Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: hx8WvwaANIIUMV1SUnNVfFFP5osTVtAzbMv8pRaWMcc=
Subject key identifier: 4C:BA:06:89:FB:BF:CA:49:D0:E9:A2:5E:CA:84:F4:19:02:53:6B:A2
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019657CB0AC1AA538222B77FC23CDE881893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0410
Signing time: Mon 21 Apr 2025 10:00:46 +0000
Manifest this update: Mon 21 Apr 2025 10:00:46 +0000
Manifest next update: Tue 22 Apr 2025 10:00:46 +0000
Files and hashes: 1: aWw5wJuzfBEHmyQaah8xYehdUG8.roa (hash: H2Jnmk/OanpEK56jJ8tSaxjK9R89WU3IiR7I7leXG38=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: 4+qU4m4y8mIYisJkPRXhb4uNSl70LTyYHB9iGdI1GcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:57:cb:0a:c1:aa:53:82:22:b7:7f:c2:3c:de:88:18:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Apr 21 10:00:46 2025 GMT
Not After : Apr 22 10:00:46 2025 GMT
Subject: CN=4cba0689fbbfca49d0e9a25eca84f41902536ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:63:e0:48:e2:54:68:bd:2a:37:12:37:af:85:
e6:62:ed:af:0a:ae:cc:b1:fb:f0:13:81:fc:83:63:
24:c2:72:7b:b5:9e:13:6b:85:91:24:d1:5d:aa:03:
b9:d7:e9:fe:7d:26:7c:cb:1e:38:37:42:77:73:11:
43:ef:5f:81:26:87:a2:a4:0c:08:33:7c:90:6f:8a:
c2:1a:17:7d:09:c1:42:91:1f:e0:32:c1:7a:cd:a0:
8a:9f:fe:5d:e5:85:ca:ab:1b:af:cb:77:c4:f7:ba:
92:e5:b0:4e:1f:9f:73:61:26:8c:9d:32:03:b0:93:
19:a0:5a:ca:76:05:fa:a3:92:61:34:00:fe:45:ff:
33:4f:14:32:d8:ba:4a:90:38:f4:58:4a:4f:24:17:
9d:24:38:b4:5e:95:a8:55:c2:e5:ea:fb:45:95:d4:
ff:40:a7:6a:0d:b8:71:7a:e1:a3:89:55:40:9e:a5:
c9:8d:2b:31:00:db:72:50:81:b6:c2:b3:f9:a5:a2:
fa:de:4d:f4:01:e7:f1:3e:93:b8:20:d7:58:3f:58:
32:66:1c:96:23:26:5c:fb:ee:f3:52:09:dd:b3:5f:
ae:da:17:b7:96:c9:4d:c8:25:4a:6c:39:c0:42:9f:
75:70:ce:a5:45:b6:38:76:d4:1d:3d:a7:e8:6c:b7:
5b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:BA:06:89:FB:BF:CA:49:D0:E9:A2:5E:CA:84:F4:19:02:53:6B:A2
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:64:4e:a9:f2:54:20:54:68:d6:53:7d:b9:33:ff:f5:b5:3c:
b0:de:a9:39:54:06:5f:b6:79:03:62:df:d4:3b:6e:13:38:70:
fd:91:77:67:2f:8a:2c:24:10:60:d8:19:1e:c2:cd:e7:8c:1c:
25:85:2a:3e:3e:23:ab:12:3b:a6:d9:83:7c:9b:aa:b0:9f:d0:
dc:15:b5:b0:0f:05:9a:4f:dd:d5:ad:93:c8:6f:b7:ba:f0:57:
52:87:7f:15:30:42:af:3d:b8:59:b7:c5:21:2f:c8:20:f8:34:
e3:24:7f:85:8f:f8:7e:35:ed:4e:97:53:f0:47:18:64:f1:f7:
36:13:0e:5e:d0:c6:a8:3d:76:36:a0:51:99:ee:c4:c4:b3:71:
fd:95:05:6d:9f:ad:d9:61:c8:9a:10:c1:41:30:58:df:e1:e1:
58:20:24:31:ea:a2:73:b4:ac:b4:62:31:af:81:73:69:5e:2e:
6d:97:1a:30:8d:bc:43:37:2d:d1:19:56:b0:c1:7b:d9:70:b8:
8a:16:ac:2f:aa:fc:17:c4:6b:3c:f6:02:7b:47:66:e2:4d:3f:
d0:f1:53:91:de:50:31:fb:26:4f:a6:63:f6:28:6b:c8:a3:25:
cd:41:79:2a:60:86:98:82:f7:67:1d:da:3f:bb:b2:35:14:30:
ab:c9:31:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:27:58 2025 by rpki-client