Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: xC0opIEJVc2ecxPoFdMn8Y4FOj0ZBO+7VnLPZdf70NI=
Subject key identifier: 67:1B:D0:73:61:8C:C9:75:9B:6E:41:F9:86:93:26:54:2D:1B:62:FA
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 01958BF26658145513C12EA8C8A2432B83EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 1493
Signing time: Wed 12 Mar 2025 20:01:13 +0000
Manifest this update: Wed 12 Mar 2025 20:01:13 +0000
Manifest next update: Thu 13 Mar 2025 20:01:13 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: /bAyNwP4y3mn2xm0ESUjdVWdlvQwRkSjNk0WK1Ek1HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:f2:66:58:14:55:13:c1:2e:a8:c8:a2:43:2b:83:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Mar 12 20:01:13 2025 GMT
Not After : Mar 13 20:01:13 2025 GMT
Subject: CN=671bd073618cc9759b6e41f9869326542d1b62fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:bc:d4:ba:d4:db:51:20:7d:d9:10:ff:9b:
2f:b3:85:3d:51:10:3f:fa:94:4e:a6:2c:eb:60:bf:
00:22:5f:75:98:c0:35:f9:e6:67:eb:6d:79:7c:21:
71:4f:36:d3:51:1e:44:1b:6b:a6:08:13:c9:8f:84:
d1:15:53:28:c5:e1:a2:38:86:da:40:2b:38:86:c4:
c8:88:71:1b:c1:4e:65:4b:65:d1:0b:65:15:a6:df:
06:fd:2d:4f:f2:49:f0:b8:29:cd:f7:44:1d:a3:3d:
34:a2:0d:e9:5a:c3:64:d8:bc:fb:48:d8:66:c8:bc:
a5:a9:08:4f:35:40:49:e7:68:69:36:87:1e:83:3a:
06:6b:24:cc:58:6c:4f:78:56:3a:2f:42:6b:33:47:
1e:eb:e1:6d:22:d3:ab:e5:8e:cf:2d:63:c1:c0:c2:
af:d0:43:ad:1a:bd:ee:a9:4a:a8:ee:72:68:c3:21:
72:94:e3:ca:08:31:e6:8c:5d:d1:75:da:bd:b7:81:
49:09:cb:f0:5e:b3:b7:88:20:e4:e1:2e:a5:23:bd:
83:41:7b:e6:04:7b:02:d2:94:85:f4:a7:ce:8b:0d:
49:04:88:77:dd:77:63:e5:01:66:39:b0:9b:de:d7:
14:96:b7:c2:19:03:df:5c:23:f8:a3:92:6e:85:32:
bb:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:1B:D0:73:61:8C:C9:75:9B:6E:41:F9:86:93:26:54:2D:1B:62:FA
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:25:db:25:f2:21:64:23:0c:46:38:44:07:cf:43:8e:0c:54:
74:33:5d:4e:45:9b:6a:f2:24:f7:b3:df:4b:f7:1b:7a:cf:8b:
6f:e4:71:a9:39:1f:5f:f1:30:34:8a:49:c7:fe:61:ce:4e:fe:
14:67:28:ab:72:f4:9a:c0:53:8d:ab:11:c9:15:90:20:d2:72:
62:8f:47:2f:75:0b:26:56:af:3b:a9:41:ef:86:c0:2f:b8:09:
fa:5c:ca:7b:e9:13:c5:4a:9f:b8:77:ab:3e:ef:1f:2d:3e:c1:
8d:44:c0:64:2a:ed:7a:45:c6:55:0b:78:ff:1e:54:9e:6a:65:
51:60:88:c9:a4:66:f1:96:16:65:60:06:82:29:27:a6:79:1c:
9b:e7:19:da:e3:07:0b:02:37:8f:a1:94:06:d6:df:ae:12:03:
2f:35:9c:cd:16:95:96:75:68:bd:c6:dd:61:ad:87:e4:2d:c2:
ad:77:77:f7:f5:88:9d:35:db:9f:e9:8c:f3:f7:c6:92:43:7e:
d9:cf:3a:26:f0:3f:77:ea:3e:a3:23:e4:81:88:96:f7:06:0b:
c2:8c:a0:1f:52:08:2f:b4:37:c0:d7:26:75:fe:b1:16:6d:a9:
8e:9d:72:9b:64:ef:e4:ee:fd:3e:ed:ed:93:c8:5c:e0:b6:2d:
11:b9:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:52:51 2025 by rpki-client