Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
File: KXrnWSylJJHcFmow_hR31xK9Rl0.mft (raw, json)
Hash identifier: PtLDeZ+eKJxCtd5uIoH+U99FxgpKFpyvowpxQM6KHK0=
Subject key identifier: 32:ED:C8:19:81:D0:16:10:2E:42:77:A8:DB:6B:DD:3D:9D:4B:93:F6
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019646A0F6AC551633FE09501D2B90A23609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
Manifest number: 1507
Signing time: Fri 18 Apr 2025 02:01:16 +0000
Manifest this update: Fri 18 Apr 2025 02:01:16 +0000
Manifest next update: Sat 19 Apr 2025 02:01:16 +0000
Files and hashes: 1: 3S9CxnQg7YWqU3K6TXltDEUCLyw.roa (hash: 3OEFYGKv+A11bV584/FIEjB0rz/syH/3YTSncOKzqpk=)
2: 7iZSI8YJjBx97RcBp5yy0dHgNCc.roa (hash: zYIePn/XtBi1RBLoEwZwbryvrg3fa+ccFHSQFX92GIc=)
3: 8aTIb0puCina4qQH9DISIqfOc4Q.roa (hash: 1Nu+gUGiEPO422nTi4SIHIM/055+/Bx1i4GdyYjGB6w=)
4: 9DoakwUWAGtHNEatYpKzbo2QTwI.roa (hash: N1mtoTrK+kfX1PnLRJRzSQlCeUqp41+33H0gjLXBdeo=)
5: EZFIYtcapsDAbifqmq2FXtp-Cdw.roa (hash: f6ff20P7C3YhGHb/pCr95k1VGXcMCffUp+GlTWJzaPk=)
6: F-e0yheo2RviKbK6HPx7_eTqhA4.roa (hash: KEJO7y7WsDfC5FsDfSaCJ3hpxQXSnjViDnFGvytgGQY=)
7: KXrnWSylJJHcFmow_hR31xK9Rl0.crl (hash: bK0NVufhaCRk6LhCChoGjP1bqX4oqiqNP2e6eqoa0AE=)
8: ic83PxAobxuOswBFck-YRl3xl5s.roa (hash: b2hEd1qs+ywRwA/SKMeyaDMx96OzLoUUBDS6BjYhAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:f6:ac:55:16:33:fe:09:50:1d:2b:90:a2:36:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Apr 18 02:01:16 2025 GMT
Not After : Apr 19 02:01:16 2025 GMT
Subject: CN=32edc81981d016102e4277a8db6bdd3d9d4b93f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:4b:e0:d9:b9:bc:3b:99:24:7b:72:47:b9:
da:98:1d:c2:1f:de:28:91:a3:06:b1:82:6c:94:06:
b9:a5:55:f7:8e:57:74:f9:39:dd:ce:0a:b2:0d:40:
e8:4a:5f:85:8e:7a:5b:41:e1:11:2b:62:01:b0:2d:
a6:0a:0b:e8:70:1b:3d:0d:85:e3:ce:8e:b7:35:40:
ef:5e:41:58:93:9f:d8:ce:8c:14:a8:b8:6e:57:a0:
bb:10:e2:30:64:7a:bb:0c:14:28:4d:c6:ff:94:30:
18:7a:be:32:87:12:91:71:64:b2:a9:77:e3:02:15:
db:46:8a:42:42:f4:99:be:a7:a0:43:3f:8f:6f:82:
65:7a:09:c1:d6:de:39:60:2e:d9:f7:8e:ce:7e:33:
9c:2a:c2:47:cd:f6:96:fd:72:79:43:fa:4c:c4:b5:
22:8f:03:73:bd:92:39:b2:0c:07:51:7e:19:a4:62:
4c:ae:1d:fa:05:65:d4:7f:cc:05:ca:57:e6:32:a4:
5a:aa:ec:3a:6a:a1:3d:0b:26:4e:66:ef:44:97:a8:
7f:38:d3:7b:f7:69:fb:4d:46:4b:84:65:d5:0c:ee:
23:73:9e:63:c4:82:e3:67:08:7b:1c:4a:26:b9:14:
8c:0a:60:b5:c5:3c:4e:33:ae:a6:1a:7e:80:f4:19:
b3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:ED:C8:19:81:D0:16:10:2E:42:77:A8:DB:6B:DD:3D:9D:4B:93:F6
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:04:99:e3:a6:bf:9e:cb:84:40:35:1a:3f:ae:f2:7f:c6:ff:
ed:22:55:e3:bc:73:99:3f:57:a8:bb:df:3c:2c:d5:3a:41:dc:
db:60:2d:ee:ce:c5:58:d5:70:82:c0:f5:b2:be:01:05:ce:8d:
d8:ab:13:d4:e4:18:36:9d:dd:b5:42:4e:30:9c:2b:e1:ad:a0:
df:82:00:8c:63:87:f8:2d:a1:7c:79:eb:0c:0b:65:ba:59:70:
5f:4e:41:30:30:31:9f:4f:a2:0a:9c:b3:b1:e4:91:38:4a:fd:
f2:5d:2b:c5:2e:0c:a6:42:08:89:3a:e1:87:c9:3e:61:4e:4a:
d8:95:f9:17:2f:8a:72:72:01:8d:52:8c:ea:b2:be:3e:d9:12:
dc:eb:a0:57:a8:a8:7c:b9:d8:22:44:90:fb:5d:07:6e:e8:02:
41:88:f1:d7:26:5a:f5:8a:fe:a4:1e:11:2c:37:b2:a0:eb:ab:
8e:86:d2:8e:e5:97:c6:08:5e:a6:02:89:8d:6a:1e:50:5a:50:
5a:8d:f1:09:25:42:f5:c1:f3:cc:39:b5:a9:3a:78:ee:85:54:
22:52:37:c8:5e:68:f3:a4:b3:6b:17:fd:74:26:d8:ef:0f:a7:
30:d7:9f:38:37:3b:0e:e6:df:d0:57:fe:c3:ee:87:d0:2e:ff:
d3:4d:e6:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:13:21 2025 by rpki-client