Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
File: kzJxEXB2iVD92fne_mUfLVoTEr4.mft (raw, json)
Hash identifier: bIyjFZIr9ORGIcC7GbO0qfdbt1gfBtF+dnjvlNzr0Gs=
Subject key identifier: F9:78:EF:D0:AC:47:12:6E:50:62:12:22:43:EB:80:91:46:0B:4E:43
Authority key identifier: 93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
Certificate issuer: /CN=9332711170768950fdd9f9defe651f2d5a1312be
Certificate serial: 019686C893AD34D90BB8619A9ACCA7AF7CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
Manifest number: 0917
Signing time: Wed 30 Apr 2025 13:00:13 +0000
Manifest this update: Wed 30 Apr 2025 13:00:13 +0000
Manifest next update: Thu 01 May 2025 13:00:13 +0000
Files and hashes: 1: kzJxEXB2iVD92fne_mUfLVoTEr4.crl (hash: DU8lVnsvAcxs31exWHPbVhdctE9+k1UonSnPZV6pnGs=)
2: w9ZFhmeWl9P8oxUCmO0haW1uUVw.roa (hash: 4gJ+U4SX6C0kJ8fPc/SsSrnAYsThJp4UepZuuWBccp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:c8:93:ad:34:d9:0b:b8:61:9a:9a:cc:a7:af:7c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9332711170768950fdd9f9defe651f2d5a1312be
Validity
Not Before: Apr 30 13:00:13 2025 GMT
Not After : May 1 13:00:13 2025 GMT
Subject: CN=f978efd0ac47126e5062122243eb8091460b4e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:11:4f:9e:af:2e:99:3d:16:26:4f:dd:e8:6a:
3e:8f:42:4c:9b:7a:e7:f5:01:cf:a5:0e:20:2a:80:
3d:63:ff:f7:d8:c9:ee:b2:71:b3:17:f8:40:f9:fe:
cb:25:23:32:9f:0f:4b:4b:a0:28:63:0a:35:03:df:
53:ae:7e:b4:cb:8c:fb:5b:97:d4:b6:03:cc:d2:31:
11:3f:8f:cb:06:83:1b:d0:80:1d:98:2f:88:87:57:
58:8c:be:ce:3b:81:f5:03:2d:52:0c:ce:1b:6a:57:
d5:2a:fe:09:bb:16:cb:33:6f:01:ee:91:ad:fc:11:
fe:89:87:80:1c:eb:bf:da:46:38:71:cf:27:4c:8f:
58:78:df:26:9c:b8:92:a9:01:c2:4a:58:28:4d:e8:
92:35:96:96:83:ae:53:ea:8c:f9:81:65:87:d2:a9:
de:df:d7:cd:d4:27:3c:dc:7d:65:dd:02:f0:f8:42:
d4:f3:51:b5:c8:3e:aa:33:c1:92:7e:f1:11:93:9e:
96:a7:b3:e4:3a:c6:88:03:bf:66:b6:cc:b3:99:3c:
b7:96:6e:fe:9f:09:e4:9e:21:cd:d6:d5:ea:55:6b:
e5:33:21:8b:e1:96:21:37:2c:78:7c:87:c4:a9:84:
6c:45:90:de:99:70:2e:a0:7e:d4:51:f9:c5:83:25:
c8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:78:EF:D0:AC:47:12:6E:50:62:12:22:43:EB:80:91:46:0B:4E:43
X509v3 Authority Key Identifier:
keyid:93:32:71:11:70:76:89:50:FD:D9:F9:DE:FE:65:1F:2D:5A:13:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzJxEXB2iVD92fne_mUfLVoTEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/afcd40-2a50-4c11-ba47-e11ffec89cd4/1/kzJxEXB2iVD92fne_mUfLVoTEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:0e:d6:8d:44:ca:3a:77:71:a7:bc:8d:2a:2b:2b:a7:f3:
0e:fb:11:2d:fc:eb:ee:fb:6b:a5:72:ef:f6:38:4f:cb:00:77:
92:aa:b6:4f:f4:c9:18:71:15:7c:42:d2:d9:04:5b:23:b4:04:
50:e7:b7:ba:25:dc:9f:d0:89:48:11:aa:41:1b:bf:ec:cc:4f:
c4:d0:85:19:5a:e5:7c:ca:30:63:6b:46:55:0b:9e:48:83:d4:
ac:be:4c:78:c2:d3:b2:02:40:6e:d7:06:14:a7:50:38:4c:db:
ad:21:43:e2:05:c7:60:5b:fd:c5:b2:64:f8:66:67:39:e4:ad:
e6:8c:bf:c8:2b:77:fd:2c:e0:99:5c:03:29:c2:85:1f:d8:8e:
f0:e4:cd:fd:4e:30:85:4e:be:80:27:dd:d5:e4:2c:7d:60:ff:
10:5d:a1:02:1f:bf:19:db:f6:b4:d3:e9:c2:ae:c5:e0:10:a0:
ac:7c:e1:4b:18:e7:4e:1e:24:9c:5c:b2:fb:f7:2d:ff:f2:c7:
94:f0:c0:99:f7:7b:c7:35:e0:fc:e6:9b:84:34:c8:8f:25:bc:
6f:fc:0e:90:78:11:3b:aa:9f:16:6f:81:ec:c1:d5:93:a2:3e:
2f:0e:92:05:74:67:58:37:a7:fd:42:a5:a7:e2:bb:67:d4:45:
9f:fc:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 17:41:22 2025 by rpki-client