Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
File: 1-KK2BcWOB0aq3Fvw18vDbJMH900.mft (raw, json)
Hash identifier: oFXgAsx6MH9WZbAuhIi0N15mMtFf3lw+KgxtLqVMogw=
Subject key identifier: 2E:0F:3C:4A:84:E6:BE:DA:43:7A:A2:7E:5D:40:D9:BB:1A:5A:C7:E8
Authority key identifier: F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
Certificate issuer: /CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Certificate serial: 01965538A15D4DB06C72338168F8827FD366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
Manifest number: CA
Signing time: Sun 20 Apr 2025 22:01:36 +0000
Manifest this update: Sun 20 Apr 2025 22:01:36 +0000
Manifest next update: Mon 21 Apr 2025 22:01:36 +0000
Files and hashes: 1: 1-KK2BcWOB0aq3Fvw18vDbJMH900.crl (hash: G3mvRvvZB6d1Bx4pbnTGoDNtxWvfgZ9AbpPYOQRyyAM=)
2: KMs7aUSS9LqAFlnC_o5ElLedNIc.roa (hash: /x7zWDBe20WK1XP4EQ8MfhJthk5BD7GGqFW7sL/0M74=)
3: hqdB3dvV_dcCWDsTMYzzBUkq1iQ.roa (hash: PqNxdXFESdm3E0fpRf9aF9eGcWyACVXLt/A8w8L4KSw=)
4: ntHtztrMmkHjlQm-nR0AF_-ZVFE.roa (hash: Bf849e8DMlDt314X2PPaLUOxw5PYejhf50bcsgAnmcU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 22:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:38:a1:5d:4d:b0:6c:72:33:81:68:f8:82:7f:d3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a2b605c58e0746aadc5bf0d7cbc36c9307f74d
Validity
Not Before: Apr 20 22:01:36 2025 GMT
Not After : Apr 21 22:01:36 2025 GMT
Subject: CN=2e0f3c4a84e6beda437aa27e5d40d9bb1a5ac7e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f1:72:59:21:52:4b:01:27:8d:c0:a6:93:3c:
7c:59:03:5a:8f:9c:5e:e7:56:76:7b:b4:09:8c:98:
f4:bd:24:50:7a:76:16:e4:c6:c0:91:96:93:e9:a2:
8b:02:bd:fa:08:07:9e:97:1d:38:6b:6d:08:3d:29:
3b:87:9c:15:5c:0d:3d:b9:7e:92:d8:23:8b:d0:7d:
00:be:a9:b7:8e:10:e7:84:35:d2:6d:a8:ed:04:7e:
cb:27:70:01:f2:cd:10:4d:16:10:32:78:b8:32:ee:
8f:b9:d3:a4:1f:33:6d:12:db:85:b3:5d:65:ef:eb:
4f:c5:d6:9f:2e:41:c8:b2:e5:6c:56:60:e4:eb:18:
8f:8a:ac:90:27:60:8e:51:cc:6e:c4:9a:4d:6c:34:
00:8e:15:9b:95:01:a1:cd:da:f5:cd:b2:14:ac:15:
1a:01:d3:4a:25:56:1c:64:c5:cd:71:14:18:0b:42:
fe:9f:41:3d:9c:f7:1e:af:b9:ad:a6:94:ee:ab:91:
23:fc:53:b5:16:a7:6c:a9:3e:d0:72:c0:25:27:95:
c9:3e:9a:6f:f4:1f:cc:d4:e2:14:d8:eb:e3:35:4f:
53:66:32:bd:0a:62:02:42:af:12:41:a3:18:de:84:
de:d2:c2:85:10:25:d1:fd:d6:16:7c:4b:ff:13:39:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:3C:4A:84:E6:BE:DA:43:7A:A2:7E:5D:40:D9:BB:1A:5A:C7:E8
X509v3 Authority Key Identifier:
keyid:F8:A2:B6:05:C5:8E:07:46:AA:DC:5B:F0:D7:CB:C3:6C:93:07:F7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KK2BcWOB0aq3Fvw18vDbJMH900.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/076d37-4ab4-4ec3-a4b0-524025e13202/1/1-KK2BcWOB0aq3Fvw18vDbJMH900.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:27:38:f6:2a:66:bb:8f:fc:f6:a1:ed:ac:c8:84:cd:c7:3d:
ef:f7:8f:38:b1:01:bb:fb:b6:50:6a:51:60:21:35:03:bb:f9:
89:a2:f6:76:ee:89:83:0a:89:76:ae:79:10:b9:9a:6c:15:3b:
8d:98:ff:7c:b1:74:ee:ad:9d:93:17:24:cc:32:13:7a:71:32:
28:59:86:dd:8f:9d:54:e5:d0:6a:91:84:78:1c:53:8c:e3:16:
d7:bf:be:27:e3:a0:c1:72:0f:78:73:99:dd:42:7c:fa:0a:be:
8a:87:61:ae:da:f6:29:4c:e7:f6:9c:fd:8c:36:b2:93:c5:0d:
2e:34:4a:16:4e:c6:66:1a:33:dd:4d:70:dd:ab:ae:b9:ed:3f:
c5:0c:76:39:ab:36:dd:48:81:3c:4d:d6:2d:b5:1d:b2:17:33:
57:b7:10:dc:0e:ce:c7:72:37:30:4d:d0:2e:22:6b:ad:7b:c9:
22:48:45:59:a1:7b:cb:ca:28:8f:0d:57:9f:5e:f2:60:81:6b:
f8:04:12:8b:75:41:3c:f0:fd:72:9d:7f:9e:25:eb:b4:dd:bd:
93:f3:45:c7:9e:b7:ef:05:2e:4b:a5:9e:70:f7:43:f7:44:b7:
1a:cc:49:2e:3b:22:bc:7a:f3:d7:d1:5c:06:95:aa:11:9c:16:
3e:c1:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 04:03:12 2025 by rpki-client