Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
File: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft (raw, json)
Hash identifier: l2gSvhVKhjV3hXFxG7XICWn4+j71GpvA9KAylK+F4eY=
Subject key identifier: 90:38:67:F1:55:A0:9E:1A:E1:F8:E0:74:58:49:71:E1:8D:ED:69:63
Authority key identifier: 92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
Certificate issuer: /CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Certificate serial: 019673AFFD8C69EA47B79C31327E33D2D2AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
Manifest number: 13E6
Signing time: Sat 26 Apr 2025 20:00:35 +0000
Manifest this update: Sat 26 Apr 2025 20:00:35 +0000
Manifest next update: Sun 27 Apr 2025 20:00:35 +0000
Files and hashes: 1: YV0LpnxtBTAq4lz06bEpbCvyfLw.roa (hash: 9MkObNOUwLuOccH80DPJr9LOnHYQQUzirjuDL+0jWhk=)
2: kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl (hash: WpvKrKNV0FshhUVLmDC51wbXVhG73jJ+XAJZfUQXW3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:fd:8c:69:ea:47:b7:9c:31:32:7e:33:d2:d2:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d8b76b21647696c9f4d6382b525d83a0580f4a
Validity
Not Before: Apr 26 20:00:35 2025 GMT
Not After : Apr 27 20:00:35 2025 GMT
Subject: CN=903867f155a09e1ae1f8e074584971e18ded6963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:8a:2d:6c:0b:39:ce:e4:f1:a1:ef:a7:4b:
6a:5f:79:f8:e0:7d:23:3d:d7:e7:0e:ba:56:01:c8:
86:b4:5e:70:06:fe:ec:57:a6:e5:9e:75:89:c7:70:
be:4a:70:e8:02:25:fe:87:05:b3:8f:07:a7:50:bc:
32:59:2f:08:8c:c8:38:40:71:0c:50:67:57:37:8c:
40:c9:e5:75:52:95:d7:6a:2b:bf:a9:7e:9e:0b:d4:
6f:08:ca:ff:8e:4b:88:e0:63:08:1d:3b:c9:51:e6:
66:f7:87:8d:bd:f8:d0:a7:3b:5e:ba:e9:4c:e4:7a:
a0:9a:1b:62:5d:87:ac:6e:3f:82:a9:1a:8a:a5:09:
4f:22:61:f0:03:df:db:36:11:da:3a:4a:35:98:19:
f0:66:fd:08:ef:83:80:32:98:9a:fb:73:01:9b:04:
c6:76:31:29:0c:19:a1:3c:be:39:5c:34:6e:c0:39:
9d:62:7f:42:c1:ca:6a:38:42:81:f6:4a:a2:c2:21:
2e:31:06:9e:00:ef:e4:2f:73:cb:b1:89:f6:e6:dc:
c7:8a:db:e6:e9:ff:8e:fc:15:3f:e3:74:f6:67:83:
23:17:1e:27:19:0e:fd:c1:a1:1a:6d:0f:c2:cc:73:
e0:5e:8a:86:65:db:de:7e:28:31:a3:db:c9:3d:e7:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:38:67:F1:55:A0:9E:1A:E1:F8:E0:74:58:49:71:E1:8D:ED:69:63
X509v3 Authority Key Identifier:
keyid:92:D8:B7:6B:21:64:76:96:C9:F4:D6:38:2B:52:5D:83:A0:58:0F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/6f1f2d-99bb-44e0-adc5-8dfd5b152f79/1/kti3ayFkdpbJ9NY4K1Jdg6BYD0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:3e:3a:d8:7e:a1:7a:09:a9:f4:a8:c6:a6:af:c6:4a:c0:62:
56:90:8a:0d:10:75:f5:95:9a:31:61:02:f8:8d:7d:c9:fd:e9:
1b:a1:78:f7:10:ac:6b:33:75:a7:25:a5:90:8e:f9:5b:74:b3:
ac:14:71:d9:b3:8b:2c:c2:64:f2:fc:39:bb:2d:a5:77:2e:40:
f7:c0:33:1a:c9:93:8f:d3:97:15:e9:63:83:73:bb:89:03:2b:
35:8c:21:a9:13:02:06:e1:c3:50:0d:47:c8:54:4d:fb:c7:2c:
a1:9c:6b:b7:60:12:23:5a:25:d8:cb:7e:33:5b:af:c0:43:5e:
52:d3:b4:16:6e:8f:95:c2:25:f0:00:72:94:e6:ad:c9:d4:c1:
e6:0f:29:45:7e:c3:a8:13:d8:24:c4:5a:b5:f3:2e:ff:59:4b:
68:37:44:97:86:80:44:e5:01:09:c5:d7:f7:66:5e:c6:af:a6:
ad:d7:41:87:84:67:ec:f6:6a:f3:52:35:59:63:9d:ea:41:cd:
77:96:fd:e5:dd:6b:d8:fd:e2:aa:5b:9b:3c:b5:ba:8a:8c:6d:
d3:f5:45:2e:ba:dd:33:2c:65:d1:bc:77:d7:79:3e:74:66:7a:
0b:28:c7:1e:8f:c2:8c:0a:0a:8a:d7:cc:7f:62:17:4b:38:ea:
61:fc:3b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:09:13 2025 by rpki-client