Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
File: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft (raw, json)
Hash identifier: EVJpKHhF187A/lBwym0AmJ28g7HeEPYxqfh972iqq0U=
Subject key identifier: 4C:E3:DC:35:6D:BB:B1:BE:5F:C9:7F:C5:CC:34:A0:47:0B:20:AB:76
Authority key identifier: 2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
Certificate issuer: /CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Certificate serial: 01965A26BF248684A7B2AD8DE38BEE45A4A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
Manifest number: 0CC0
Signing time: Mon 21 Apr 2025 21:00:10 +0000
Manifest this update: Mon 21 Apr 2025 21:00:10 +0000
Manifest next update: Tue 22 Apr 2025 21:00:10 +0000
Files and hashes: 1: 5pnBu3tf1gh9PcNOyoNyWCndFPU.roa (hash: aDoSOawNOT1pzaKswy1pRUEDLgJ0J0KdcXZxORUFm5g=)
2: JlZMu6ELMWjh5VfPR-EMHwwwoJI.roa (hash: rcX300zaEAsELfD8QJxpkD3Bk9B/Y8LQIcz2cA6/7q4=)
3: Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl (hash: lYEa4aDyzQlZ5JqMeM+2dYf4YraBfEtKfMuiGuBsJAs=)
4: bzccdE_nNPzPnSlliioVj-7hRew.roa (hash: 4glX8OcaCyXvmeuybZ7zpnmmIAAdCSrGViopmHl3Q8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:26:bf:24:86:84:a7:b2:ad:8d:e3:8b:ee:45:a4:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ace21090ee4d78677413423dcb2fe01a6e1c622
Validity
Not Before: Apr 21 21:00:10 2025 GMT
Not After : Apr 22 21:00:10 2025 GMT
Subject: CN=4ce3dc356dbbb1be5fc97fc5cc34a0470b20ab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:f1:ed:a1:17:a2:f5:af:7c:a5:ce:fd:e7:
dd:9b:95:0f:65:47:2d:91:fc:ab:a7:8c:38:b8:1a:
2f:61:81:0b:ea:40:8d:08:cf:79:2d:76:d7:79:10:
f0:53:3a:60:ce:9a:16:fc:89:f0:32:43:7b:b8:db:
36:07:da:0b:d8:81:b7:99:2a:d5:c5:74:74:4e:d7:
c3:2a:db:d8:a2:b2:24:f4:2c:d8:08:54:4b:94:bb:
8c:5e:33:38:f2:0f:fc:58:99:f9:43:71:c0:b0:92:
76:9c:97:52:85:0f:40:de:79:5c:62:d3:a6:66:9a:
79:51:df:5c:73:6b:20:39:19:dc:a9:3a:19:06:65:
68:21:ca:73:7d:4b:5a:89:63:45:05:19:da:68:09:
60:24:ec:46:6e:8f:7c:dc:3e:94:84:d1:66:90:2c:
9f:34:c3:e6:68:ee:71:81:41:48:5d:d9:92:f6:4b:
e2:b0:b3:82:a9:dd:3b:14:a9:76:e4:97:a5:0d:cd:
30:46:67:25:c8:02:d4:77:5e:e5:c9:79:b1:60:ee:
0a:81:69:19:6c:97:54:4d:d9:ee:ff:d8:29:ed:c0:
37:10:9e:05:90:95:99:c3:32:49:1b:99:77:60:65:
62:5d:84:3d:7e:c6:7f:41:54:e7:07:23:c4:3f:d2:
22:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E3:DC:35:6D:BB:B1:BE:5F:C9:7F:C5:CC:34:A0:47:0B:20:AB:76
X509v3 Authority Key Identifier:
keyid:2A:CE:21:09:0E:E4:D7:86:77:41:34:23:DC:B2:FE:01:A6:E1:C6:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2915f1-87ba-4c18-aaf9-590a9813dddf/1/Ks4hCQ7k14Z3QTQj3LL-AabhxiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a3:ba:95:be:66:68:97:f8:7c:d6:51:56:21:40:9f:a2:be:
31:1c:86:5e:58:f5:6d:c3:ee:e3:53:8e:49:41:57:29:20:c0:
3b:9d:d5:2b:08:3e:1b:9b:53:fb:91:af:86:71:7e:cf:c0:fa:
f0:3d:cd:89:50:b8:9b:9d:d3:01:8e:0e:20:b2:9a:4d:ae:7f:
67:fb:6d:4b:ec:bd:99:fe:f4:b8:e9:f1:b2:1e:7e:25:c9:57:
d2:80:a1:2f:df:06:a2:12:6b:b7:7e:bd:36:1f:4a:05:6f:91:
fe:5e:16:6b:c3:3f:31:dc:59:38:38:e4:68:3a:be:c2:57:e6:
5c:82:8d:6c:3e:f8:40:54:a6:4e:87:a3:7b:dc:d0:f7:b5:5e:
69:4b:10:fe:d7:b8:87:72:5b:52:ea:be:d2:8d:d3:85:c2:0c:
e5:6d:47:55:6a:61:5f:02:c4:a1:40:1c:9b:2c:39:e1:2c:c4:
4b:41:5e:95:07:9f:f6:6e:33:b6:6d:f7:ae:7f:b8:44:17:2d:
49:c0:c2:6f:ce:bf:e2:d0:0f:0c:23:0b:3c:e4:f4:93:26:a4:
49:b0:80:91:79:71:64:60:56:65:84:79:01:f6:b8:14:f8:2a:
5d:b8:1b:81:6a:c6:bd:ed:d4:ea:a3:54:f1:1a:cf:8d:16:be:
8e:f5:a7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:05:53 2025 by rpki-client