Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json)
Hash identifier: I2tDwCgsWvrJvesYiakT6lA/pZIIUCjl72oUj9h3YLU=
Subject key identifier: B3:AA:4D:D2:9D:82:75:2A:2E:5D:C8:21:D6:9A:1A:E6:A9:27:CE:05
Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Certificate serial: 019655A612464C61A30585DE3BE68383758D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
Manifest number: 1165
Signing time: Mon 21 Apr 2025 00:01:09 +0000
Manifest this update: Mon 21 Apr 2025 00:01:09 +0000
Manifest next update: Tue 22 Apr 2025 00:01:09 +0000
Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: L3v1zbLFIyp4xlLtrcuozfKI9Yrz+HQOWYjv0M8LHnk=)
2: DQ47vKDjcl-2XGhWvGpEltnbLx0.roa (hash: xO7ywYo6rKZE+1UGlrRMauCBtFM1TiMUXrJWYhc9zkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a6:12:46:4c:61:a3:05:85:de:3b:e6:83:83:75:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6
Validity
Not Before: Apr 21 00:01:09 2025 GMT
Not After : Apr 22 00:01:09 2025 GMT
Subject: CN=b3aa4dd29d82752a2e5dc821d69a1ae6a927ce05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:af:f2:cb:12:6a:de:c0:f3:db:3c:63:f4:
c1:72:33:3e:30:b2:4b:a9:33:07:98:07:79:da:8c:
06:fc:5d:b1:42:0f:7d:24:27:42:bc:fe:bb:9e:43:
df:7e:cf:5e:bb:49:90:2d:29:f8:9a:97:a8:7d:a6:
9d:43:73:61:c7:2f:6e:95:e9:02:08:ae:c7:1f:a0:
89:14:11:16:5e:81:e5:c3:10:2e:eb:b8:69:da:d6:
59:66:ab:cb:a9:8b:e2:39:08:b1:a5:13:d8:97:0f:
8b:8b:f4:aa:37:10:b4:67:bb:41:9d:3a:94:81:8c:
a9:c1:54:24:ff:88:e2:5d:16:c6:11:c9:d7:94:9e:
62:4d:59:8e:f0:1c:a4:f6:56:b6:1d:d4:4c:25:f7:
0f:b3:f6:b9:2b:c4:a8:4a:b0:b9:e4:f3:0c:49:74:
89:b1:d2:28:f5:71:55:aa:50:a6:4f:47:bd:e6:78:
20:b1:fa:96:c0:68:94:04:d1:ec:d5:6b:33:78:3a:
33:1c:24:00:02:d2:7f:ee:be:a7:63:64:1b:72:5d:
8e:3c:8f:3e:d7:d1:f3:d7:73:a3:44:b0:e7:bf:ed:
1a:6c:14:ed:7d:5b:46:95:fb:e1:36:71:b3:12:43:
0c:d4:4a:38:58:40:3d:e8:d5:af:4f:6f:0b:2a:d2:
29:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AA:4D:D2:9D:82:75:2A:2E:5D:C8:21:D6:9A:1A:E6:A9:27:CE:05
X509v3 Authority Key Identifier:
keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:9d:eb:24:df:77:d1:9b:e4:8b:a7:cf:c4:7b:4f:a4:2a:70:
15:62:87:aa:39:82:d8:a7:ff:45:7c:c7:e4:ae:df:cc:81:0b:
ef:ee:83:9f:6c:a6:e3:12:7b:38:05:50:70:82:65:f1:63:80:
bb:27:eb:8f:6d:9b:43:9a:cd:ab:61:8f:b9:67:d1:7d:df:7e:
50:b8:fe:a9:21:21:2d:fc:e6:84:48:1d:29:3e:9f:1d:4a:fc:
12:ef:ed:7c:d8:25:e1:52:69:97:20:62:7f:d6:73:e9:3a:83:
69:52:7a:50:e6:ca:c0:93:72:dd:c2:9a:4b:7f:4b:62:68:4a:
a0:f2:e5:bb:68:56:d2:d8:f1:30:3c:f6:c2:7e:0a:b2:fc:51:
ad:8e:3b:40:f5:d8:ae:45:97:84:f4:54:92:f7:07:5f:e6:e2:
99:14:98:8f:0d:0d:36:bd:24:b9:f2:92:c0:8d:5e:c6:30:56:
97:96:52:a1:26:a6:88:40:ef:e1:11:b9:08:49:4e:c0:b0:aa:
e3:9f:ad:71:07:62:69:34:78:96:40:b5:e1:c8:87:e3:dd:7e:
a7:56:47:31:10:b6:d5:cd:99:f0:be:f2:d5:1f:d3:92:76:29:
8d:09:d2:b2:7e:d1:98:bf:75:a2:18:7d:ed:51:63:52:f6:85:
67:1e:d7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:42 2025 by rpki-client