Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
File: klBppddk2iVZVNsu6dEkPeFrkQE.mft (raw, json)
Hash identifier: v/EObbE+9j2FCwHFr0Ri177DlR1L+dTTOGKNDNsJEpQ=
Subject key identifier: F6:79:82:04:93:47:5A:E9:99:13:6B:54:4C:BE:51:BD:2B:C5:9F:EF
Authority key identifier: 92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
Certificate issuer: /CN=925069a5d764da255954db2ee9d1243de16b9101
Certificate serial: 01964EC7FCC5C0E6B210B1FD60D159DCD2F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
Manifest number: 1089
Signing time: Sat 19 Apr 2025 16:00:51 +0000
Manifest this update: Sat 19 Apr 2025 16:00:51 +0000
Manifest next update: Sun 20 Apr 2025 16:00:51 +0000
Files and hashes: 1: Hvxuzsj6EczQMtzXmG3ZXMTDSzY.roa (hash: IsEfb4XnUiiJKA1AVKZnGfwgI7NGrVN9fX4TxNoqt/g=)
2: RZ8C7kJw0WnSALfkl5thd-tNGAc.roa (hash: siN5gEDK5XnJ7yawdzNqRM0ni+t0tEVv4a0T208KnEI=)
3: klBppddk2iVZVNsu6dEkPeFrkQE.crl (hash: Xp0hCNUPjcDMuJEqDdd6dMBe/BGY0hryoCIqVpfrZkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:fc:c5:c0:e6:b2:10:b1:fd:60:d1:59:dc:d2:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925069a5d764da255954db2ee9d1243de16b9101
Validity
Not Before: Apr 19 16:00:51 2025 GMT
Not After : Apr 20 16:00:51 2025 GMT
Subject: CN=f679820493475ae999136b544cbe51bd2bc59fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:b9:6d:4e:d3:cc:b2:2b:95:db:c7:04:67:
f5:34:16:ab:bc:cb:2c:fe:52:ed:a3:d0:f7:3b:23:
5e:86:d8:5d:a6:56:ae:cb:75:0f:cf:51:e1:ed:7f:
69:cd:0b:dc:0c:1d:9b:ad:7a:1b:f3:91:af:ba:41:
d5:9a:7e:14:17:96:6b:3c:03:b1:90:35:b2:0b:dc:
80:69:b5:91:99:42:71:57:54:77:aa:d2:e4:9d:a8:
bd:ae:31:36:42:26:99:d0:78:10:1f:6e:f8:3e:f3:
84:6c:8d:c1:5e:14:06:f9:0b:55:29:8b:3b:a5:3f:
6d:62:f8:64:4e:7f:1c:d9:36:af:f6:8a:20:db:05:
64:c7:cf:78:9b:08:05:0a:b3:66:04:1d:9d:d3:e9:
bf:da:05:8b:af:c1:c4:75:8b:b0:23:61:e5:e3:6c:
4b:38:fb:eb:65:68:64:09:21:02:c1:72:fb:db:2c:
c2:57:78:7b:dd:d4:be:10:9e:4e:b4:b1:7e:d8:a5:
23:74:fd:ab:ae:aa:f8:2c:d7:54:8a:ea:6b:53:d6:
00:de:46:0c:a0:4b:44:43:6b:0f:66:0b:f6:12:67:
cb:db:81:67:cc:9c:8f:7b:85:20:ce:a5:4c:1e:3b:
7e:b3:1a:d3:d0:2b:85:7a:94:5e:38:3c:22:ce:23:
46:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:79:82:04:93:47:5A:E9:99:13:6B:54:4C:BE:51:BD:2B:C5:9F:EF
X509v3 Authority Key Identifier:
keyid:92:50:69:A5:D7:64:DA:25:59:54:DB:2E:E9:D1:24:3D:E1:6B:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klBppddk2iVZVNsu6dEkPeFrkQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/6788f5-4889-4be7-bb19-a9b8de611a96/1/klBppddk2iVZVNsu6dEkPeFrkQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:30:a3:42:51:c1:5c:b7:83:0e:98:63:b0:1c:5a:d8:bb:21:
2d:4f:9e:4d:8c:6b:96:a9:98:3f:23:30:86:b7:f8:a5:3f:05:
51:2e:ff:21:a9:22:73:e4:1b:64:8a:d4:16:89:09:cf:20:2b:
49:7c:ce:17:e1:20:45:47:44:29:76:3f:0b:b4:53:fd:95:a0:
2c:4c:c2:6e:00:47:95:c0:7a:34:0c:d9:bb:d6:f4:83:e3:e4:
8e:99:86:46:ac:e8:a9:85:3c:ad:8b:d5:a3:67:de:47:05:43:
95:00:4c:60:02:96:fd:0f:3c:4a:ed:f1:29:1b:6b:c0:13:24:
9c:1a:95:f1:a9:a0:cb:46:45:69:ba:25:7b:9c:d7:3d:cb:a5:
ea:cd:e5:46:ef:e7:c8:30:b3:a6:e5:bf:39:2c:d3:c3:89:95:
dd:42:d1:81:fb:4a:f5:94:2e:a3:d4:fd:2e:45:ed:d9:1f:19:
2e:35:9c:6d:a0:6d:2d:1c:77:c5:a9:c3:b3:f1:82:23:36:ef:
ae:44:40:db:b1:c3:0e:a3:6d:99:f9:b2:06:59:27:0a:c8:9b:
4a:0e:29:e5:b4:f6:18:9c:1b:25:6b:ef:50:fd:c4:1c:9c:cf:
4d:24:d6:f8:93:bb:60:ea:52:11:95:aa:c1:58:7a:81:b3:18:
ea:58:33:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:40:01 2025 by rpki-client