Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
File: kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft (raw, json)
Hash identifier: KZqfpj3hMp1ggOTIWUH6rLFbDCD29Y6Dr/BiLpWDhpY=
Subject key identifier: CA:42:32:6E:C1:F0:B6:53:6C:57:59:D0:FB:0A:94:6E:E8:1A:C7:D3
Authority key identifier: 90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
Certificate issuer: /CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Certificate serial: 01958CCE1C3CE40552F81B06A39CF0D71F9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
Manifest number: 0842
Signing time: Thu 13 Mar 2025 00:01:12 +0000
Manifest this update: Thu 13 Mar 2025 00:01:12 +0000
Manifest next update: Fri 14 Mar 2025 00:01:12 +0000
Files and hashes: 1: QskXpCpWaerncmB5Tx33KABcmDs.roa (hash: fifxhbdZnzofmDMHP2JVB3uX7ui63rFuuabdauCyEO0=)
2: cpWvTztcB_PVgTrvB1pOMqOcrgg.roa (hash: F85tpYix9Q/joiRkP3de92k+CoUDGGFBzb+mLGcQwm8=)
3: kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl (hash: /0A0yJ9s0A1XD72MuecYjameCSmyFEMDBrklOAs/4xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:1c:3c:e4:05:52:f8:1b:06:a3:9c:f0:d7:1f:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051ebf8c28f817b7f148bfc95cc2b5b4cb30089
Validity
Not Before: Mar 13 00:01:12 2025 GMT
Not After : Mar 14 00:01:12 2025 GMT
Subject: CN=ca42326ec1f0b6536c5759d0fb0a946ee81ac7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8f:59:40:e0:d7:af:d4:c0:76:e3:a3:cd:79:
70:09:76:b1:b4:fb:62:02:6e:db:ee:8a:85:e1:ff:
8c:3c:30:8e:8e:b9:9d:3f:d1:65:8c:a1:23:e2:9b:
19:e1:2f:44:ff:0e:97:f0:f3:8f:bd:01:91:39:36:
2a:5e:a5:07:1e:e3:3f:98:1e:51:2d:3b:8a:11:f9:
fc:80:1a:3c:86:2b:9f:cb:02:cf:2f:a7:0d:b9:63:
92:99:59:dd:6a:e4:44:d9:5b:ec:b9:b7:40:79:fe:
aa:f3:08:e1:5d:ad:97:e8:70:db:1f:c9:97:a3:2c:
a2:42:bc:3a:23:ce:e7:00:01:30:c0:5d:68:9c:13:
e9:ca:c3:f1:0d:0d:49:1f:55:4c:5e:7f:59:82:58:
4b:c8:65:36:f2:b2:13:7a:8b:ab:49:2b:da:fe:51:
de:7c:26:90:37:8e:a1:1a:4b:d6:04:3a:a6:21:28:
c6:58:c3:e6:48:5e:a6:6b:84:88:04:4a:9a:61:5a:
39:bd:18:76:c6:e2:8f:f8:59:4d:ab:2f:dc:39:ca:
da:6d:19:96:88:0e:64:03:34:39:9a:0b:77:45:4b:
15:83:37:c8:79:3a:c5:3f:8b:13:81:24:6c:9f:13:
97:60:9a:26:30:ca:fb:61:78:de:e3:fe:06:fc:50:
ab:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:42:32:6E:C1:F0:B6:53:6C:57:59:D0:FB:0A:94:6E:E8:1A:C7:D3
X509v3 Authority Key Identifier:
keyid:90:51:EB:F8:C2:8F:81:7B:7F:14:8B:FC:95:CC:2B:5B:4C:B3:00:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHr-MKPgXt_FIv8lcwrW0yzAIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/79b597-6b0c-4d03-bf40-31247f3a4539/1/kFHr-MKPgXt_FIv8lcwrW0yzAIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:31:e8:12:45:d1:0b:7c:2b:99:54:96:27:c7:52:76:0b:05:
3d:90:8d:fb:83:86:0f:6c:b0:6b:5d:27:ef:23:43:d5:9e:af:
7a:2a:31:1b:aa:86:31:a3:57:6f:56:92:3d:d3:03:65:e9:ed:
5f:d7:55:90:35:8a:21:db:7a:4b:b6:ea:0b:69:1c:72:52:c5:
89:46:82:90:de:8b:b5:be:15:d2:f1:8c:78:09:35:44:bc:49:
8f:2f:a2:f8:31:e3:8e:a5:09:72:93:c4:eb:41:bd:7f:30:fd:
a4:4a:c8:cb:11:93:9b:8d:b4:c9:ae:24:34:7e:da:7b:87:a0:
59:a8:c5:71:14:08:53:28:85:3b:2f:b2:2c:b5:23:ef:18:f0:
87:74:9a:a3:46:06:b0:6c:76:d4:22:3f:2d:6f:2d:97:3a:82:
46:99:19:2f:6b:72:47:30:ce:2a:bc:06:8d:7c:95:e6:f6:8e:
03:8e:cd:4b:99:09:01:69:a1:e1:f1:9a:61:25:99:59:fe:28:
13:7d:6d:eb:dd:d7:61:f9:a6:93:53:71:8b:ea:54:36:93:42:
9f:75:b8:05:90:b9:36:bf:07:f7:ed:23:b5:dc:8b:e7:4a:18:
24:90:4c:3c:f0:f1:43:51:3d:e3:e3:da:88:c0:38:01:7a:c2:
69:e8:73:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:16 2025 by rpki-client