Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: BCYApePjAztuNeulHngb/Tc5soE9SNSnb2orPz+UI5Q=
Subject key identifier: 5E:D1:AC:1A:4E:85:37:6E:07:04:CA:94:AA:AE:7B:A0:D3:79:FF:1D
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 01958CCE658F46828EC7104BF5E9B68D615B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 0531
Signing time: Thu 13 Mar 2025 00:01:31 +0000
Manifest this update: Thu 13 Mar 2025 00:01:31 +0000
Manifest next update: Fri 14 Mar 2025 00:01:31 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: xcU1vp/Fp7y+CmbPOYlEzJ1gE4rQDjHMl5DPzvA0INA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:ce:65:8f:46:82:8e:c7:10:4b:f5:e9:b6:8d:61:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Mar 13 00:01:31 2025 GMT
Not After : Mar 14 00:01:31 2025 GMT
Subject: CN=5ed1ac1a4e85376e0704ca94aaae7ba0d379ff1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b4:13:bf:47:6f:68:7c:d2:77:da:6a:fe:ec:
70:a4:27:76:f7:12:41:94:9a:c0:98:9c:9d:32:c5:
36:d1:d1:b0:12:64:61:a2:6a:d3:13:49:dd:fa:25:
26:d1:b3:6b:f8:9a:91:3c:d5:da:6f:77:0b:24:9b:
81:95:a6:c8:5d:26:c4:5f:17:ff:ae:af:59:3d:e8:
e7:46:fa:f3:1e:ee:32:88:2f:95:19:01:80:78:f3:
3f:92:62:fc:93:0c:41:2d:6f:d0:55:3c:ca:ec:e6:
67:8d:d8:31:21:fb:44:65:90:04:33:0b:0f:c8:2f:
e5:03:72:60:2e:ba:28:51:97:cb:5f:36:20:6b:c5:
82:ce:27:05:23:06:59:2d:a5:14:75:44:28:46:88:
43:9a:3f:be:ee:2b:97:35:6f:06:ef:60:90:2f:0c:
ee:53:71:10:d2:22:8c:e0:18:e4:f6:91:ca:7c:53:
81:2b:b7:ef:29:76:c0:52:1b:8e:1b:d6:a5:e5:95:
b0:9f:97:39:4d:6e:07:4e:73:2a:8f:72:73:90:92:
80:b1:67:0c:eb:0c:86:a3:c8:6d:89:7f:13:27:d8:
a0:cd:a9:f2:06:f0:ab:e1:e4:39:03:73:b7:e9:8e:
eb:48:f5:5d:d2:b0:f1:83:e2:1b:6a:d9:44:86:de:
9d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:AC:1A:4E:85:37:6E:07:04:CA:94:AA:AE:7B:A0:D3:79:FF:1D
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:50:71:00:1b:ef:0f:97:28:27:cc:60:4d:c4:08:30:81:cd:
b9:9b:0f:3d:1f:1c:48:ca:be:bd:b5:b7:c5:28:17:c7:9a:05:
fe:4a:63:3c:17:2a:ff:3f:bf:79:ae:a6:af:75:a9:a1:f1:32:
cf:14:0e:c4:b8:ab:8c:15:ec:e8:fb:7c:50:8f:e2:aa:e0:78:
5a:ad:db:25:0d:eb:55:4d:4a:e7:01:ef:ba:64:6a:f4:7d:56:
3a:8d:18:2a:9c:e0:f7:21:85:e9:d2:8a:e0:ad:39:e6:bc:df:
13:ef:04:88:0d:f8:8f:48:f3:b3:18:3d:d2:cb:9b:f5:76:8f:
ac:b6:b9:ed:0e:3d:6e:a6:76:d9:91:ac:d4:24:23:26:22:0d:
57:48:fe:f3:ca:7b:67:79:41:07:93:14:54:96:02:92:21:76:
e5:06:92:72:ce:30:f2:e8:1d:ee:02:c1:8f:e8:47:a6:54:79:
80:79:90:46:f0:8e:4a:72:75:7c:b0:01:7a:c5:81:18:1d:02:
17:08:5a:02:3b:ff:bd:f1:42:61:e6:f2:6b:1e:67:30:4e:3c:
54:5a:b5:5c:56:59:36:b8:e6:50:65:d0:3a:a3:a4:24:66:dd:
15:3b:ba:b0:55:f0:29:d9:22:6e:1a:9e:d6:ff:86:e3:d7:a3:
1a:94:7a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:47:33 2025 by rpki-client