Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: n44+ZePqU05UxR1USngn/lwTIrbHS4/DBcVp22fUmzQ=
Subject key identifier: 07:42:47:6F:42:14:23:10:4A:4F:21:5D:5D:E5:D1:32:19:0F:09:FF
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 01963D66544344157E8B57EF517B9CFE8746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 14F2
Signing time: Wed 16 Apr 2025 07:00:38 +0000
Manifest this update: Wed 16 Apr 2025 07:00:38 +0000
Manifest next update: Thu 17 Apr 2025 07:00:38 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: zVXejSW8za4oImz2d5GA5M0B6cU1TkMZXYR1sAyvKMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 07:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3d:66:54:43:44:15:7e:8b:57:ef:51:7b:9c:fe:87:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: Apr 16 07:00:38 2025 GMT
Not After : Apr 17 07:00:38 2025 GMT
Subject: CN=0742476f421423104a4f215d5de5d132190f09ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:52:19:38:d2:89:74:49:21:d2:65:c9:bf:6e:
ca:7d:b0:8d:55:14:eb:5f:33:18:a9:0e:ca:e9:a8:
4c:31:a5:d6:56:71:05:10:35:28:7a:c9:0f:e7:de:
05:36:fd:90:e1:f3:1e:d7:d9:38:16:80:74:36:c0:
f3:63:c4:dd:14:c5:10:81:54:af:8c:fd:ef:f6:5b:
af:ae:ab:52:7c:45:50:67:9c:4c:ca:47:b2:33:f8:
16:b1:3b:41:ca:97:44:6c:bb:6d:7e:93:34:dd:bd:
f4:42:e6:4a:cb:a7:77:1b:00:0b:cc:55:a5:1d:e2:
52:18:0f:80:90:6f:d4:c0:3f:e6:6e:ba:df:7e:0f:
55:60:3d:88:65:83:88:1a:b7:2c:f6:66:eb:e9:3c:
5c:72:06:20:88:7d:85:2c:85:0a:06:71:69:22:5f:
e7:ad:02:0d:58:7e:11:0e:40:40:99:3e:53:b0:04:
49:31:4e:63:87:45:0f:a7:49:69:5e:df:92:2c:77:
da:85:8e:db:b3:bb:b0:a7:30:49:87:da:07:56:7e:
7f:39:cc:5c:fb:d5:3c:c5:02:c4:cc:37:d4:bd:ee:
85:fc:8c:14:28:40:fd:d4:83:39:40:8f:78:60:c1:
13:03:a8:91:09:a9:f6:28:4d:17:ae:60:8f:00:dc:
3a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:42:47:6F:42:14:23:10:4A:4F:21:5D:5D:E5:D1:32:19:0F:09:FF
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:64:3c:e4:a9:fe:48:00:2a:89:88:ad:02:74:34:34:bb:98:
7a:39:45:9b:a7:89:4d:85:91:88:53:c4:64:82:eb:10:55:4d:
8a:a6:ef:88:fc:b8:56:8e:7f:47:01:b0:8e:c0:3d:34:74:22:
32:46:54:ff:bd:ab:80:98:7b:84:05:7a:4c:cf:99:20:10:be:
1b:96:83:ff:7f:49:89:73:87:77:e8:c3:d0:a5:2c:b1:b5:23:
33:cc:18:c2:e8:4c:89:69:28:5e:83:2e:a7:df:98:ee:81:32:
58:2f:8e:38:d7:1b:15:b3:47:19:f8:74:2d:5b:03:5c:03:70:
84:a8:a6:9b:ac:c7:05:25:60:fe:8f:01:c7:15:73:8b:b7:1e:
4f:7d:0b:ba:0e:1c:ac:71:f9:76:e0:d6:3c:2d:29:0a:2c:4e:
a9:03:4e:e2:f6:32:19:f0:09:73:23:2a:73:f2:cc:ca:eb:f0:
fe:1c:34:dd:3a:a1:df:05:14:11:44:d3:48:0e:91:8a:9c:07:
a0:a3:b1:ad:f8:70:79:8b:57:83:0c:9c:d0:72:6f:3a:8d:b9:
24:2c:6b:0f:82:09:a9:33:d7:a8:57:de:6a:e8:98:b3:e7:8e:
8d:4f:e8:10:48:71:3a:a3:0e:6f:b3:19:08:8a:c2:c7:02:42:
9f:c6:52:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:18:42 2025 by rpki-client