Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
File: KqeI7abIDvkCuV1gOHAKXafW0Mw.mft (raw, json)
Hash identifier: sSAK58c86e3Z28VpeRvFNCCYOSsFoT9hM1gkkHYd7fw=
Subject key identifier: 4C:5A:DD:90:15:CA:76:0A:10:92:13:11:4F:B1:B6:EC:23:25:DD:60
Authority key identifier: 2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
Certificate issuer: /CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Certificate serial: 01964368219E7B22B55EA893DA705F397CD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
Manifest number: 020B
Signing time: Thu 17 Apr 2025 11:00:19 +0000
Manifest this update: Thu 17 Apr 2025 11:00:19 +0000
Manifest next update: Fri 18 Apr 2025 11:00:19 +0000
Files and hashes: 1: 4F3kZ7GYIkoJqlMsPFZBwlzQSuw.roa (hash: ItB+wlPpdA+q/aEoNNR8SWZkkiYGjXwWKDPOB3X3e6A=)
2: KqeI7abIDvkCuV1gOHAKXafW0Mw.crl (hash: Uu4nCLSeq9v8tz6FYfpHUDhLz188BEzo+ucCg3TOoG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:43:68:21:9e:7b:22:b5:5e:a8:93:da:70:5f:39:7c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa788eda6c80ef902b95d6038700a5da7d6d0cc
Validity
Not Before: Apr 17 11:00:19 2025 GMT
Not After : Apr 18 11:00:19 2025 GMT
Subject: CN=4c5add9015ca760a109213114fb1b6ec2325dd60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:e8:9f:7c:7f:51:35:79:4e:3a:1e:87:89:
ab:96:94:e5:2b:fc:c7:fb:75:07:3f:74:b4:0d:9c:
da:bb:52:94:e5:8f:3d:35:5e:d6:ea:8a:db:72:52:
73:ae:7f:3a:21:71:b8:50:1e:c0:39:52:63:c0:f4:
58:c1:d7:2a:8a:ed:43:7d:fb:50:d1:b5:a4:62:40:
f4:72:85:67:68:f3:dd:9c:0b:66:20:3e:ae:02:74:
96:ce:ba:df:6e:d8:e3:7b:c4:21:e5:f6:5e:4a:dd:
7b:91:ed:82:86:d9:ea:e7:8c:f9:85:f4:8b:d2:f8:
e8:b6:21:f0:b1:a0:f4:c8:47:94:e4:bf:38:20:6a:
15:8a:be:87:ce:88:a0:e1:08:c6:5c:3c:ca:20:0e:
e1:b2:f0:a5:df:fb:bf:8a:8b:5e:cd:c3:3e:b0:1d:
87:d0:03:4f:d3:e7:ed:5a:3c:f0:c3:80:71:79:9d:
64:ad:db:62:08:78:11:47:e2:b7:cf:8f:be:87:b7:
0f:d2:bd:89:ce:45:55:d5:ca:cb:fb:ea:ca:cd:19:
70:12:ef:9c:96:c8:21:26:d5:b7:8b:88:9f:df:e0:
7b:a4:f8:f6:8f:ea:b1:54:82:64:d8:b3:e7:5d:e1:
3b:09:a1:46:a0:4f:b1:5a:6a:15:e6:fd:10:c4:2a:
03:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:5A:DD:90:15:CA:76:0A:10:92:13:11:4F:B1:B6:EC:23:25:DD:60
X509v3 Authority Key Identifier:
keyid:2A:A7:88:ED:A6:C8:0E:F9:02:B9:5D:60:38:70:0A:5D:A7:D6:D0:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqeI7abIDvkCuV1gOHAKXafW0Mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/a6574d-fb6d-47db-ba0c-f16f1ee4f891/1/KqeI7abIDvkCuV1gOHAKXafW0Mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:10:81:96:ab:90:45:c9:74:d0:19:7b:45:85:7c:54:83:
65:55:b3:2a:b2:b3:6d:3c:cc:50:c6:41:71:4e:e9:8d:63:eb:
78:e9:45:ce:d2:a1:87:16:68:2e:39:bb:2a:99:63:60:cd:ae:
33:32:6c:4f:dc:2a:81:43:e0:80:f3:cd:cb:6b:99:33:9e:ee:
44:09:76:dd:6a:86:d7:15:80:1b:56:8b:12:2f:21:77:43:f3:
1e:de:f4:b3:2d:f3:8f:fa:4b:b1:e5:ae:87:0d:99:24:0c:56:
5f:e0:e5:e7:59:c3:27:06:31:19:a2:8f:05:3d:a5:ed:c3:e5:
b2:21:6a:5f:2d:30:03:1a:f4:02:c4:1c:6a:24:3f:19:9c:ae:
db:2c:4e:c6:18:d6:dd:b7:39:12:b1:18:1e:98:6e:e8:59:52:
77:b5:95:ad:69:78:de:d8:28:ae:01:d6:72:d7:af:33:21:c7:
e7:98:86:80:8a:03:03:fd:5d:48:47:79:9c:3d:5c:6e:db:ab:
87:3c:1a:ab:a2:d9:7a:5c:ea:4a:4a:d1:88:5d:ba:cb:98:38:
1b:9a:a1:3f:e4:49:ba:71:e5:cf:7c:f9:7f:26:d6:dd:41:36:
0a:ed:21:12:c8:eb:11:ca:32:06:dc:af:0d:39:7e:ea:1b:4c:
98:99:4a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 13:26:37 2025 by rpki-client