5A:FB:95:A6
Authority key identifier: 90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
Certificate issuer: /CN=9076f77da841b7b94215b6fac2d41a71c2151601
Certificate serial: 019655376A65BA1D30813D00A60BAED61843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
Manifest number: 0E8E
Signing time: Sun 20 Apr 2025 22:00:17 +0000
Manifest this update: Sun 20 Apr 2025 22:00:17 +0000
Manifest next update: Mon 21 Apr 2025 22:00:17 +0000
Files and hashes: 1: 79LYqjKNTJN0ouKGzdcbqvTlAUQ.roa (hash: ql/wdfFz1qsER0EkZDThbVWptAlBg9mw+jziuKWlZyc=)
2: kHb3fahBt7lCFbb6wtQaccIVFgE.crl (hash: EJpzBxTVAVkHiOezKc0dWUACE9vxs/L76Qbb+tQ1xyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:37:6a:65:ba:1d:30:81:3d:00:a6:0b:ae:d6:18:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9076f77da841b7b94215b6fac2d41a71c2151601
Validity
Not Before: Apr 20 22:00:17 2025 GMT
Not After : Apr 21 22:00:17 2025 GMT
Subject: CN=a00da69e45622ad565a84f7a3034cf505afb95a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:73:f1:d2:f7:67:aa:a0:14:47:39:5c:de:87:
7b:a0:64:41:16:52:c7:1a:e7:61:22:79:12:7a:5e:
34:d0:08:c4:29:9e:5c:af:79:bf:b6:31:d9:0f:ca:
b2:22:30:66:24:a3:73:f9:98:7f:4c:50:e8:0b:3c:
af:7f:2c:72:21:43:0f:da:8f:16:34:b5:e3:99:e3:
e0:6e:5e:a3:b5:05:da:05:ed:39:19:c4:07:70:90:
6b:30:7d:21:8b:38:c2:44:9d:c0:46:06:64:38:e9:
84:a1:6f:4e:65:cf:60:a8:4e:c3:a5:cd:3c:3d:71:
01:a7:31:37:69:7f:c1:f0:35:02:b8:05:74:4e:11:
b8:de:53:8d:60:f7:97:0e:94:29:22:98:89:fb:6d:
74:61:95:e9:42:bb:dd:94:ed:65:72:7c:6b:7e:0a:
bb:f7:df:d2:33:30:52:dc:20:da:85:ee:84:43:a8:
9a:65:15:8b:db:5a:3a:eb:45:9a:16:08:73:40:25:
33:26:0d:0d:0f:ea:04:67:2c:99:1c:68:08:8f:5d:
24:36:81:8f:8c:9a:f6:58:b7:b7:d0:52:ec:78:5b:
0a:b0:ca:e9:79:ac:71:36:b6:06:5f:a1:b2:6b:97:
98:5d:0b:b3:92:5d:62:7b:8d:e9:66:47:2a:79:a0:
3d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:A6:9E:45:62:2A:D5:65:A8:4F:7A:30:34:CF:50:5A:FB:95:A6
X509v3 Authority Key Identifier:
keyid:90:76:F7:7D:A8:41:B7:B9:42:15:B6:FA:C2:D4:1A:71:C2:15:16:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHb3fahBt7lCFbb6wtQaccIVFgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e1d6b7-555c-4d9b-afe1-e63ce55370eb/1/kHb3fahBt7lCFbb6wtQaccIVFgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a7:08:0f:4f:14:fa:ea:b7:c6:81:89:e3:01:f5:5f:dd:49:
df:87:4b:79:f6:40:c8:98:d1:34:49:dc:24:a2:43:7b:9d:f7:
cf:de:a7:5e:2d:dc:7c:ef:c8:25:69:81:48:f8:d9:b0:6f:ce:
a2:88:49:cb:2f:bd:d5:6f:39:5e:ab:69:66:8b:8d:6a:a0:dc:
46:be:d8:ad:2e:49:71:82:ca:87:e2:e7:e5:9b:b0:5e:e8:4b:
53:ad:ed:68:5e:3f:18:55:2b:67:cc:f1:9a:cb:a3:13:f3:42:
5a:4f:25:6b:e3:80:02:5a:43:cf:c0:a5:5a:de:49:6c:09:c8:
a2:4c:cf:99:65:e4:74:06:a9:72:00:12:29:ac:c7:1d:c7:44:
99:54:c8:90:42:67:cc:db:29:58:99:e2:08:85:00:ec:7f:b1:
0b:20:3a:e8:c2:6b:7b:e5:97:e6:ae:51:6f:d9:9c:e4:f1:de:
d6:4d:a9:03:58:c8:73:bb:5b:3d:a8:66:f0:ac:94:5d:cc:5e:
6f:37:20:34:26:75:0c:ae:1e:67:f5:08:0c:06:f7:25:56:01:
04:88:a8:73:db:ec:0a:a1:5a:d7:f8:2f:91:32:b4:17:dc:f3:
b7:bd:11:ac:fa:cf:36:6d:6e:ca:ce:9b:0e:e1:95:d6:7d:95:
0a:24:6c:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:01 2025 by rpki-client