Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: vb1EfybnBcoO4QgWruxZU4bNZfHRosK5Ws3OTU9TIZE=
Subject key identifier: 6B:DF:CE:6D:D6:20:9D:D9:D7:B7:44:40:1D:B5:E1:6F:1A:D4:53:63
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 019644E8FA08733AF25FBDC2976831B2DCB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0538
Signing time: Thu 17 Apr 2025 18:00:41 +0000
Manifest this update: Thu 17 Apr 2025 18:00:41 +0000
Manifest next update: Fri 18 Apr 2025 18:00:41 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: JyA0iO4ZVs8/nAL0TwBnJCffZdKwhfgSc/nydVupgF4=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:e8:fa:08:73:3a:f2:5f:bd:c2:97:68:31:b2:dc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: Apr 17 18:00:41 2025 GMT
Not After : Apr 18 18:00:41 2025 GMT
Subject: CN=6bdfce6dd6209dd9d7b744401db5e16f1ad45363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:41:da:30:53:09:50:21:dc:45:77:4d:15:de:
32:12:05:da:97:0e:44:16:6b:00:60:f9:b7:13:1e:
f0:76:26:4b:84:9d:9b:2d:24:c6:a7:53:c5:9b:26:
b0:4c:47:82:2a:29:6c:0f:5c:16:23:cf:63:7a:64:
02:2d:b3:7e:33:f3:bf:9c:a7:97:25:e4:fc:1c:50:
ed:c3:c7:49:14:c6:07:ed:b3:13:46:08:99:38:a0:
64:73:db:ff:ed:c3:6e:64:d7:60:7f:2b:e5:b7:94:
e9:80:f0:db:f7:39:98:a9:a3:7e:95:bc:16:6f:d5:
76:9b:a3:e5:f0:25:34:6b:e8:4c:55:f2:47:1b:b6:
06:66:75:c4:dc:0e:8e:da:27:9a:f6:5c:7f:58:8f:
01:27:b1:72:35:92:df:fe:14:e4:a8:0f:6c:98:3b:
d0:f7:59:a1:47:29:8d:0a:56:6c:76:ef:4d:21:39:
47:78:66:cd:8a:d2:46:4a:af:db:b5:9f:2b:10:f8:
d5:ef:8d:8b:ab:5c:0e:97:0c:df:0c:54:46:8e:dd:
4e:bd:83:00:b2:35:0b:b4:bd:71:7d:4d:9a:e1:bd:
1f:bb:d6:f5:f8:b7:1f:16:15:a2:25:5a:f5:14:18:
4b:04:cd:d0:25:37:34:36:c2:6f:0a:8b:48:6c:0a:
08:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:DF:CE:6D:D6:20:9D:D9:D7:B7:44:40:1D:B5:E1:6F:1A:D4:53:63
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:de:8c:f0:33:88:40:c5:68:b7:d5:e1:e8:eb:f4:72:52:
17:5c:67:68:27:89:ab:da:0b:62:f6:35:d9:a1:96:fa:f3:43:
1a:f2:c9:3a:1b:67:df:be:7c:37:ef:01:7b:f4:0f:e0:e0:ee:
45:52:17:f7:fc:ac:b5:f5:f9:63:14:a2:40:88:5f:cc:e3:95:
f8:52:03:f0:d8:7e:f3:4d:14:a8:3e:0c:84:a9:a1:68:e7:2b:
da:40:1f:85:1b:88:68:f0:b1:05:70:9d:1d:ef:9d:46:f9:1e:
19:20:25:5c:67:36:37:23:4f:c8:d9:f8:90:b7:13:37:7d:ca:
46:4b:d7:da:13:e2:b7:82:dc:e5:83:d7:e9:3a:a4:29:80:31:
be:c7:c8:77:b5:f7:67:e5:6a:ad:2f:79:9c:ab:86:a2:20:4c:
07:2b:ae:0c:1f:80:22:39:2e:1e:bd:a2:a5:bb:67:8f:69:7e:
1f:3d:12:80:b9:3b:a2:03:09:cb:c3:50:fb:cb:e6:55:3a:ba:
14:eb:6f:b1:19:f5:a5:b6:2f:d9:72:7d:b6:61:7a:d8:72:37:
d8:8a:42:2e:b8:98:29:fb:a1:7f:ea:6f:cd:44:d1:e5:5e:3b:
2f:2f:e6:82:3e:66:ef:47:af:de:a2:66:64:6e:92:94:ef:d8:
10:b6:c7:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:37:50 2025 by rpki-client