Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
File: klEKaHHCm8ApIGipty3DT_gbT8c.mft (raw, json)
Hash identifier: nz8sKY7Ruo+pTLSQPJES+loRRJWTJ+xtNFJxkeIoO9Q=
Subject key identifier: 2F:28:FA:DA:2D:D9:4F:BF:1A:59:A6:9B:CB:28:24:8D:5E:A0:52:21
Authority key identifier: 92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
Certificate issuer: /CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Certificate serial: 019645FBA3045FE650ABD4724D6DD52F8037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 23:00:40 +0000
Manifest this update: Thu 17 Apr 2025 23:00:40 +0000
Manifest next update: Fri 18 Apr 2025 23:00:40 +0000
Files and hashes: 1: 7U4mLLCZOK9jPZHgW6zPsanLT3o.roa (hash: zZ/3JaVashrdH1tPBAExwSunuDftYH55jv3g8RDnCrA=)
2: kDuhU048DTixv805ND5N0u_g9CE.roa (hash: XMPtRafhUHkyRUyzV4cxQSEk7ukN2f738Fahel2JBqI=)
3: klEKaHHCm8ApIGipty3DT_gbT8c.crl (hash: YuKYgMm0jsNzWUJP/Po5hRu0eziv4I/OtyoU+JNkwe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:fb:a3:04:5f:e6:50:ab:d4:72:4d:6d:d5:2f:80:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92510a6871c29bc0292068a9b72dc34ff81b4fc7
Validity
Not Before: Apr 17 23:00:40 2025 GMT
Not After : Apr 18 23:00:40 2025 GMT
Subject: CN=2f28fada2dd94fbf1a59a69bcb28248d5ea05221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8d:b0:70:05:ab:28:6b:2e:b3:a0:0d:39:50:
93:f2:ad:dd:8c:a9:95:c7:d2:30:ad:21:73:68:50:
b0:3f:55:a4:3a:4a:15:ae:03:1e:53:13:7e:a6:f6:
ba:37:9d:11:b7:e5:dc:e6:9f:7f:1a:81:0c:92:ec:
64:3b:42:4f:6a:02:48:d0:1e:19:ad:0d:74:ed:b9:
43:3e:6f:08:44:c6:5d:7d:0d:d3:a4:cb:b1:b8:a6:
06:a4:73:c8:f3:13:e6:d1:bc:02:f0:c3:66:a8:aa:
19:1e:6d:09:47:08:74:1a:32:69:6f:7d:0f:dc:8d:
b7:45:26:17:8f:62:fe:b8:9a:88:4a:38:7d:8e:5b:
fc:19:38:5a:3a:ec:8d:91:2e:f2:b5:48:bf:a4:1d:
1d:72:df:86:b3:e7:08:70:b9:e9:cf:ab:7a:ce:04:
a5:a2:e8:26:5a:70:de:f3:55:ea:5e:fa:56:74:52:
0b:d2:5b:d6:60:23:6f:a7:70:d3:c1:1a:67:52:db:
19:49:61:bf:42:14:87:6b:cf:9f:1d:63:e1:ae:3b:
c1:56:e8:2e:7f:27:dc:e3:5a:6c:f9:1d:fa:f0:66:
b3:29:d2:40:c5:e4:d2:62:20:00:5b:ee:a9:12:a4:
7a:ab:ef:84:57:c5:ad:05:5d:1f:23:2e:41:b3:fb:
6f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:28:FA:DA:2D:D9:4F:BF:1A:59:A6:9B:CB:28:24:8D:5E:A0:52:21
X509v3 Authority Key Identifier:
keyid:92:51:0A:68:71:C2:9B:C0:29:20:68:A9:B7:2D:C3:4F:F8:1B:4F:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klEKaHHCm8ApIGipty3DT_gbT8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8dc703-1631-40f8-90c5-18a30c30290d/1/klEKaHHCm8ApIGipty3DT_gbT8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:11:c1:2b:54:cd:b2:ce:f7:32:87:e4:f5:7c:0e:28:d0:ca:
e3:b0:95:2f:3d:66:ba:4b:2e:49:1b:b8:fe:57:3f:a9:4b:7b:
8a:13:e1:3b:81:cb:42:1b:0f:d5:5d:aa:f1:89:cb:01:63:14:
2f:d0:f6:b3:7d:6d:7f:07:29:ad:58:c8:91:51:64:72:c9:9a:
46:10:48:d5:ca:3b:c4:54:c4:4e:21:32:cd:f5:17:22:d4:03:
36:e6:46:84:29:bd:eb:7c:37:46:1a:ff:98:dd:9b:27:99:87:
d5:67:74:30:cc:f3:95:e5:e7:5a:31:d6:25:9e:6a:e9:c7:cd:
b7:f6:a2:eb:e7:b6:d1:b9:cd:38:86:d0:ef:e1:75:cd:78:8d:
03:03:ce:fe:02:75:01:34:46:17:bb:72:f1:bf:7e:77:ca:a5:
2e:36:88:7a:6e:9d:de:96:06:9a:14:ef:9f:48:e3:9c:7c:84:
ff:24:73:f7:53:4c:4c:8a:c5:8a:78:04:8b:0e:45:57:9b:c1:
9a:2e:dd:3d:a4:da:f9:1b:33:d4:98:6f:aa:5b:dd:0d:5a:39:
6b:05:42:26:98:fc:ed:13:d1:e4:1b:b9:15:52:15:b8:ef:75:
98:cf:77:31:20:82:40:50:56:ca:a9:4a:cd:99:98:47:65:3a:
fd:6c:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:01:27 2025 by rpki-client