Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: KhGGQeypQSMoo8pJDxHBYG5A8UFXMFj65iiApV5zbJg=
Subject key identifier: 9A:C5:0F:25:B4:74:96:2A:C5:4B:01:3A:10:29:F8:61:73:05:D8:FB
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 01958C6074CD982A817830204734240B6E9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1497
Signing time: Wed 12 Mar 2025 22:01:26 +0000
Manifest this update: Wed 12 Mar 2025 22:01:26 +0000
Manifest next update: Thu 13 Mar 2025 22:01:26 +0000
Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: 2DBtnT3jvViA4C3zekDpY4pRZBe7ebMgKtExGTdxZ5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:74:cd:98:2a:81:78:30:20:47:34:24:0b:6e:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: Mar 12 22:01:26 2025 GMT
Not After : Mar 13 22:01:26 2025 GMT
Subject: CN=9ac50f25b474962ac54b013a1029f8617305d8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:4a:3a:83:69:cb:b6:27:ba:d1:69:80:e5:
3a:d2:3c:9f:e3:44:17:8c:15:14:c7:3e:d2:dc:6a:
60:d2:87:ef:d9:fa:3c:11:c6:eb:3e:9c:59:1d:0b:
b0:b4:05:6d:79:6f:b3:07:50:5e:05:b9:fc:83:a2:
08:09:32:6a:d8:18:70:99:67:e8:cf:42:04:05:66:
3a:85:2c:23:20:b2:b3:77:65:30:f1:58:ec:4e:2d:
ab:63:b6:5c:9d:73:93:d2:d3:53:0a:62:33:84:fe:
a3:08:28:76:5c:34:d9:ab:35:69:ef:bf:5e:d5:9e:
2b:21:9b:9f:df:50:b3:30:f8:47:6c:5b:c2:27:98:
f5:3b:89:61:2f:b4:a3:a1:88:24:cf:c9:26:03:23:
7c:6b:4b:9d:a1:6e:31:58:e2:3e:83:35:a1:3f:55:
98:50:da:b7:5f:e1:c6:94:b7:f1:7c:a6:e8:e1:fd:
d9:d3:3b:68:73:7b:54:68:f8:5f:09:d1:78:bc:4e:
86:29:a7:e4:50:b9:f7:5f:5e:f5:77:aa:11:22:16:
82:45:13:1a:95:82:52:10:5b:00:0c:8d:d8:60:e7:
5c:75:52:2d:e1:19:8a:27:de:e9:91:32:5c:f1:39:
9a:80:88:86:40:3c:5c:c5:b5:5a:e6:bd:14:d3:be:
e8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C5:0F:25:B4:74:96:2A:C5:4B:01:3A:10:29:F8:61:73:05:D8:FB
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d5:ff:c3:88:62:43:63:63:5a:82:be:03:d0:0d:c5:be:a8:
75:25:83:56:e8:d7:db:63:23:48:34:eb:80:8e:83:cf:81:b2:
00:c3:c9:ed:24:aa:5a:ea:24:05:e8:82:6d:5c:25:be:49:b0:
ea:90:92:81:30:99:0d:03:d4:ec:5f:9b:b4:2a:95:f8:64:8a:
f6:0b:55:49:83:a2:b6:fb:ce:45:9a:63:eb:a2:aa:92:eb:cc:
9c:9d:8a:3e:61:26:99:63:38:cf:34:95:8c:46:74:c9:14:f3:
df:59:9c:60:7d:a4:5c:16:60:bd:c9:bb:fd:af:d4:2c:e2:8b:
cf:b2:df:8b:ce:b2:b4:ea:24:74:0a:ae:1c:5d:bc:03:86:03:
fd:16:aa:f8:ad:3b:aa:1d:c5:a1:8b:f7:6a:ec:7d:c2:e9:84:
46:94:a9:85:84:8a:21:bc:e8:5a:95:c8:c9:6e:13:d4:0a:c6:
ad:7d:ef:2b:9a:6e:ac:31:45:ae:20:07:3c:2b:9e:51:20:12:
36:91:3c:a4:c3:13:5c:36:33:22:f1:6f:d9:f8:8a:29:87:3e:
ed:3c:10:b9:5b:b4:ba:5f:e0:55:4a:46:79:7d:a8:92:38:bc:
e5:ba:44:be:75:f5:58:b8:18:01:90:41:d8:07:0c:44:64:4c:
bb:d5:6a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:30:18 2025 by rpki-client