Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
File: kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft (raw, json)
Hash identifier: Rl3LQvZZ5A+J1E2wIFeCohgYTWJxuH+uQxGZrnrw8f0=
Subject key identifier: 04:87:D5:AE:9C:62:58:86:7A:B9:DE:7F:E6:10:71:10:FF:04:91:07
Authority key identifier: 90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
Certificate issuer: /CN=90afdcff7de3a65947631f92c67e272767194478
Certificate serial: 019674F99831B318EC0A7C99CDC139F8937F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 02:00:36 +0000
Manifest this update: Sun 27 Apr 2025 02:00:36 +0000
Manifest next update: Mon 28 Apr 2025 02:00:36 +0000
Files and hashes: 1: ejRJ31S7gTZphcMPp--rX-fthA4.roa (hash: K6orC9qH9AXgz/q6yHBYuSENvrxco32U8VdUBQRxDgA=)
2: kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl (hash: geOKU5/jHeRhnYfvGiBmcIzxnDGZj9RTnRewfLD/D0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:98:31:b3:18:ec:0a:7c:99:cd:c1:39:f8:93:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90afdcff7de3a65947631f92c67e272767194478
Validity
Not Before: Apr 27 02:00:36 2025 GMT
Not After : Apr 28 02:00:36 2025 GMT
Subject: CN=0487d5ae9c6258867ab9de7fe6107110ff049107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:25:0a:6e:7f:cc:87:62:0d:3a:0e:8c:4f:a4:
60:7a:df:dd:e5:2f:13:48:8f:38:9a:9f:9b:97:4b:
60:cf:15:c3:f3:60:ce:d5:a9:6c:f3:ce:8c:e4:04:
f7:24:13:49:b0:9a:47:69:b8:a7:b5:bb:f4:2a:56:
01:8a:6c:29:b4:af:41:b4:60:fd:c2:31:8f:e0:d4:
75:42:d2:92:24:09:f1:d0:9a:4a:57:73:71:98:d2:
52:88:e4:74:a0:d3:cb:3b:3f:fa:5a:fe:da:37:5b:
5d:0c:b0:43:ab:63:34:fb:66:91:68:9d:38:e9:fa:
d9:29:a3:01:0e:d4:3c:df:23:02:d2:e4:46:fb:e5:
3b:8e:33:3f:5a:d8:88:7a:0a:48:d4:c9:50:68:ac:
d5:5f:f5:13:da:d0:be:6c:7d:d2:3d:10:a3:ab:b1:
25:5b:bd:1a:ca:67:93:69:9a:1f:04:0d:e5:5c:07:
87:f4:a2:29:4d:25:fd:6a:1a:5c:7e:61:39:2e:03:
41:12:2b:96:db:67:fc:fe:89:d8:03:89:76:57:03:
f9:5e:cd:47:99:3a:85:52:42:21:c0:75:6f:e9:fa:
e3:fc:04:c1:5e:9e:ec:76:ce:9a:14:63:e2:45:32:
40:c3:0d:fa:65:26:8c:f3:f9:75:c8:ae:02:65:1a:
44:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:87:D5:AE:9C:62:58:86:7A:B9:DE:7F:E6:10:71:10:FF:04:91:07
X509v3 Authority Key Identifier:
keyid:90:AF:DC:FF:7D:E3:A6:59:47:63:1F:92:C6:7E:27:27:67:19:44:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK_c_33jpllHYx-Sxn4nJ2cZRHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/e00d1e-4a18-4956-82a4-190a5c8d9d95/1/kK_c_33jpllHYx-Sxn4nJ2cZRHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ef:80:6a:db:57:d9:1b:ba:13:f8:28:c2:43:01:4b:69:f4:
89:e3:0e:1d:a2:97:7b:a8:c3:e6:0b:c2:3d:39:23:71:77:0f:
53:cf:44:41:89:66:e7:74:4f:9d:e8:62:c8:ce:0a:7e:71:9c:
73:46:39:75:d1:a5:27:62:43:8a:27:39:5e:0f:88:2d:cb:c2:
6c:44:e0:6e:58:b4:b4:25:10:fe:50:6c:50:f1:0e:a4:77:47:
9b:73:5b:66:f6:48:70:5e:cd:d0:b0:6e:20:20:5c:4a:02:b2:
6a:71:12:9c:66:e3:7b:6d:ab:09:93:ac:3d:ef:cf:de:0b:f1:
be:d3:69:05:72:8f:0e:51:1e:93:b3:af:25:1c:40:5c:19:57:
b3:3a:c9:5d:fa:40:48:c9:67:4e:23:5e:46:71:ff:31:5a:92:
3c:fa:db:96:28:f1:bf:d3:79:5d:92:c6:df:9a:1c:2f:51:3b:
06:10:2c:4c:d9:33:2c:61:8a:f8:17:15:51:b2:b9:18:f6:6a:
36:9b:51:0b:87:03:21:80:06:5f:17:7e:4c:97:93:f7:8b:83:
92:49:fc:de:f8:ff:e3:77:82:58:4d:ef:4d:d9:0d:9f:71:15:
f1:87:26:d9:ed:c4:4b:60:f9:56:be:09:f5:22:c3:1a:87:19:
e9:fc:14:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:34:05 2025 by rpki-client