Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
File: kkecrihHZdYoBEEZAJiA0op1YLE.mft (raw, json)
Hash identifier: n997R0zMKIZb9no/cLWTLQdWidyhGq+ahk4T4+8I9VE=
Subject key identifier: C9:FF:2B:22:3A:D3:F3:B5:2F:D6:07:AA:BB:DC:C0:AF:83:1D:74:37
Authority key identifier: 92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
Certificate issuer: /CN=92479cae284765d628044119009880d28a7560b1
Certificate serial: 019680222D22DAE7A149637CBFEE7EAE158F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
Manifest number: 1513
Signing time: Tue 29 Apr 2025 06:00:45 +0000
Manifest this update: Tue 29 Apr 2025 06:00:45 +0000
Manifest next update: Wed 30 Apr 2025 06:00:45 +0000
Files and hashes: 1: kkecrihHZdYoBEEZAJiA0op1YLE.crl (hash: 5PhBxenHuvlPUvcNu4O1Z7wI2TPVdbouzEstorJuWqQ=)
2: x9d_ZYOPUgUTIG_dU1aWLhzD7L0.roa (hash: Eoi/Kjhf2x+MudONjVV9qJBRoFTzvMFaOuh/XyvvI1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:22:2d:22:da:e7:a1:49:63:7c:bf:ee:7e:ae:15:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92479cae284765d628044119009880d28a7560b1
Validity
Not Before: Apr 29 06:00:45 2025 GMT
Not After : Apr 30 06:00:45 2025 GMT
Subject: CN=c9ff2b223ad3f3b52fd607aabbdcc0af831d7437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:67:78:e0:ff:3c:c9:70:a6:f7:89:7f:4d:cc:
00:75:ce:a1:a0:0e:14:3b:c6:de:3a:27:77:e8:86:
03:4a:64:29:1e:3e:7d:ae:a8:bc:cf:a7:9e:d7:92:
14:35:64:c6:e9:93:33:11:78:8a:55:d8:c7:04:09:
f6:d4:93:5a:8d:6d:52:cd:54:57:36:c0:ad:df:95:
36:33:5f:b1:08:14:21:c7:bf:62:a8:9f:e7:e7:30:
16:53:9a:05:d9:b7:fd:7f:23:da:a5:6a:8f:77:49:
2f:e9:f8:4a:58:79:dd:f8:61:8f:55:e5:63:8c:18:
52:b1:3a:ea:b7:37:95:b0:b8:64:11:a3:2a:f1:e5:
00:53:a4:cb:17:b4:f7:45:e8:c5:a9:42:9c:76:9d:
60:fd:c6:cb:dc:c8:70:c3:cc:f5:b9:4f:f7:30:33:
eb:af:46:ee:d1:24:a3:7d:0a:3d:6c:7e:db:3f:92:
5e:a2:9b:dc:28:d7:b3:05:c1:ba:f6:d3:1b:42:6e:
52:b8:8b:6e:93:70:dd:c3:22:8c:7c:f0:39:80:66:
04:db:9c:fa:d6:17:7b:89:1c:88:ec:62:1e:61:bf:
26:cf:54:14:79:8c:6b:f5:0f:86:27:aa:ef:56:4c:
a8:90:42:4e:26:7e:12:d5:0f:3c:f1:ba:af:df:8a:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:FF:2B:22:3A:D3:F3:B5:2F:D6:07:AA:BB:DC:C0:AF:83:1D:74:37
X509v3 Authority Key Identifier:
keyid:92:47:9C:AE:28:47:65:D6:28:04:41:19:00:98:80:D2:8A:75:60:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkecrihHZdYoBEEZAJiA0op1YLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/058220-596e-480a-a058-0246868aa0ed/1/kkecrihHZdYoBEEZAJiA0op1YLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:57:c8:11:40:58:96:86:f8:9a:23:99:d8:77:02:88:18:17:
e1:5a:ca:51:1b:27:25:08:4d:50:3e:51:71:bb:63:80:14:6b:
3e:86:4d:38:39:1d:bf:3a:7c:83:4b:43:1a:62:91:be:2b:c4:
5a:fa:6b:fc:10:7f:d3:c4:f0:ba:06:38:5f:67:1d:80:00:11:
b9:b4:99:21:20:a8:f1:1c:ae:96:8b:d7:be:54:15:9a:87:91:
a0:3e:08:41:06:67:92:86:c4:1c:0e:3d:a5:d7:24:35:76:63:
99:59:1e:af:04:bb:f7:2e:6d:29:32:43:56:af:a2:f7:6e:19:
24:6d:6f:c5:de:dc:58:8c:55:cc:a2:37:e3:79:f8:86:d9:e1:
37:48:63:99:e7:42:cf:c0:68:04:4d:93:e4:93:5f:d7:cc:8c:
6c:3e:52:26:63:0e:3f:89:70:02:fb:ca:31:cf:1f:5c:0f:3a:
17:b7:74:6f:ac:78:14:0c:6d:fc:19:c6:16:9d:f8:5c:1c:13:
9b:df:0f:39:cd:00:c2:10:5b:91:6a:71:22:28:41:5f:bc:b6:
ef:f4:3f:38:89:90:09:33:7a:f3:20:98:7d:6f:96:86:61:ff:
52:e6:75:21:a6:3a:2b:ae:3a:d9:44:c4:71:2f:3b:bb:8c:2d:
51:20:0d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:27:20 2025 by rpki-client