Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
File: kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft (raw, json)
Hash identifier: P9PuN71ISf72uUdGnSCFiLZiiW79qESz+m58uRgmVGA=
Subject key identifier: 9C:46:9C:8C:56:AA:77:EC:CA:37:78:23:99:1E:50:8A:97:8D:80:7C
Authority key identifier: 92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
Certificate issuer: /CN=926b9336fcaf3657cedeba53c47e948010877e20
Certificate serial: 0196515AD1AE0FF5D318DB0C55465088B0A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
Manifest number: 14FD
Signing time: Sun 20 Apr 2025 04:00:28 +0000
Manifest this update: Sun 20 Apr 2025 04:00:28 +0000
Manifest next update: Mon 21 Apr 2025 04:00:28 +0000
Files and hashes: 1: kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl (hash: cWkX8x1jEX1ViheA7ls86LWVF5x4TUxhRrTyyLCmT74=)
2: leB_64ybrz6UnuQ8ONDuXBRfKSQ.roa (hash: YpGN6vj+lQckfcrcDFagKzWYTJIRBq12KtLk9dWRtqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:5a:d1:ae:0f:f5:d3:18:db:0c:55:46:50:88:b0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926b9336fcaf3657cedeba53c47e948010877e20
Validity
Not Before: Apr 20 04:00:28 2025 GMT
Not After : Apr 21 04:00:28 2025 GMT
Subject: CN=9c469c8c56aa77ecca377823991e508a978d807c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:95:49:f2:a4:da:ed:49:9b:fd:cb:fa:03:be:
b9:9e:3d:a3:3c:16:cd:8d:1e:85:3e:0a:a0:b3:0a:
4a:07:9a:e3:d2:db:76:aa:4d:29:3c:0b:65:d2:d8:
66:48:95:5c:34:a4:37:6a:0e:c5:4d:59:fd:d7:a8:
3e:d5:88:c0:36:3a:b7:89:bb:9c:10:55:0a:05:35:
7e:da:3a:df:15:1f:bc:33:f2:fd:c4:24:42:b2:53:
39:9c:a1:d6:bc:f4:46:d9:96:76:2c:ed:5d:cb:de:
b5:0b:eb:b2:e5:20:c6:f7:45:c5:be:bc:3e:77:de:
21:2d:0e:f8:87:8e:49:77:9f:e5:79:30:d8:21:6f:
22:5d:3e:7c:11:2f:5f:26:c0:72:2a:d3:38:26:36:
0d:99:17:a0:b1:d2:de:7a:98:f0:bd:22:e1:ec:df:
2b:1c:11:53:c4:06:dc:80:e4:77:d0:3f:40:9a:b0:
2d:aa:7c:04:cc:d5:7c:04:2b:14:9a:e6:7d:fb:ad:
42:ac:b4:5e:c3:a3:3e:8b:91:86:5c:cd:a1:4b:04:
84:8e:cc:53:32:db:82:09:9c:45:3c:92:e5:1a:a0:
98:fb:5c:24:43:e0:f2:cf:fb:6a:dd:97:fa:82:88:
fe:24:27:05:f5:32:18:fe:f3:10:02:a6:d1:af:92:
87:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:46:9C:8C:56:AA:77:EC:CA:37:78:23:99:1E:50:8A:97:8D:80:7C
X509v3 Authority Key Identifier:
keyid:92:6B:93:36:FC:AF:36:57:CE:DE:BA:53:C4:7E:94:80:10:87:7E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmuTNvyvNlfO3rpTxH6UgBCHfiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/efbbf0-e4fa-4431-b1e7-06a24fa74667/1/kmuTNvyvNlfO3rpTxH6UgBCHfiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0c:b3:97:c9:16:7b:7b:d1:72:56:fe:21:5c:a4:17:9d:57:
6b:93:7f:99:80:df:1d:93:a4:d0:5f:cf:4b:af:e0:b0:15:2f:
d0:bb:51:2a:e3:c8:2a:34:1c:b6:3e:ff:01:7a:a9:57:14:91:
00:e2:c9:ef:c5:23:01:83:a6:c5:19:be:d7:b8:04:31:10:7f:
55:43:12:cc:ad:85:e6:61:92:eb:99:e5:d5:0d:bc:85:68:9f:
16:7f:0a:9e:9b:83:0c:b8:a8:5c:54:b4:0b:0a:0b:43:1d:57:
d7:5e:43:c2:9c:7e:19:9c:84:08:7a:68:15:94:3f:c1:88:1b:
25:79:55:97:20:b7:32:d1:4d:8d:b2:08:c5:25:d6:aa:ba:9d:
66:2d:c7:fe:cc:fa:b6:97:1e:50:07:02:ad:93:25:97:bb:21:
8e:4b:14:11:47:30:87:ae:bd:0c:e1:4f:21:8b:23:79:eb:40:
f7:56:f3:3a:8b:2c:94:6c:dc:c2:d1:a3:14:bd:fe:e3:94:cd:
e2:e2:ac:7e:07:66:3c:0f:b1:ab:42:80:e6:2f:cb:69:f5:11:
db:b1:17:59:7f:b9:c1:8f:2b:cd:73:99:ec:5f:2a:58:a1:0f:
c5:14:cb:cc:f4:d7:10:bc:a9:f9:94:a8:43:c7:e5:65:09:42:
f1:a4:19:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:07:37 2025 by rpki-client