Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
File: KRl7xzMOqZkA9PyRAzozF-VvdeI.mft (raw, json)
Hash identifier: vvrLF8sDmmRw2ls328TA/N3RIL1V7wJi+7PJ+VZV6fk=
Subject key identifier: 1F:B7:9F:52:6E:BA:0F:9B:D2:E6:48:C7:A1:70:D1:62:9D:B2:69:DA
Authority key identifier: 29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
Certificate issuer: /CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Certificate serial: 01964857DDC98DF13240D6FE398CB6F97C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
Manifest number: 0319
Signing time: Fri 18 Apr 2025 10:00:40 +0000
Manifest this update: Fri 18 Apr 2025 10:00:40 +0000
Manifest next update: Sat 19 Apr 2025 10:00:40 +0000
Files and hashes: 1: KRl7xzMOqZkA9PyRAzozF-VvdeI.crl (hash: Rk6lIuEVNdWmyXqpbSuGeSit+fiXC0+sPAIIoXkumoc=)
2: lzjPjehPcPKbzhp_BORqJSFXL5w.roa (hash: o7m8VbYXK8WyV5y7PTGt6HIYSCCP18Dfj928jAcIW9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:57:dd:c9:8d:f1:32:40:d6:fe:39:8c:b6:f9:7c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29197bc7330ea99900f4fc91033a3317e56f75e2
Validity
Not Before: Apr 18 10:00:40 2025 GMT
Not After : Apr 19 10:00:40 2025 GMT
Subject: CN=1fb79f526eba0f9bd2e648c7a170d1629db269da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:59:9e:dd:e7:82:e0:16:49:fd:e1:cc:f0:f0:
4d:d9:01:08:22:9d:87:94:4d:5b:80:ca:84:21:57:
95:5c:ec:63:1b:a8:0d:22:93:03:2e:24:f3:01:32:
b3:7e:a6:6a:7d:9f:3e:b5:fa:6d:36:ab:f9:21:cd:
02:37:a5:ef:8e:25:3f:47:c5:86:69:67:f5:ce:e5:
d7:89:26:2f:78:48:ab:ed:73:a3:26:0d:43:ee:e9:
6b:60:4e:c9:a3:00:b2:e3:ff:32:fc:e9:99:0c:3b:
cc:66:ae:5a:e3:d8:24:25:16:01:7c:15:e6:31:1d:
c9:b8:a8:5a:96:f8:2a:79:c0:58:c1:c7:29:da:ad:
5b:27:7f:2e:75:22:d1:6b:5a:3f:b8:21:ae:c3:99:
d0:87:96:4b:48:58:dd:55:fe:7d:0c:34:ce:c6:d6:
82:fe:59:3b:5b:f3:09:f8:53:1d:c5:c3:3b:fb:a1:
eb:d4:bb:86:f3:96:a1:14:36:5b:ea:c5:50:5a:57:
eb:d4:28:53:2e:09:13:72:97:4f:f7:6e:40:4c:43:
92:36:b8:27:bb:ba:64:c6:cf:6e:07:96:2f:cc:56:
3d:d0:c6:ab:f0:85:a2:89:f2:ac:1c:89:a3:f3:9f:
85:e9:6e:07:a8:d6:4c:58:53:c6:dd:8a:92:6d:5b:
f2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B7:9F:52:6E:BA:0F:9B:D2:E6:48:C7:A1:70:D1:62:9D:B2:69:DA
X509v3 Authority Key Identifier:
keyid:29:19:7B:C7:33:0E:A9:99:00:F4:FC:91:03:3A:33:17:E5:6F:75:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRl7xzMOqZkA9PyRAzozF-VvdeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1043a7-b276-40dc-9f67-35004af5c935/1/KRl7xzMOqZkA9PyRAzozF-VvdeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:39:f9:28:3d:64:03:ea:5f:1b:9f:50:38:50:89:f3:ae:c7:
6c:a9:b3:db:8e:e3:28:2f:1b:eb:ef:41:8d:b7:e8:f3:66:cb:
4f:29:a0:05:4e:3c:ad:f7:1c:5b:90:02:81:3d:b3:e6:9f:c9:
62:85:bc:89:ef:c4:de:75:eb:56:89:11:63:3a:d0:fb:24:65:
ea:3c:99:a1:ee:f4:04:de:c3:06:3f:95:bd:5e:91:f4:c2:25:
a8:67:81:af:26:05:ab:06:28:38:4d:8c:c1:e8:66:af:61:75:
b1:e5:97:ba:2b:36:d2:09:cd:1f:6f:f0:f2:f6:cf:4c:24:8a:
bc:f4:6a:7e:19:7b:9b:5f:71:79:23:a7:cf:29:c4:9c:7e:e5:
05:fb:a7:dd:e5:04:f0:4c:ac:68:92:58:b4:5d:88:44:d8:85:
24:be:1c:7a:31:60:a2:73:c3:8d:49:45:cf:ab:76:2a:be:81:
58:ce:90:32:72:43:3e:95:c9:1c:8b:4f:0f:16:14:ec:76:b7:
71:64:c1:9c:20:e0:aa:2d:8c:a4:fc:af:a4:15:eb:67:22:cb:
eb:12:5c:35:e2:95:f9:fe:85:59:83:08:68:a4:18:bb:e5:7c:
2b:7f:cf:b6:81:c5:a3:2c:ed:8b:39:db:b9:6f:ef:87:16:6b:
bd:f5:a5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 15:57:46 2025 by rpki-client