Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
File: rk6MY5rq8TKi_DP85ugUNN_KZLc.mft (raw, json)
Hash identifier: SheUI66gqp1CjLZzRNKiwWwxSpyroWhKLOnBb/w1oCQ=
Subject key identifier: 38:28:D3:CC:D4:70:E9:54:8F:39:DB:04:33:14:9F:21:9D:A8:90:17
Authority key identifier: AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
Certificate issuer: /CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Certificate serial: 0196748BC2F5832413BC136C94FFC4821590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
Manifest number: 0F45
Signing time: Sun 27 Apr 2025 00:00:38 +0000
Manifest this update: Sun 27 Apr 2025 00:00:38 +0000
Manifest next update: Mon 28 Apr 2025 00:00:38 +0000
Files and hashes: 1: rk6MY5rq8TKi_DP85ugUNN_KZLc.crl (hash: XKrJxPifLsoMic24L+fwxcPi6vFasgxXwgL/2/eDjGY=)
2: xqvPkHVlDD3xuumnlHy2tF-Btw8.roa (hash: vv9+/PYhC7QdrwSx3qLUpWjs0FVNrCioO0VXJDLX8UY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:c2:f5:83:24:13:bc:13:6c:94:ff:c4:82:15:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4e8c639aeaf132a2fc33fce6e81434dfca64b7
Validity
Not Before: Apr 27 00:00:38 2025 GMT
Not After : Apr 28 00:00:38 2025 GMT
Subject: CN=3828d3ccd470e9548f39db0433149f219da89017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:5f:72:a6:22:6a:6a:b2:ed:77:53:75:8e:
85:22:3b:f0:0e:36:d8:de:e2:24:61:76:4f:bd:c1:
74:ec:73:7e:83:23:4a:b1:ed:37:31:44:02:75:75:
a3:37:2a:40:a0:96:4c:10:2b:84:49:7e:dc:bb:d3:
99:81:72:82:6f:5a:e7:10:63:60:3e:5d:38:9f:d7:
d0:44:15:ea:be:70:9d:9f:30:b9:1f:ac:78:4c:8c:
67:f1:d2:51:29:ae:6c:24:3a:5e:5c:e0:5e:a4:72:
12:a9:63:6e:a9:2c:64:41:e4:26:33:18:97:35:33:
e9:54:bf:c3:f8:7a:a8:4c:32:0c:64:bf:12:a5:4d:
8a:6d:03:5f:ec:31:b9:7a:29:25:35:ee:55:12:40:
cd:33:b2:a5:20:9a:fc:82:f1:f6:f5:af:96:4d:2c:
5f:89:20:f0:1b:f7:09:ad:2d:a4:1b:d9:91:d6:39:
b1:8a:4b:f8:18:aa:7d:d4:e2:9b:b4:64:de:3d:6c:
10:e8:76:c7:91:61:67:98:f3:42:1a:3a:22:1a:01:
9a:5f:89:71:66:e7:66:f6:b2:60:7c:b5:79:37:19:
8b:2c:9d:21:00:e1:43:bc:a4:6e:42:fa:5f:4d:31:
62:28:2c:9a:24:62:3b:b7:c5:4b:e0:c1:35:3a:b0:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:28:D3:CC:D4:70:E9:54:8F:39:DB:04:33:14:9F:21:9D:A8:90:17
X509v3 Authority Key Identifier:
keyid:AE:4E:8C:63:9A:EA:F1:32:A2:FC:33:FC:E6:E8:14:34:DF:CA:64:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk6MY5rq8TKi_DP85ugUNN_KZLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/91d4e8-fa6e-4505-b57f-c7ce2e4450a7/1/rk6MY5rq8TKi_DP85ugUNN_KZLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:30:76:f8:d9:54:b1:03:c2:dd:bb:0b:35:c1:7b:71:0f:5d:
02:8f:87:1c:10:81:87:31:df:62:f1:53:1c:06:2c:0e:31:75:
eb:8e:cc:41:48:d2:a2:7a:e5:78:63:6a:89:8a:a0:b2:91:fe:
26:17:24:3b:d4:bd:13:f4:df:fa:dc:df:41:a2:c6:da:d9:76:
67:ff:54:17:f5:f4:b9:70:d8:81:fb:56:94:51:ea:cf:46:0b:
ce:74:99:d1:7b:d8:0a:f9:e2:48:79:ba:26:54:20:97:3f:64:
a6:b6:42:79:14:d8:b0:4a:2c:80:24:10:d8:96:db:5c:fe:dd:
91:95:65:58:78:05:32:d1:42:07:29:07:e8:56:8c:c1:95:50:
5b:83:5f:5c:25:f1:20:2c:7c:c6:1f:f1:9d:1c:f9:56:bd:60:
c2:f8:76:44:59:b2:79:2e:a8:cc:24:e2:f7:7f:bd:7f:e9:45:
22:ef:ec:58:4b:18:bf:21:9a:48:b7:18:4c:07:66:93:a8:d4:
b5:73:24:13:93:03:71:f4:a2:d6:df:0c:d5:73:b4:16:a6:09:
5c:02:28:93:f3:36:1d:0b:c6:dd:59:e4:d3:f8:3c:53:a1:d2:
64:bf:b2:b4:68:e6:68:36:dd:8d:4e:0b:71:04:97:9c:93:6a:
3f:15:8c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:35:07 2025 by rpki-client