Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
File: kPeS6o__kECyzX8XBzbkLnSDp2c.mft (raw, json)
Hash identifier: LrCsuNjRgZnuZgpsIpDS6LJVdPpEdZejvkvJJoXskwA=
Subject key identifier: C2:79:BA:D2:7C:44:AE:92:61:CF:1E:D3:D8:4D:E6:D5:81:F0:3F:BC
Authority key identifier: 90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
Certificate issuer: /CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Certificate serial: 01965011C230F343A042C4C1700108520ED0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
Manifest number: 01C1
Signing time: Sat 19 Apr 2025 22:01:03 +0000
Manifest this update: Sat 19 Apr 2025 22:01:03 +0000
Manifest next update: Sun 20 Apr 2025 22:01:03 +0000
Files and hashes: 1: R-CX4CB0hLo514CToPVhOwxreNk.roa (hash: uWvGHgIozdO3NKS0KfC+P7cEFWYQl8434I9zUzprdfA=)
2: kPeS6o__kECyzX8XBzbkLnSDp2c.crl (hash: /Ygy5l1Iq8TPdve79bMSDnK++mPUsA8M++MRvn7x12s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:11:c2:30:f3:43:a0:42:c4:c1:70:01:08:52:0e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f792ea8fff9040b2cd7f170736e42e7483a767
Validity
Not Before: Apr 19 22:01:03 2025 GMT
Not After : Apr 20 22:01:03 2025 GMT
Subject: CN=c279bad27c44ae9261cf1ed3d84de6d581f03fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:d9:d7:26:9f:e8:74:6d:52:55:69:cd:3a:14:
55:15:8d:19:30:c2:32:23:d3:a5:2f:99:03:5a:53:
ab:4c:ce:f9:74:5c:fb:73:f9:1f:e3:93:85:d6:5d:
fc:d9:40:56:e8:50:a5:cc:ae:e0:7d:2e:c3:3f:e8:
ad:69:19:e4:9f:c3:5b:a8:cc:76:05:a6:a0:d1:a9:
d9:20:e3:6f:e7:8e:fe:c1:95:c5:98:44:e9:be:3f:
8e:67:6f:90:5c:fc:18:73:e2:e0:c4:21:28:03:5c:
17:43:7f:b0:e1:8c:9c:7d:88:f3:42:d6:f6:a6:dc:
01:b0:5f:7d:db:f7:6e:d8:cd:c2:94:c2:a1:b2:6c:
e7:57:d4:95:fc:f5:0f:bf:9d:6d:14:a5:98:96:e8:
fb:f2:fd:31:4c:74:4f:bb:17:c3:69:ec:e1:97:d0:
6b:5a:e4:88:50:a3:a6:67:6e:f7:18:13:3a:33:c7:
32:b8:bd:56:53:fd:44:68:dd:c6:f4:1d:35:eb:af:
dd:15:1a:3e:54:42:52:d2:fb:33:4c:7f:f3:e1:e8:
eb:aa:51:ac:5b:64:51:47:e8:56:ba:68:49:a7:37:
94:1a:dc:e0:e1:c9:66:92:f7:83:e7:5a:48:b5:61:
53:c7:55:be:06:55:eb:29:ed:ea:0e:75:a5:4e:c8:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:BA:D2:7C:44:AE:92:61:CF:1E:D3:D8:4D:E6:D5:81:F0:3F:BC
X509v3 Authority Key Identifier:
keyid:90:F7:92:EA:8F:FF:90:40:B2:CD:7F:17:07:36:E4:2E:74:83:A7:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPeS6o__kECyzX8XBzbkLnSDp2c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8452a8-bafe-4a0f-8c44-cb740db06b29/1/kPeS6o__kECyzX8XBzbkLnSDp2c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c3:7c:72:11:7b:c2:f0:1b:64:89:51:ab:47:5c:ca:97:b1:
bc:8e:71:77:c0:12:b5:1e:95:f6:28:38:1c:65:2c:fc:8c:ea:
13:d5:1d:ad:e2:e7:66:da:0b:16:78:94:3a:75:d6:d6:4a:2c:
36:b3:1e:be:6a:0c:3a:72:9c:6c:21:4b:35:c2:72:2c:cb:0e:
f6:83:f3:78:c0:36:2b:54:ca:07:ce:61:da:f3:a4:88:e2:99:
51:bb:75:59:1d:59:8c:2e:30:46:ef:87:a0:30:75:48:8e:7e:
57:db:b6:dd:21:f3:9d:0e:1a:8a:6b:30:8a:2b:7a:11:db:d7:
42:8b:8b:b7:97:47:9f:a0:d9:71:59:68:73:a1:25:79:3a:7c:
ce:1a:56:57:9e:fd:fd:f2:01:09:df:52:ec:08:35:c3:87:7d:
d0:fc:37:02:70:ff:93:e2:fe:fd:ee:e4:20:61:b2:e2:dc:d2:
5a:07:9c:b2:71:67:68:97:e4:46:76:ee:1f:38:ef:bb:9b:5c:
37:46:22:a6:fb:00:b9:67:f5:45:cb:36:c7:71:ef:3a:c3:e2:
73:6b:45:bd:29:d2:3c:c0:8f:af:17:31:34:e0:35:11:5c:1d:
52:21:31:c7:73:0d:e4:01:2c:47:65:54:d7:b7:7b:d2:62:62:
45:44:c4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:11:26 2025 by rpki-client