Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
File: ktkImo4yjTLW3hbX2iV7gRsFI50.mft (raw, json)
Hash identifier: vE8Yj7Py847Mtd9ntA/w4X2HMVMgM7IWM4pCmik2cdY=
Subject key identifier: 45:FD:D1:47:F9:8D:AE:6B:12:EF:C0:5B:2C:7B:03:76:66:AF:AF:D2
Authority key identifier: 92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
Certificate issuer: /CN=92d9089a8e328d32d6de16d7da257b811b05239d
Certificate serial: 01960489F7AB9F56EA8B6630C53DD0AD04CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
Manifest number: 042F
Signing time: Sat 05 Apr 2025 06:01:12 +0000
Manifest this update: Sat 05 Apr 2025 06:01:12 +0000
Manifest next update: Sun 06 Apr 2025 06:01:12 +0000
Files and hashes: 1: BEBiIFhite7xZ0bNEP-JA8QrqMg.roa (hash: QbnrrPHP3fwKy8016pI0qpDqUM0JJdXwZKXHEa0y/SQ=)
2: LARL1hIKcaD4vW3zR5MLoEhaFxc.roa (hash: b6NkmGlDSYN3he0zDu5SwrD1JA7+YMRtU9hknGZasjA=)
3: ktkImo4yjTLW3hbX2iV7gRsFI50.crl (hash: 254EIx9/ekHJbXJD4GwQkHidJkJHfwIqdreuczsUJVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:04:89:f7:ab:9f:56:ea:8b:66:30:c5:3d:d0:ad:04:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d9089a8e328d32d6de16d7da257b811b05239d
Validity
Not Before: Apr 5 06:01:12 2025 GMT
Not After : Apr 6 06:01:12 2025 GMT
Subject: CN=45fdd147f98dae6b12efc05b2c7b037666afafd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:76:e5:2b:0d:f0:f3:70:17:e2:72:42:cd:30:
3c:81:9e:b6:3e:31:98:c8:66:ed:73:59:2d:77:9a:
88:b8:3a:85:6c:33:40:c2:fc:b5:54:2a:59:1d:16:
7d:1d:10:e5:ab:ba:df:f1:63:af:16:67:f4:10:b9:
d7:43:15:42:83:7a:58:41:00:34:c5:64:80:e9:11:
76:d6:95:73:03:29:93:f6:85:d5:38:ae:59:12:3e:
0d:80:dd:66:f2:76:49:17:ba:b0:83:b8:34:f3:bc:
b0:1e:ad:f3:f5:cc:5b:37:23:9c:c5:0b:f7:b6:25:
e5:27:6f:bb:0d:85:7b:eb:4b:8d:f0:7c:cb:b9:45:
26:62:e7:c7:8a:dd:3e:22:78:b6:0e:9f:9f:8f:72:
ff:61:7f:f3:0c:d8:85:63:0d:ce:4e:5d:89:fa:7d:
5b:21:7b:48:72:19:eb:97:52:eb:e7:b6:b4:54:e3:
c0:41:00:e7:31:41:15:98:fd:62:72:db:8a:58:20:
c2:d0:86:b2:e1:bb:9e:67:13:d1:bf:20:b6:d3:8b:
8d:19:8d:90:b1:ac:8e:2f:c5:a5:3b:f9:4b:4f:f0:
ad:06:1c:b8:97:f3:fc:af:7c:39:f2:50:07:5b:5b:
12:f3:82:da:56:b0:3a:c9:df:33:4b:b2:d8:9f:04:
66:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FD:D1:47:F9:8D:AE:6B:12:EF:C0:5B:2C:7B:03:76:66:AF:AF:D2
X509v3 Authority Key Identifier:
keyid:92:D9:08:9A:8E:32:8D:32:D6:DE:16:D7:DA:25:7B:81:1B:05:23:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktkImo4yjTLW3hbX2iV7gRsFI50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/431634-35cb-4545-877b-df3c07f3411e/1/ktkImo4yjTLW3hbX2iV7gRsFI50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:75:fe:e5:c7:29:09:92:00:c7:4b:21:a0:8b:03:7e:2b:ad:
5f:93:3a:41:ff:3d:23:f2:1f:c7:9b:2f:bb:5a:d8:25:c1:30:
cf:1f:8e:34:f9:c0:2f:9f:07:ab:d4:38:3a:55:21:2b:7a:b7:
6b:2e:a6:0f:8a:bb:72:04:a0:c7:ee:98:32:4c:91:f0:bb:96:
60:b0:4b:2d:6b:f5:0e:9d:0e:44:dc:1a:64:58:39:1f:34:28:
f6:83:7c:c7:45:08:f2:59:fa:da:a6:b8:60:62:39:bc:11:8b:
73:26:02:cd:fa:73:a7:f9:bc:87:7a:fb:18:f5:a6:37:b1:24:
6d:a6:96:78:9a:84:48:ea:2d:e7:5c:e7:2e:84:89:ef:55:dc:
f8:08:aa:60:7b:42:9f:8e:5b:87:aa:8c:64:ee:6a:35:43:d4:
e7:53:d4:b5:e4:81:33:7a:85:8b:d7:13:c8:a3:08:26:d0:9b:
10:e7:1e:ed:62:f3:0a:59:16:5e:2b:cb:00:78:17:95:57:88:
4c:d5:cf:87:52:b7:0f:44:5e:ed:cc:62:1d:b2:05:a0:0d:a5:
e4:e8:e6:d0:38:2b:22:7d:ee:9b:57:cb:1f:f3:08:ab:f1:39:
e5:37:6f:42:32:93:f5:6a:92:4c:4c:76:54:37:09:88:12:02:
d9:d5:0d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:16:31 2025 by rpki-client