Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
File: kP2KrhtuFZovqPA9ejGIoeGAcqA.mft (raw, json)
Hash identifier: pNt3kHcbR3VHcThCDiXVPaot1WV7wrRlUhcc138/W+0=
Subject key identifier: AD:F4:5C:CB:12:FF:E7:BE:75:52:F4:20:5B:13:D9:96:0C:8D:19:B9
Authority key identifier: 90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
Certificate issuer: /CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Certificate serial: 01967DC607D16F28B222602B4FE1B4CB3055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
Manifest number: 1180
Signing time: Mon 28 Apr 2025 19:00:51 +0000
Manifest this update: Mon 28 Apr 2025 19:00:51 +0000
Manifest next update: Tue 29 Apr 2025 19:00:51 +0000
Files and hashes: 1: M-Lz3FCjDhBtf8lJAjoTZlL7SGA.roa (hash: zkL8K0BACxY6H8HDpNVgGyq7SYLZMemlKE7UDQfTAuo=)
2: kP2KrhtuFZovqPA9ejGIoeGAcqA.crl (hash: r+Se8cvdbSQkQLCLtfF9jXLEYwapFh9pDgItdAXQGr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:07:d1:6f:28:b2:22:60:2b:4f:e1:b4:cb:30:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90fd8aae1b6e159a2fa8f03d7a3188a1e18072a0
Validity
Not Before: Apr 28 19:00:51 2025 GMT
Not After : Apr 29 19:00:51 2025 GMT
Subject: CN=adf45ccb12ffe7be7552f4205b13d9960c8d19b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:49:83:3a:3a:16:5b:ad:b8:cc:c3:88:36:40:
2e:b1:fa:ee:12:9a:a9:db:14:9e:8c:32:08:81:bf:
9d:2e:46:c1:40:f2:7c:38:94:90:28:64:62:b1:fc:
0e:bd:53:70:3a:a4:ba:4b:e4:67:0d:fa:58:88:cf:
1b:f1:c7:f4:d8:2b:74:be:0e:1b:94:28:a7:56:52:
d3:bf:a1:05:9c:75:a9:e5:cb:45:1e:9a:56:a3:25:
6d:55:d1:c8:c7:4b:df:83:0b:d3:3f:f2:3c:4a:99:
37:86:21:d2:36:b9:00:08:11:fe:d4:dd:03:72:5c:
93:6c:b1:c9:6f:c6:37:bf:d2:43:6a:fe:60:55:d9:
05:bb:ed:cd:b5:a0:af:c1:f7:6e:08:e9:4a:a8:51:
bc:fc:da:18:fa:a6:a6:56:aa:18:a8:43:74:b8:a0:
2b:60:74:70:ad:52:5f:f0:5d:e5:20:71:1e:88:5a:
53:55:33:ea:4c:f4:09:f7:4c:df:b7:8e:68:61:19:
22:f7:bb:70:5f:c5:c5:de:3f:be:6d:36:9a:12:1f:
75:c8:bd:5d:8d:b8:71:ff:a7:14:56:2a:5a:21:03:
53:1e:5a:b2:32:88:77:8c:8c:5b:d0:5b:64:34:d6:
07:73:01:d2:8e:81:e8:d0:1d:f5:21:2c:41:23:79:
d8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F4:5C:CB:12:FF:E7:BE:75:52:F4:20:5B:13:D9:96:0C:8D:19:B9
X509v3 Authority Key Identifier:
keyid:90:FD:8A:AE:1B:6E:15:9A:2F:A8:F0:3D:7A:31:88:A1:E1:80:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kP2KrhtuFZovqPA9ejGIoeGAcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/5dfc76-e7eb-4d35-8ad7-7993591113e4/1/kP2KrhtuFZovqPA9ejGIoeGAcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c5:ad:e8:57:2d:b1:ad:aa:de:58:94:bd:3e:49:4b:9e:8b:
81:b5:41:c6:2a:a0:97:b6:26:87:a9:e6:f6:cf:22:01:00:78:
55:00:18:03:e8:d3:65:95:e7:02:6d:19:98:cf:2b:b3:ad:3d:
7c:c7:7c:49:76:55:2b:b7:64:86:ca:76:70:27:c6:59:26:1b:
84:88:ac:0f:1f:49:72:7d:59:cf:b9:d1:8d:d3:d1:5f:c0:1c:
cd:d2:71:4e:87:87:78:2a:3b:55:c8:66:f2:d1:de:14:6c:95:
c3:0d:ce:56:31:94:72:73:4b:6b:4b:eb:f9:e4:e7:cf:a4:c7:
61:d1:f8:b4:c2:f6:05:cd:e5:5e:fa:aa:82:08:df:76:2e:9f:
67:9d:b1:ee:48:87:86:7d:a3:ef:2a:ea:94:45:eb:01:93:86:
92:8b:67:de:c5:dc:b8:72:51:fc:bb:83:95:bd:1b:6a:57:e6:
a8:fb:72:a9:1f:4b:3b:bf:04:02:47:b9:a2:54:d5:55:d5:10:
c4:a9:e3:87:d3:55:36:9d:e3:c1:f3:61:46:1f:91:38:20:39:
78:b3:57:82:1c:7d:4c:53:94:d9:ff:a0:ae:d4:a2:a9:99:f1:
19:4c:14:ee:82:b7:1d:db:71:ce:4f:37:a9:f2:a2:64:99:c4:
ba:7e:11:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:24:04 2025 by rpki-client