Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
File: KrMqUfAYgPSEFWkbYAi482mcND0.mft (raw, json)
Hash identifier: 4bnWza9bG5BYNm5uL4LU7+EdNrp889Ts85zQ6F8xlNI=
Subject key identifier: 2F:61:DD:DB:91:BD:9B:FC:1B:96:B5:B1:C7:3C:9E:B8:58:0C:D1:D8
Authority key identifier: 2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
Certificate issuer: /CN=2ab32a51f01880f48415691b6008b8f3699c343d
Certificate serial: 019656811A4EF52BB534734504B0B82A5C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
Manifest number: 1500
Signing time: Mon 21 Apr 2025 04:00:23 +0000
Manifest this update: Mon 21 Apr 2025 04:00:23 +0000
Manifest next update: Tue 22 Apr 2025 04:00:23 +0000
Files and hashes: 1: KrMqUfAYgPSEFWkbYAi482mcND0.crl (hash: /XmCQVJStFIdME33Yruob43ekFx+GkEs10Iv90Gta1w=)
2: i9bRqGmLoNeEMEQG2gZoK39jq_M.roa (hash: QM3nqUsH3GUvguf6sXYPTlR1T5XaS6Z20/NPBnkA7vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:81:1a:4e:f5:2b:b5:34:73:45:04:b0:b8:2a:5c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab32a51f01880f48415691b6008b8f3699c343d
Validity
Not Before: Apr 21 04:00:23 2025 GMT
Not After : Apr 22 04:00:23 2025 GMT
Subject: CN=2f61dddb91bd9bfc1b96b5b1c73c9eb8580cd1d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8c:3f:e7:6a:d6:15:f3:94:3a:02:20:63:c8:
fd:30:5b:dd:ef:ed:cd:74:69:e5:f6:25:b3:e8:56:
0a:51:16:10:72:24:3e:28:05:fa:89:b5:4c:76:a3:
8d:a5:53:d7:59:ff:a7:37:06:bc:50:59:e5:81:3e:
14:8f:5c:e7:59:6a:20:5c:d4:dd:e8:e3:3f:e2:ce:
18:52:b4:13:40:ff:79:c1:33:e6:a9:45:68:21:20:
b5:6c:49:2a:4f:13:a3:08:45:ef:f8:53:53:76:fa:
6c:a7:34:6c:7e:08:aa:a9:32:da:c4:36:ac:98:a0:
51:9c:30:e5:9e:0d:17:1e:5d:08:49:b9:9f:ec:51:
29:fb:d6:79:fb:b6:7f:08:a1:0b:16:3b:18:32:a1:
f5:6e:1b:74:cc:37:02:42:80:9f:1e:54:96:ea:62:
43:e3:ad:bd:77:95:03:e5:2f:a3:56:15:5e:f7:35:
04:16:b2:6e:fa:f3:cb:7f:53:f7:2b:5f:48:f7:2d:
69:cc:67:2e:88:cc:45:50:5c:30:77:d2:90:e3:fb:
0f:25:26:3e:2e:5e:cf:d1:ba:8c:0a:67:07:23:ea:
52:ff:90:94:6e:e0:18:73:39:a3:73:81:6a:32:a3:
d0:88:e2:21:14:3d:a8:27:ef:c8:6a:ac:ad:b8:37:
cf:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:61:DD:DB:91:BD:9B:FC:1B:96:B5:B1:C7:3C:9E:B8:58:0C:D1:D8
X509v3 Authority Key Identifier:
keyid:2A:B3:2A:51:F0:18:80:F4:84:15:69:1B:60:08:B8:F3:69:9C:34:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrMqUfAYgPSEFWkbYAi482mcND0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/05ad83-9711-44b0-8cd5-dfdef6caabdf/1/KrMqUfAYgPSEFWkbYAi482mcND0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e6:0d:9f:a4:cc:15:25:29:fe:0d:4f:b0:94:be:d4:08:4b:
0b:d0:d7:da:eb:db:71:b2:7a:d0:6b:fa:ab:05:91:35:cb:45:
cf:ba:6a:00:58:92:71:22:99:63:a9:ac:6e:73:ec:da:24:12:
98:c8:44:b5:12:33:63:73:cb:04:c3:d9:d0:3b:d8:8f:e8:e8:
52:56:b1:47:12:dc:e2:46:a0:32:ae:93:08:d2:c4:ca:0f:2b:
32:71:e0:6c:91:5c:59:da:19:e1:72:77:24:29:ea:52:f3:08:
16:d3:cc:40:9f:48:b9:66:6f:67:88:ce:87:1d:60:9c:88:1a:
c3:64:d1:e0:75:a5:32:56:a4:9c:37:db:68:fb:96:04:76:a9:
64:a1:42:8a:bb:0f:31:b5:00:d2:0e:53:83:ed:01:95:18:c9:
21:44:1b:14:e0:53:4c:81:0d:80:3f:50:ad:ab:4b:07:99:be:
4c:9d:67:b0:70:68:e1:33:6a:85:b9:b2:a3:6e:13:74:85:c9:
9c:2f:b2:52:20:6d:11:6d:9b:08:d0:af:a4:05:c7:a3:fd:97:
25:d1:00:80:cf:3e:07:66:a1:23:ba:36:83:b5:41:3b:9a:92:
db:63:77:5d:61:08:86:aa:cc:71:22:a3:47:c0:d8:4e:91:7d:
93:d7:5d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:42:00 2025 by rpki-client