Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: UyHLWewQvFjwLvq2HtRham3O3+3Ms4NBtxVpYklq8L8=
Subject key identifier: 97:D6:8D:69:0B:A1:69:2B:93:E5:6C:46:20:50:50:21:A8:A2:69:60
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01958C60FA5AF55E6485DC5B572FB90A8667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 1495
Signing time: Wed 12 Mar 2025 22:02:00 +0000
Manifest this update: Wed 12 Mar 2025 22:02:00 +0000
Manifest next update: Thu 13 Mar 2025 22:02:00 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: VYQFCSj25RHVQI0dfT69up6HBw9fRMssGwa7PvlRfo8=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:fa:5a:f5:5e:64:85:dc:5b:57:2f:b9:0a:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: Mar 12 22:02:00 2025 GMT
Not After : Mar 13 22:02:00 2025 GMT
Subject: CN=97d68d690ba1692b93e56c4620505021a8a26960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:9a:7d:b3:ee:8e:5a:25:75:ab:15:01:f8:
b5:c6:a7:01:4b:15:eb:6b:81:16:07:97:da:62:57:
28:d8:31:c5:fd:f1:5f:5b:6f:0e:2f:bb:92:d0:7c:
ee:d1:59:15:d4:25:2b:f9:f7:9e:39:f8:8c:ce:9a:
cd:89:5e:42:e5:30:fb:8d:b3:34:52:0a:5e:7c:82:
44:79:ce:74:e5:99:74:e3:59:2a:3e:e4:97:7d:ee:
00:fc:d3:08:5a:c7:09:9e:e2:9d:4c:85:0c:f7:f0:
e9:d9:03:bd:90:c8:14:89:c8:70:d9:83:8e:07:9c:
d2:7b:f3:0a:39:bc:3a:32:99:34:64:46:11:d8:7a:
1e:bd:73:40:a0:66:d1:09:91:77:b7:86:38:b0:89:
70:27:61:3b:8e:8c:03:c9:19:f1:12:c5:0d:ff:20:
2d:50:2c:2a:d9:dd:d4:2b:da:fd:3d:54:3b:ca:ed:
3c:d9:3f:50:6d:9e:2f:13:40:cf:8e:54:8f:e9:ad:
31:64:97:db:33:7f:85:03:b0:50:ef:18:ea:8d:20:
77:7f:67:48:2c:0f:38:83:b8:9c:59:2c:ba:50:ea:
62:29:37:2e:66:2e:d4:ce:20:e9:9c:04:40:58:59:
de:8e:17:55:80:07:86:0a:02:e1:6e:1f:66:14:5d:
1c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D6:8D:69:0B:A1:69:2B:93:E5:6C:46:20:50:50:21:A8:A2:69:60
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4f:d5:32:60:27:5d:5e:1c:19:b9:fa:ed:58:4e:1d:43:f4:
66:b6:33:10:26:8c:fa:65:c8:c0:78:cc:b5:18:f8:9b:14:17:
57:30:90:4e:86:c7:b3:01:a1:89:92:11:68:be:29:57:b6:84:
d4:34:24:6f:73:5a:86:36:e4:69:99:cc:6d:dd:aa:b1:2f:04:
56:f5:05:17:16:dd:78:0e:a2:20:f5:91:48:98:88:df:2c:99:
0e:5f:c6:3e:02:75:02:92:a9:51:97:46:ce:df:7a:66:bd:d0:
41:45:0c:3e:e4:91:be:1b:1b:6a:7b:ed:63:12:97:e2:2a:2e:
a5:b0:e3:99:5e:0f:6b:2f:73:8e:d6:da:5d:cd:0a:db:04:37:
fe:11:e4:b6:c2:2a:25:f9:95:49:60:c6:50:6b:8b:47:77:41:
84:cb:71:49:7d:18:03:93:1e:05:9f:1a:2a:b2:16:1d:c4:4f:
75:41:c7:63:ff:af:35:c4:b2:e1:7d:07:c5:17:96:13:08:c7:
fc:5a:02:27:5d:00:f5:45:2e:c4:7e:b0:ed:02:7f:46:b2:ad:
a2:26:f3:eb:e3:a8:5f:5c:80:e6:85:13:e4:e8:3d:f6:93:c9:
71:17:b4:69:cf:35:e2:d9:4d:83:03:82:5d:91:72:a9:56:a1:
1a:06:f8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:18 2025 by rpki-client