Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
File: KCyT0maFJ4jkmYLZ96Yg222fWI0.mft (raw, json)
Hash identifier: mbb1UhOs6EHjZl6q2DwpgwSk9oPfihObuHA9OmG+vU0=
Subject key identifier: 7D:89:7B:F9:12:7C:A9:35:3E:7A:7F:B7:D7:4D:61:AF:02:5B:83:92
Authority key identifier: 28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
Certificate issuer: /CN=282c93d266852788e49982d9f7a620db6d9f588d
Certificate serial: 0196078AF19642433D9BD0F7CDAA1B999C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
Manifest number: 09F2
Signing time: Sat 05 Apr 2025 20:01:08 +0000
Manifest this update: Sat 05 Apr 2025 20:01:08 +0000
Manifest next update: Sun 06 Apr 2025 20:01:08 +0000
Files and hashes: 1: FCRIl5Vt1LPdQ6IrZpaUR6T2zRk.roa (hash: dI7TXuZLS0+y6udtXa2yol0ikupwyIZAlaHrmt/VDI0=)
2: KCyT0maFJ4jkmYLZ96Yg222fWI0.crl (hash: ImCVFRQOmzjD/7Jt9E7Aitj28rlqMRJx9tgf2QKDMO4=)
3: z3-dsZKj9j7nCKXS-M2vtq4aJrk.roa (hash: 28apFTsYy4v/YWMNME9MOhYcWfL7kBuIz5Y1C6vARJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:8a:f1:96:42:43:3d:9b:d0:f7:cd:aa:1b:99:9c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282c93d266852788e49982d9f7a620db6d9f588d
Validity
Not Before: Apr 5 20:01:08 2025 GMT
Not After : Apr 6 20:01:08 2025 GMT
Subject: CN=7d897bf9127ca9353e7a7fb7d74d61af025b8392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:1d:af:36:eb:e7:90:43:f1:4c:10:ee:59:
ce:1e:7d:c0:b9:09:c9:77:0b:77:20:02:1d:95:6a:
4e:20:9e:4c:cb:e9:a8:79:b5:f0:2b:cf:f0:96:76:
7d:52:a0:b7:7a:44:32:23:ad:c4:b0:38:74:81:0f:
ac:03:3a:10:2a:e5:19:40:ce:b8:fc:42:6d:d6:67:
21:2c:e3:5c:46:eb:0b:3b:46:4b:2d:ed:3e:31:4a:
2c:87:af:7d:f7:ba:e3:55:8f:12:aa:80:fc:1e:fc:
65:67:c7:fe:cd:19:96:e5:47:1a:dc:af:14:36:c3:
e4:41:e5:61:0f:e0:fc:df:6f:34:2c:d2:03:ed:78:
61:fb:9b:2d:0f:d3:93:a6:6e:9d:4d:cd:13:72:15:
87:58:a2:b1:60:9a:6f:fc:66:fe:81:bf:0d:f3:79:
df:5c:e0:ce:65:fd:35:5f:3e:72:3c:8c:cb:a4:c7:
cb:e1:53:e5:c6:db:64:74:44:6c:8e:ca:36:c5:ae:
54:f2:50:18:32:cf:9c:29:de:f7:ef:be:9c:4a:a6:
e8:11:92:a2:54:6c:43:69:ee:a9:9e:b2:0a:a9:e0:
7a:fe:ea:79:1e:f6:72:16:22:b4:6e:bb:07:24:c8:
a2:f8:fe:66:f4:f7:f3:3a:11:d0:32:04:ca:61:10:
37:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:89:7B:F9:12:7C:A9:35:3E:7A:7F:B7:D7:4D:61:AF:02:5B:83:92
X509v3 Authority Key Identifier:
keyid:28:2C:93:D2:66:85:27:88:E4:99:82:D9:F7:A6:20:DB:6D:9F:58:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCyT0maFJ4jkmYLZ96Yg222fWI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/382ff4-4fc2-4302-af90-96adffe2e86a/1/KCyT0maFJ4jkmYLZ96Yg222fWI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:4d:d4:be:c0:b1:94:ec:17:54:1e:e1:2f:f1:c5:3f:3e:47:
ea:c1:1c:ef:90:2a:82:6b:45:1f:1a:21:b0:8a:22:a1:cd:6e:
d1:c1:1e:f5:64:e4:42:e1:31:b7:59:a1:67:3b:00:49:50:ec:
c6:c2:34:2c:9b:e9:98:73:56:cd:f3:d0:8d:3b:c0:03:50:e9:
07:c4:50:d2:63:3d:63:9d:31:7c:05:f7:5a:af:cf:b4:1f:62:
b4:37:d4:13:13:5b:c4:e5:10:7c:85:4e:64:8b:09:09:73:3f:
e1:31:c0:07:46:1e:87:d5:ed:f2:f0:4e:2e:88:43:c5:b9:d5:
5f:8e:fa:d0:8b:d8:b7:c9:28:f3:ed:e3:89:26:14:98:8a:c4:
4c:9b:a1:6a:f6:8b:3c:0e:d0:17:34:e0:7e:b9:b4:1b:c8:a0:
29:71:46:8b:1d:8b:e9:be:c3:87:e6:7c:23:f9:52:0d:bc:8a:
d2:7d:73:da:1c:c7:fc:2a:29:75:e9:53:9a:a2:2e:54:a6:34:
ff:9d:86:bb:32:63:b2:ce:b8:b2:e8:12:be:b1:bf:2f:e5:48:
67:fe:17:7a:0a:64:02:b6:10:54:b8:f1:f7:08:8f:c4:1b:b0:
7b:e0:84:7f:11:1b:90:b4:3d:5e:8f:16:59:a7:83:0d:3e:a6:
80:79:a9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:14 2025 by rpki-client