Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
File: kYkBZiqOxf9NP0jSkJkjCgV17Io.mft (raw, json)
Hash identifier: JBWc/sAJqNqxQWoW6aXLuUyd7vpuPNyIOIaiKqFw3D4=
Subject key identifier: 1D:C4:0E:41:E4:F6:AD:A2:19:D8:9D:12:11:FC:9C:E8:E4:66:69:EB
Authority key identifier: 91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
Certificate issuer: /CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Certificate serial: 01961DA5243227A50C501606D8AE817ED7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
Manifest number: 0DF0
Signing time: Thu 10 Apr 2025 03:01:24 +0000
Manifest this update: Thu 10 Apr 2025 03:01:24 +0000
Manifest next update: Fri 11 Apr 2025 03:01:24 +0000
Files and hashes: 1: NXDT_tx5Vl2oHF11vBi6wOJ0LL8.roa (hash: 5chLz8e80WncT0K4TRUx46Jx2KFlA/OouooGEChtx14=)
2: ZcvBTfoXIkdWjCXtigYCRkxwU_E.roa (hash: OrUuvu33nOrNM9H7GJKTSRXbyuxdfvDLNi4s7scTDWk=)
3: kYkBZiqOxf9NP0jSkJkjCgV17Io.crl (hash: mwYpfGx3xe+USXJ0zBE+RCWSxahrwUsA43kXL8yuM+0=)
4: r816-sGxaSURDTSpC0B66tGRbZs.roa (hash: Cpfj6jfuACJLukpFk9QhkAV4pZmQtjlQ3iLHO8mpk3E=)
5: shTn7GqCkQHNe5th-DoeAc9YFfk.roa (hash: aySq0BgEVOrK/vhv+t0wKgyn8II5kEUij+WlbV5t6wE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:a5:24:32:27:a5:0c:50:16:06:d8:ae:81:7e:d7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918901662a8ec5ff4d3f48d29099230a0575ec8a
Validity
Not Before: Apr 10 03:01:24 2025 GMT
Not After : Apr 11 03:01:24 2025 GMT
Subject: CN=1dc40e41e4f6ada219d89d1211fc9ce8e46669eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:da:31:7d:27:0c:cb:a5:37:01:20:81:55:1d:
8e:7d:b8:c3:d8:18:47:c5:f5:52:26:19:0c:12:09:
6d:b6:6a:eb:17:ff:48:a4:fd:c3:9e:54:db:3a:7f:
33:a8:97:59:b2:fe:c5:0d:ef:b9:a0:4f:0a:e8:6b:
a8:e2:bd:44:61:54:11:34:dc:0b:6b:36:1d:e1:9e:
8f:10:0d:4a:99:a0:c5:cb:06:3e:4c:5e:87:fc:3d:
74:7e:37:b4:6d:f4:82:44:75:71:03:5f:18:1e:30:
c4:8c:ff:12:a1:34:6b:27:e1:b3:41:2b:32:9f:54:
e7:99:a2:2c:0e:f0:ca:7d:d1:c9:e0:f4:ec:a3:61:
e5:0b:e7:91:f7:e1:4e:99:b5:4c:f4:73:63:9b:ca:
ef:16:9d:43:8b:9b:9f:f4:0a:3d:1c:09:42:e1:73:
91:7c:0f:ee:4d:7b:c8:b2:c3:e9:a7:8f:56:c9:20:
08:83:6e:0a:b4:a5:37:72:cd:bc:ac:ab:cb:6b:66:
14:af:26:82:d6:54:ce:81:c9:34:2d:73:16:96:3c:
c3:48:df:2c:96:f8:7a:c4:46:4f:81:54:d8:e0:79:
d5:69:bf:27:8a:26:bd:96:6a:30:b8:f3:88:85:15:
20:a7:fd:b3:ee:6d:c9:46:77:7e:e0:71:e0:2a:12:
c2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C4:0E:41:E4:F6:AD:A2:19:D8:9D:12:11:FC:9C:E8:E4:66:69:EB
X509v3 Authority Key Identifier:
keyid:91:89:01:66:2A:8E:C5:FF:4D:3F:48:D2:90:99:23:0A:05:75:EC:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYkBZiqOxf9NP0jSkJkjCgV17Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/5b92a7-2837-469e-8214-e811e23c1804/1/kYkBZiqOxf9NP0jSkJkjCgV17Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ec:b9:be:50:44:e6:17:89:89:71:bc:42:ad:29:c7:fc:05:
cf:fd:2a:85:4a:96:31:cd:05:24:07:fa:e9:d1:cd:ea:8f:a2:
66:75:a3:3d:2d:a5:d7:93:94:9b:63:9c:19:09:38:f2:ca:92:
8f:1f:f2:1e:3d:e7:dc:45:1a:69:85:01:aa:c2:73:e4:52:a5:
cc:e2:fb:cb:72:ae:13:1e:08:f1:d8:f2:5e:07:18:06:22:9d:
23:88:23:5c:5d:91:24:e9:93:71:65:f6:87:dc:dc:b6:4c:33:
c3:1f:f3:f9:e2:97:45:1c:74:75:07:f5:c8:ec:1c:8f:3c:7c:
36:67:53:37:70:d2:28:1a:a7:51:ee:4c:a2:d9:e2:f2:7e:35:
67:4f:f0:e5:81:5f:c5:3b:e6:ae:da:fc:d2:cd:6f:2a:98:3f:
10:6e:ac:c5:90:87:24:9b:54:13:8b:6e:20:23:fe:79:2a:c9:
ff:e8:86:94:bb:62:f4:1c:b6:69:fa:2f:a9:e0:ce:4c:7d:ef:
41:02:a7:a7:fd:61:fa:8d:70:14:57:a8:1a:27:d5:0e:b4:4c:
3d:e8:99:58:cd:ff:03:e7:dd:73:de:dd:42:8f:c1:0b:2b:4e:
69:2a:dc:cc:51:5e:cb:51:2d:55:65:ce:2b:71:3e:58:bf:2b:
33:0a:5b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 10:34:39 2025 by rpki-client