Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
File: KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft (raw, json)
Hash identifier: ASUSDGKTIYEPT/e2R0IDLxPU2FQFScAt5LO8Q3VZ9h4=
Subject key identifier: 9A:4B:C1:98:D4:FA:1D:19:4E:01:48:A5:5C:75:F7:AA:B5:9E:B8:0E
Authority key identifier: 2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
Certificate issuer: /CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Certificate serial: 019656EEC71C2CCE42C9B37666B6150CF95A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
Manifest number: 04CE
Signing time: Mon 21 Apr 2025 06:00:11 +0000
Manifest this update: Mon 21 Apr 2025 06:00:11 +0000
Manifest next update: Tue 22 Apr 2025 06:00:11 +0000
Files and hashes: 1: FN4mbfTwvi8Xhlnmnlqh5KIO2hw.roa (hash: Z0wCpt0sE7ChkFPlKeGXtBFCnXabrU9fj1GXtnw3GDg=)
2: KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl (hash: QQa3cYwGFKnDvDpNh0z0nHcDlcCVSvxOhJlaCWCeoH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:ee:c7:1c:2c:ce:42:c9:b3:76:66:b6:15:0c:f9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1707889794cea0622bd4921d6bdbdd56ef0b06
Validity
Not Before: Apr 21 06:00:11 2025 GMT
Not After : Apr 22 06:00:11 2025 GMT
Subject: CN=9a4bc198d4fa1d194e0148a55c75f7aab59eb80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1a:ec:c8:b0:d1:61:0b:49:ad:55:c9:8f:36:
47:49:e2:7d:68:fc:76:be:9a:4e:ea:12:d0:8f:1f:
6a:cc:fd:59:08:74:fa:45:21:e7:72:c7:77:69:f5:
92:1d:1a:66:5d:2a:79:d2:69:43:7a:93:f8:0c:a5:
80:6e:31:bc:53:83:97:10:ee:e1:52:86:23:b7:a7:
1f:40:25:81:fe:9b:b2:c8:01:d2:39:fb:e9:dc:6d:
b7:4f:b6:31:87:f5:c4:a2:aa:be:bc:33:c2:a3:96:
0b:ed:1b:7b:12:c0:27:05:6f:19:f1:a6:8e:41:22:
68:c5:ff:92:63:c6:2f:84:1b:26:6e:65:01:83:94:
8c:22:b1:79:3d:7c:01:d6:33:c5:e4:72:51:5e:27:
89:d4:25:2a:81:56:ff:c6:a8:42:ac:2d:48:cb:03:
79:5a:a6:ab:70:67:b5:b4:e8:e0:f0:06:ba:c7:0e:
2d:6b:5b:9c:f5:1f:31:0c:03:18:9e:f1:f8:65:01:
12:6d:8b:0d:ef:9a:4f:59:3a:43:c4:f0:e2:a6:c2:
ad:ac:b2:eb:16:78:46:12:0b:5f:0f:d9:84:b6:4d:
66:08:f5:35:f5:c5:e4:a2:cd:ab:e9:e2:1d:0d:f2:
03:3a:d8:59:02:a4:dd:6f:d7:42:13:e9:5b:73:aa:
12:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:4B:C1:98:D4:FA:1D:19:4E:01:48:A5:5C:75:F7:AA:B5:9E:B8:0E
X509v3 Authority Key Identifier:
keyid:2B:17:07:88:97:94:CE:A0:62:2B:D4:92:1D:6B:DB:DD:56:EF:0B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KxcHiJeUzqBiK9SSHWvb3VbvCwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/bacc77-df30-4941-be33-dcb5b9e88e9a/1/KxcHiJeUzqBiK9SSHWvb3VbvCwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:bc:e6:64:6f:d5:55:dd:22:bc:fd:16:8b:40:20:d5:74:d1:
75:fd:04:5d:f0:e8:73:44:69:6e:45:f6:2b:c8:22:05:cc:98:
90:f0:9a:86:5e:68:e8:74:8a:9d:6f:60:21:f7:ca:1e:fe:09:
ba:51:2c:f2:73:5d:7c:b5:d7:06:48:4b:bd:3a:ca:e8:60:ba:
27:b6:96:46:dd:ce:ac:a9:df:b3:74:22:8c:b0:1b:cc:5e:a6:
56:c3:72:6b:ba:4f:ce:31:07:70:00:70:be:fb:a4:97:b8:0e:
c0:a5:17:5d:1d:ec:03:04:5c:07:9f:7b:87:b6:25:96:42:2c:
6a:7b:92:ee:5c:72:2d:d7:4b:7d:c5:4b:cb:39:d8:45:68:13:
60:fa:91:88:ae:8f:06:36:f1:d4:23:b2:36:09:ea:d2:e8:1a:
0b:34:ba:7e:68:59:42:7d:d9:87:67:ca:65:f2:74:61:06:50:
a0:74:bc:38:bb:61:ee:c8:11:f7:22:c5:07:98:f6:a4:2d:cb:
5f:b5:5f:a4:83:a9:a9:65:1f:84:9d:c5:ed:ce:cc:86:c9:15:
ea:b6:93:62:9d:55:73:4c:17:54:ce:4d:ad:19:ea:33:84:ac:
0e:d5:6f:ab:e2:4d:1b:1b:24:89:82:f1:c2:e6:1a:35:de:b2:
d8:12:02:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:38:02 2025 by rpki-client