Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
File: kLCsKbEI83Ixb79OqT4UhzGkxOk.mft (raw, json)
Hash identifier: ynp4cgBHWBkFrj/cHLpLKE8vxThnxEBBQ5uhxfdbkO0=
Subject key identifier: 9C:23:1B:6E:DB:0D:88:5E:42:6B:54:4A:3F:3C:DD:0C:35:38:03:E6
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 01965500B719649B8AD0EE5695C60D513180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
Manifest number: 1501
Signing time: Sun 20 Apr 2025 21:00:32 +0000
Manifest this update: Sun 20 Apr 2025 21:00:32 +0000
Manifest next update: Mon 21 Apr 2025 21:00:32 +0000
Files and hashes: 1: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (hash: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=)
2: kLCsKbEI83Ixb79OqT4UhzGkxOk.crl (hash: bGr99Gekl6n6S5gtOY27pUJEO4ejCohp16HioKQy+p0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:b7:19:64:9b:8a:d0:ee:56:95:c6:0d:51:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Apr 20 21:00:32 2025 GMT
Not After : Apr 21 21:00:32 2025 GMT
Subject: CN=9c231b6edb0d885e426b544a3f3cdd0c353803e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ff:5f:85:9e:21:be:53:69:17:10:a3:64:a3:
00:da:0d:69:6b:e9:fa:51:7c:19:77:c3:38:6a:c4:
79:32:66:d2:eb:e6:1b:b0:d2:ba:ab:e6:04:ca:aa:
72:1d:5f:58:f5:ba:07:31:86:b4:13:e4:9f:71:41:
ec:54:6f:0c:ea:64:57:69:a7:72:c1:94:f1:d9:1d:
5b:84:49:e4:11:30:8e:14:ae:ab:35:5c:a1:c1:17:
5a:5b:4f:92:d1:2b:32:e9:e6:e3:f2:6a:fc:f9:b4:
5d:6b:b7:6b:3e:4c:80:38:16:23:3f:2d:f5:5b:ca:
b6:21:bb:96:f9:c5:a8:6b:f8:0b:d3:d5:6b:5f:92:
99:a7:c7:c0:d8:ac:70:5e:8f:ab:37:33:5b:9c:81:
84:3e:9d:c6:f6:0d:ed:5f:ac:90:16:47:51:6d:6d:
3a:74:c9:d4:19:30:a7:dc:45:d0:d1:39:63:c5:62:
72:58:06:4d:18:5a:d2:be:cc:e4:eb:e0:6d:34:f5:
c6:fd:a2:cc:9b:6a:76:e3:23:cc:7c:fc:68:1b:36:
7b:5c:e3:e3:4d:37:7a:0d:49:9b:dc:25:55:7d:7d:
57:be:e6:e7:04:b2:fa:58:6f:42:58:2f:d7:f7:e3:
ff:94:e3:70:d5:22:10:00:d9:a2:68:88:eb:bb:01:
7c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:23:1B:6E:DB:0D:88:5E:42:6B:54:4A:3F:3C:DD:0C:35:38:03:E6
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c1:7c:b8:68:b1:15:06:dc:b1:b2:b1:25:7e:3b:5c:36:35:
72:c9:d0:39:2e:7e:8e:20:26:ef:25:0c:d0:11:73:57:cf:c8:
d4:2b:fb:4a:f0:b5:2f:bd:55:2a:e0:3c:78:c3:cb:bc:58:a1:
9a:ef:41:46:5b:c9:63:17:3a:a7:62:3e:f1:5c:4b:21:f9:d0:
03:59:0f:e4:8f:c0:d5:12:53:de:c8:7d:ee:02:ec:42:43:ef:
76:f1:92:25:3a:0b:71:6a:4f:15:2d:e9:40:78:88:38:e2:d3:
00:cc:dd:c3:7c:08:45:04:dc:7b:19:ca:9d:e8:8d:b8:93:15:
ab:2e:bb:3f:14:82:fb:8a:ec:f0:93:61:d7:90:b3:37:13:63:
e2:ae:4d:8d:2b:6f:a5:59:2c:a6:46:b4:82:00:62:9b:a7:b4:
d6:3d:73:12:1e:b3:59:e9:59:06:e1:f1:09:41:3b:b1:5b:5c:
93:a1:8f:82:40:6b:f5:7c:3c:e6:16:4d:0c:1f:27:ea:01:0e:
86:86:8e:ae:31:f4:e3:15:b7:f2:58:c9:dd:33:70:68:0f:1b:
43:8a:f9:d0:f8:33:3d:23:f4:64:e7:8b:de:ae:9b:1f:92:95:
d0:bc:12:8f:91:18:df:83:88:fe:71:5c:60:87:7e:f5:27:37:
d5:10:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:45:49 2025 by rpki-client