Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
File: KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft (raw, json)
Hash identifier: kPfQwjOHr2RE1VhJPr2PWwnARJE+1yoWt6xTxem0Ego=
Subject key identifier: D3:2A:6F:9E:90:11:67:65:89:6D:6E:D5:99:9B:3C:EE:D1:43:D6:F6
Authority key identifier: 29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
Certificate issuer: /CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Certificate serial: 0196120E860C6C3539292E5C0C0B99B555A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
Manifest number: 0B75
Signing time: Mon 07 Apr 2025 21:01:03 +0000
Manifest this update: Mon 07 Apr 2025 21:01:03 +0000
Manifest next update: Tue 08 Apr 2025 21:01:03 +0000
Files and hashes: 1: 3Q4b3ZrB5hBNl0sc19tX6sYik8M.roa (hash: Y2d6NgWxe37Sh2Kw4xqcfrnYvSssw7Fp3dHdg6i9y18=)
2: GL9mMoVzYzt9cAMp9ZMhDNvyxpY.roa (hash: sr1sGLjbfiu/0SvHpnzyQUaLuHxB9sxU75fTY0SHxZw=)
3: KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl (hash: 8pEcaa64TrmdEPGdX+IeCxqnqeHaXe1B/HRGV6CMaGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:12:0e:86:0c:6c:35:39:29:2e:5c:0c:0b:99:b5:55:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297194f4b52b9ff433f2bf0d16b58c11c7cf1131
Validity
Not Before: Apr 7 21:01:03 2025 GMT
Not After : Apr 8 21:01:03 2025 GMT
Subject: CN=d32a6f9e90116765896d6ed5999b3ceed143d6f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:32:c1:35:e6:3b:42:57:b9:e5:6e:58:24:f2:
17:64:e6:54:f3:a5:f8:d6:19:5f:65:c0:7e:28:c2:
0a:9a:60:55:61:28:7c:4f:94:ba:e5:f8:41:c0:aa:
f4:43:ca:a2:24:fe:ec:18:25:47:22:f2:1a:0f:83:
e1:b8:04:e6:4d:61:64:1c:08:93:aa:9a:7c:5d:d2:
b5:c7:90:4a:5e:d9:a2:97:2f:7a:af:10:34:9e:02:
ff:74:8d:a8:d6:0b:47:4a:78:c7:af:5b:c3:4c:4d:
9c:0f:3a:f9:5c:38:b4:ab:75:58:6c:7b:8b:38:8f:
cd:0b:4a:06:5e:5b:30:93:22:9b:54:3a:95:8c:a0:
75:be:59:ff:d9:df:8f:b2:b6:de:82:53:6c:e4:9d:
72:78:55:a9:3a:80:a7:06:6b:e8:70:ae:1c:77:64:
b6:76:4e:7d:a6:f7:40:64:8a:f3:37:3b:b7:b7:0b:
eb:89:be:20:ba:60:60:8b:67:99:e3:5c:f6:b3:31:
a6:f7:60:1f:9d:5b:a8:0b:d2:bc:6d:33:db:a0:49:
f3:19:a4:ae:c7:34:a0:5b:0c:aa:d6:55:a8:98:18:
cb:e5:82:d1:e1:25:56:cc:af:99:76:05:d9:57:87:
ad:2a:3f:9c:83:f7:79:36:95:90:13:ca:3e:cc:9b:
89:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:2A:6F:9E:90:11:67:65:89:6D:6E:D5:99:9B:3C:EE:D1:43:D6:F6
X509v3 Authority Key Identifier:
keyid:29:71:94:F4:B5:2B:9F:F4:33:F2:BF:0D:16:B5:8C:11:C7:CF:11:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXGU9LUrn_Qz8r8NFrWMEcfPETE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/80b4c0-06cb-4424-9dd5-5a988931ea33/1/KXGU9LUrn_Qz8r8NFrWMEcfPETE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:57:7c:43:4b:52:0f:cf:65:6d:29:f4:05:d0:ed:4c:b5:f3:
85:b7:1b:87:ad:3d:6a:bb:39:d7:4a:e6:05:b3:f4:7f:b3:36:
e7:56:50:1b:01:86:b8:2c:92:1a:c5:1f:37:80:76:1a:a7:8d:
c3:89:60:4f:ca:67:11:40:7e:04:fe:36:ad:9f:93:c4:16:28:
1b:1c:25:f7:7e:9d:84:74:d9:88:b6:b4:96:83:86:bc:f2:57:
5f:08:88:44:31:71:08:bc:ce:fe:91:23:2f:86:aa:0f:7f:a4:
c3:8b:c3:19:0d:99:a8:60:5d:8e:be:bc:2f:01:b1:d2:27:4a:
48:df:55:34:79:6d:28:ec:09:5d:84:1b:0f:15:03:05:93:dd:
ad:c8:61:5d:eb:2a:65:4b:5d:cf:29:92:7a:07:b8:fe:34:03:
51:fa:93:67:7e:b7:b2:14:2f:51:34:3d:49:4d:35:60:65:66:
8a:07:8c:86:5a:11:80:ec:32:18:1c:16:15:98:e0:50:60:24:
af:c0:19:d1:21:33:82:9f:77:da:ee:25:fe:75:c9:de:ae:e5:
5e:97:d9:88:63:af:f4:52:a9:a6:ae:24:07:c0:21:07:4d:f6:
9e:e9:11:80:e6:37:ec:26:8a:f7:dc:bf:b6:ab:a9:d5:2b:76:
e0:b9:42:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:06:07 2025 by rpki-client