Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
File: KcIQP9JBfIhpFFYX3pT8yROwhe8.mft (raw, json)
Hash identifier: mxoE7AcA1C8/yDMYjCeOv0a1Yi6p7QcNMQudg2+ooeY=
Subject key identifier: 0D:D4:A6:CA:FD:65:7E:B6:EB:61:AA:95:12:D4:95:C6:02:BC:CC:8B
Authority key identifier: 29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
Certificate issuer: /CN=29c2103fd2417c8869145617de94fcc913b085ef
Certificate serial: 01965048727AC40D1832F14C0A1A130A4F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
Manifest number: 1280
Signing time: Sat 19 Apr 2025 23:00:47 +0000
Manifest this update: Sat 19 Apr 2025 23:00:47 +0000
Manifest next update: Sun 20 Apr 2025 23:00:47 +0000
Files and hashes: 1: HFzLX8JfB09bMiykDXTNNVwsa28.roa (hash: RkC66kEQrpDYwov3VUFFbJbKcNeYjT04dJ6fhWE8V94=)
2: KcIQP9JBfIhpFFYX3pT8yROwhe8.crl (hash: FfP0RBoEtbauSQn5yuINy7+Ku4HbkPaS0Ww3Y+JNTS0=)
3: _C12IjEOj75oE5QypNCeEnRnlyI.roa (hash: EBWCxN3qkCMZlfAoAwH4ZzgBiUuNGMo8jh7xQFNJR1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:72:7a:c4:0d:18:32:f1:4c:0a:1a:13:0a:4f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c2103fd2417c8869145617de94fcc913b085ef
Validity
Not Before: Apr 19 23:00:47 2025 GMT
Not After : Apr 20 23:00:47 2025 GMT
Subject: CN=0dd4a6cafd657eb6eb61aa9512d495c602bccc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:05:61:6a:99:0e:ab:f5:e1:c4:8e:76:cc:d8:
3f:76:f2:b7:4c:e3:55:e7:70:9a:f8:9e:df:2e:a3:
3a:2a:8a:b1:bc:f5:41:f3:a0:12:8f:47:09:a2:22:
90:de:b7:bb:52:15:88:06:36:60:42:25:8e:0b:9b:
b2:cc:81:91:2c:1d:f7:4f:47:89:42:f6:89:a8:62:
a2:b3:86:eb:61:f4:fd:bc:6e:1e:1c:94:42:15:13:
85:12:98:b5:18:d3:09:04:45:46:e7:92:43:08:26:
b8:b8:55:3e:23:0f:29:58:45:b6:e9:7a:c3:c0:23:
a4:ef:25:e1:39:43:ec:27:5d:09:1a:8f:a7:81:f5:
ea:df:3b:a1:ca:56:fd:59:f0:86:0e:3c:c5:92:fb:
e3:ed:c6:c0:8f:59:df:79:b6:38:2f:1a:86:70:db:
a2:51:6d:9a:5f:f9:b9:ad:25:fb:c4:60:c4:5f:b1:
2b:1d:85:01:3f:bf:20:b0:46:43:a8:f2:9d:5a:e5:
2a:4a:23:28:d3:f0:cc:74:4e:ce:6d:00:d8:49:b7:
5a:ad:b6:23:e5:4d:ad:b3:0f:ff:af:ac:98:40:bf:
03:1e:32:41:c5:ad:e6:fb:75:d7:0e:6a:78:ef:53:
97:11:ab:0a:58:6b:54:fe:7b:bf:8a:fa:65:b1:45:
92:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:D4:A6:CA:FD:65:7E:B6:EB:61:AA:95:12:D4:95:C6:02:BC:CC:8B
X509v3 Authority Key Identifier:
keyid:29:C2:10:3F:D2:41:7C:88:69:14:56:17:DE:94:FC:C9:13:B0:85:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcIQP9JBfIhpFFYX3pT8yROwhe8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2b8d82-39fb-4a56-89c5-9d5657513e20/1/KcIQP9JBfIhpFFYX3pT8yROwhe8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:91:6d:6a:ed:4f:4f:63:a4:72:39:d0:ff:f3:db:aa:56:e4:
f1:21:12:44:2b:5e:67:29:0a:fc:0e:39:8f:f8:96:8e:b0:26:
fd:7f:f9:24:6c:9c:af:f2:f0:11:2c:ac:31:f4:19:c2:50:15:
d5:a9:f7:fa:5b:10:6d:b8:6a:09:1f:4d:27:9d:50:de:5f:fc:
6d:32:18:49:71:21:ba:53:b5:7a:0f:b0:ed:0c:9f:a8:8a:be:
f7:48:09:9b:0a:5a:86:63:6e:58:cb:ff:da:e8:7a:d3:df:57:
63:7b:c2:1f:f0:8e:48:df:25:5d:d9:47:30:41:e5:d3:f9:2d:
f3:02:95:ea:7d:39:e9:ab:02:b7:02:3d:54:10:5f:8c:4f:16:
a3:2d:36:4f:88:99:14:95:6b:f5:73:3e:47:c5:69:8f:66:2d:
86:d6:3c:76:57:d3:85:81:75:fe:df:63:43:24:48:69:cc:5c:
fe:42:27:dd:70:7c:32:c0:57:f6:67:9b:86:65:7f:5c:ff:08:
8e:3b:28:11:65:83:34:96:80:29:fc:af:73:8f:24:af:ba:5b:
10:8a:cd:f5:82:86:34:3a:8c:76:bc:b8:94:05:35:e1:d0:9d:
07:de:fd:e4:98:b5:95:9e:f4:d8:ea:7a:b6:ae:38:74:13:f6:
51:85:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:39 2025 by rpki-client