Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
File: K6OJMzWM9mz_O2zj97wlF_3UdCE.mft (raw, json)
Hash identifier: wo2UvS4gLPjdZkAOTOo6aXfc4EJKsXAvNpL6zfB997M=
Subject key identifier: DB:14:3C:AA:AB:A2:F0:11:F4:60:50:5E:B9:97:23:8E:1C:07:28:D3
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial: 01965A5DC573A3C278EC5397BBF7AEA829D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
Manifest number: 0676
Signing time: Mon 21 Apr 2025 22:00:16 +0000
Manifest this update: Mon 21 Apr 2025 22:00:16 +0000
Manifest next update: Tue 22 Apr 2025 22:00:16 +0000
Files and hashes: 1: K6OJMzWM9mz_O2zj97wlF_3UdCE.crl (hash: EZnkR9pzbck4HlTfLs0LUmpsGaTJMdpdMCfuiITelG0=)
2: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (hash: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:5d:c5:73:a3:c2:78:ec:53:97:bb:f7:ae:a8:29:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Validity
Not Before: Apr 21 22:00:16 2025 GMT
Not After : Apr 22 22:00:16 2025 GMT
Subject: CN=db143caaaba2f011f460505eb997238e1c0728d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:92:39:c8:91:06:73:2d:5e:7c:e2:e0:c0:a2:
3d:01:9a:a4:c8:56:ba:a3:49:80:8a:25:cf:5d:9e:
e6:4f:30:6f:d7:c7:44:5c:5b:49:f6:cf:8f:1f:76:
40:5a:8d:50:7f:01:a1:87:eb:34:e1:f0:0a:71:b9:
6a:f7:eb:75:ca:c6:5b:a1:82:93:21:d2:85:ba:36:
0c:bb:14:97:55:b2:6a:f9:ed:54:68:2d:89:d6:43:
03:2c:ff:be:ea:6c:7a:ec:ee:a8:5c:93:3a:bb:a0:
35:25:a5:7c:c5:85:2f:66:10:42:22:65:f8:4d:b7:
03:59:1e:fb:aa:ee:79:fc:3f:51:d8:57:22:a1:94:
8c:6e:08:4a:47:f2:95:f4:3a:b4:dd:fd:ee:4c:dc:
a9:45:84:15:30:e2:e5:70:3a:d4:7d:84:51:64:0c:
1a:c7:5f:23:43:95:0f:f2:30:f1:28:d9:10:7b:7d:
b9:74:d1:c3:32:14:64:6c:53:6d:8d:67:ff:2e:de:
99:d3:e2:a4:1d:a6:73:4b:76:5d:a1:ee:11:d8:e4:
0d:28:80:f0:35:06:a1:f0:00:04:bf:2a:1a:59:83:
06:77:3e:f6:68:2b:a6:00:df:d7:39:30:8d:48:f9:
16:0b:c8:89:7c:cb:86:ce:8a:79:c3:b2:82:4a:4c:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:14:3C:AA:AB:A2:F0:11:F4:60:50:5E:B9:97:23:8E:1C:07:28:D3
X509v3 Authority Key Identifier:
keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:3e:f1:0d:32:10:12:ba:25:7d:d1:57:ac:83:74:2b:2f:c8:
2f:38:72:6d:81:00:05:a2:03:8d:0a:ad:8e:a9:40:d8:d0:64:
5d:62:07:ef:19:fd:3e:e2:06:96:66:6f:85:f7:cb:29:09:15:
e5:54:32:9e:d0:21:2c:38:76:66:e6:e9:de:ce:13:98:4a:e0:
7f:78:e7:72:6f:ab:d1:ab:3d:de:5b:ae:73:f8:88:b9:05:09:
0d:91:e7:64:34:99:7c:2e:66:99:47:35:e2:75:ed:a8:74:c7:
fe:6e:ab:6b:f1:f2:c6:1a:04:2b:96:44:c7:c1:fa:e2:33:8c:
a6:4d:62:ed:28:23:b0:a4:7b:d4:42:74:64:28:d7:76:b9:0d:
e9:28:77:20:56:5b:d9:d8:2a:a7:d6:5a:38:42:27:96:4b:ad:
39:5b:c8:61:ad:84:d3:1f:7a:f7:8a:e2:b0:59:cc:f1:d5:6b:
37:9b:fb:81:37:be:50:b4:81:85:63:c9:10:95:23:52:ef:51:
eb:0d:bb:9e:1a:b7:72:62:db:4f:8b:be:05:35:ab:01:5e:c8:
67:ee:54:92:5a:9a:a3:ff:cb:36:c1:4c:83:05:cb:d3:02:e7:
73:a7:e4:ca:fa:60:3b:28:6c:41:41:1d:72:95:8a:27:45:66:
a5:1c:b2:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 00:00:08 2025 by rpki-client