Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
File: KRlGGERUmCRQC3zRxFHYJLpuVnc.mft (raw, json)
Hash identifier: o9Mc3w8QMJqnNHRjnOWXZCGS7ZJCPHjPVsqRSC0vpRo=
Subject key identifier: 24:AC:F3:F7:C0:C3:A8:BD:4D:AD:8F:C5:8A:56:F2:18:E7:26:76:1A
Authority key identifier: 29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
Certificate issuer: /CN=2919461844549824500b7cd1c451d824ba6e5677
Certificate serial: 01963FC2711BFBE34DC9403B773ACF995817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
Manifest number: 0F7E
Signing time: Wed 16 Apr 2025 18:00:29 +0000
Manifest this update: Wed 16 Apr 2025 18:00:29 +0000
Manifest next update: Thu 17 Apr 2025 18:00:29 +0000
Files and hashes: 1: CJLUw4mYIg1UnnSDFK1Ml0o--zU.roa (hash: Tsn7ljuanQRqC13NxQKS7gSB56PsLYk7GAqdYRh4Uz0=)
2: KRlGGERUmCRQC3zRxFHYJLpuVnc.crl (hash: TD8Y3UHCv4ucKO67C7/rHBsr3geZuzLcz8oGUy1ersQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3f:c2:71:1b:fb:e3:4d:c9:40:3b:77:3a:cf:99:58:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2919461844549824500b7cd1c451d824ba6e5677
Validity
Not Before: Apr 16 18:00:29 2025 GMT
Not After : Apr 17 18:00:29 2025 GMT
Subject: CN=24acf3f7c0c3a8bd4dad8fc58a56f218e726761a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:2f:16:6b:e8:a1:e5:c9:1f:03:15:65:70:
dd:70:3a:5d:19:28:e0:d1:03:b3:93:36:45:d2:30:
72:61:2f:3c:bb:e2:b9:9a:80:5d:e1:04:28:a0:8f:
1b:a7:31:ae:74:63:c6:ed:c9:ad:71:77:58:f2:57:
81:f0:a3:fc:2c:57:d5:f8:51:f0:c5:98:de:94:09:
e0:f9:97:c2:4b:2a:a2:4b:19:9f:9d:fc:ec:75:b5:
ad:66:c4:94:9c:05:6f:f7:82:a2:61:ca:76:48:fe:
36:62:a3:f6:6f:f5:45:db:fc:5c:0e:d7:28:13:b4:
cb:de:a1:dc:27:ac:b1:32:78:35:b3:a3:ca:85:71:
e0:6b:00:ae:c7:0e:8a:3a:9f:7e:97:87:b4:0a:38:
5c:e8:af:6a:8e:be:76:0a:b5:9d:e8:88:b3:29:b5:
20:09:fa:2f:fe:d9:85:40:f5:cf:34:ae:95:94:dc:
bf:f0:7e:74:3a:f0:78:42:a1:90:67:e0:35:f6:08:
5e:d2:3b:21:83:b6:4a:03:c6:2a:6d:e4:27:c2:48:
9d:da:37:37:ed:40:b1:d0:46:35:f3:ea:c0:0e:03:
30:b3:f1:ac:a8:cd:22:b7:8c:c8:b7:7a:88:94:43:
07:fd:72:ff:3c:ad:7b:c8:cb:13:24:8a:a1:a6:ff:
97:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:AC:F3:F7:C0:C3:A8:BD:4D:AD:8F:C5:8A:56:F2:18:E7:26:76:1A
X509v3 Authority Key Identifier:
keyid:29:19:46:18:44:54:98:24:50:0B:7C:D1:C4:51:D8:24:BA:6E:56:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRlGGERUmCRQC3zRxFHYJLpuVnc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d8c6f2-4191-46e6-8db6-b6ea82f19220/1/KRlGGERUmCRQC3zRxFHYJLpuVnc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9c:cf:2f:cb:d9:4b:a3:cb:f4:e0:f3:67:6e:cc:0a:5d:92:
78:b8:eb:c8:59:cf:3a:b7:01:6e:c5:fa:02:78:f3:c9:8a:53:
f6:89:4d:3a:1c:4c:89:ac:c4:db:e2:b1:8e:02:43:03:c7:a9:
4f:03:23:ae:30:40:ea:60:3b:56:f4:b7:df:51:2d:c1:8b:3d:
78:20:17:01:4c:00:f5:7f:45:59:3f:ad:e3:04:c5:bd:58:76:
ef:ac:a9:18:12:fa:19:ca:92:d9:62:73:44:64:4d:cc:b2:8e:
c5:e4:62:1f:1a:46:16:f1:0d:c2:20:ce:ac:af:0c:80:09:41:
6c:85:76:23:57:8c:a2:a6:bb:9b:17:33:58:6c:57:63:d5:ed:
25:e3:00:70:38:67:7f:1f:29:2b:47:6a:bc:86:49:b3:c1:1d:
6c:39:71:c7:07:0c:b9:00:3c:28:1a:0a:75:8d:ab:4e:4e:7c:
35:42:aa:84:96:84:1d:93:64:bc:b4:47:5c:cf:a4:b5:a8:b1:
a6:15:85:ac:a2:a5:45:4b:9b:a8:f8:28:e5:08:57:e1:8b:bb:
1b:01:c9:ac:f2:72:35:3a:9d:d6:97:47:32:62:2a:a3:a1:bf:
cc:98:d6:3b:2f:92:37:50:6b:b9:fd:2b:52:b3:d1:3a:7c:a9:
4c:32:24:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 22:14:18 2025 by rpki-client