Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
File: ksVw_KpohEpfp53iyi57wb7JEZE.mft (raw, json)
Hash identifier: w/429MECrDSbZtvVw0nxqEnWacP54oG6Ku6M3Gq3t00=
Subject key identifier: 86:4B:F6:94:8D:AB:23:06:39:12:BD:D4:1F:6F:31:2C:BF:BD:20:12
Authority key identifier: 92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
Certificate issuer: /CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Certificate serial: 019679E9B649CDD2D53307CDD16591E554B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
Manifest number: 04CE
Signing time: Mon 28 Apr 2025 01:01:21 +0000
Manifest this update: Mon 28 Apr 2025 01:01:21 +0000
Manifest next update: Tue 29 Apr 2025 01:01:21 +0000
Files and hashes: 1: fIvnp6gdPn80_yvJlotdGcog18A.roa (hash: 1W78f6oopiNGfLBKpZ4dFa8NkFSnHtLBkN2gej0x8BM=)
2: ksVw_KpohEpfp53iyi57wb7JEZE.crl (hash: js+uZGCPLnX4697o8JY1MjzwXfNynbQckOZqUTbCMuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:b6:49:cd:d2:d5:33:07:cd:d1:65:91:e5:54:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c570fcaa68844a5fa79de2ca2e7bc1bec91191
Validity
Not Before: Apr 28 01:01:21 2025 GMT
Not After : Apr 29 01:01:21 2025 GMT
Subject: CN=864bf6948dab23063912bdd41f6f312cbfbd2012
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:65:fb:f4:a7:56:7e:10:ed:c5:8c:07:33:
fd:9b:71:87:85:bd:d4:98:98:92:29:af:17:03:ca:
59:37:69:77:98:5b:38:14:de:f6:56:00:c0:ad:fa:
ed:d6:f8:62:27:8a:82:64:49:44:8a:a7:31:55:aa:
cc:c5:4f:5a:47:69:25:b9:57:88:8f:09:6f:55:f0:
40:c4:29:a9:15:64:bf:e0:56:d5:b9:e9:ef:5a:be:
3e:4c:4b:ae:31:71:a0:6a:42:26:08:0e:1c:47:c4:
a6:a8:59:97:c6:3f:31:1f:c6:fe:1b:b0:83:59:42:
39:cc:e0:a5:a7:33:43:4f:f1:8e:ab:b6:e1:33:0f:
3e:86:c9:70:00:03:56:4a:03:4f:81:8c:62:d3:ee:
2f:13:01:12:03:a1:d6:12:4f:87:00:51:6b:71:16:
24:5a:4e:3d:68:a8:d9:04:f6:b1:a0:f3:d0:53:ac:
cb:47:3c:64:fe:8f:8c:6a:14:c5:17:38:45:80:ff:
54:7d:5e:41:9d:35:e7:26:7b:bb:eb:d9:58:2a:f9:
c1:c6:ab:95:95:fb:43:1d:42:81:1a:57:4e:0d:2d:
4c:2e:75:5e:6d:80:03:1e:c7:2c:fc:15:ce:02:ab:
d4:e2:c5:f2:92:ee:07:7e:cf:21:6f:fb:43:15:fb:
c2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4B:F6:94:8D:AB:23:06:39:12:BD:D4:1F:6F:31:2C:BF:BD:20:12
X509v3 Authority Key Identifier:
keyid:92:C5:70:FC:AA:68:84:4A:5F:A7:9D:E2:CA:2E:7B:C1:BE:C9:11:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksVw_KpohEpfp53iyi57wb7JEZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f427cc-3267-4581-bf8b-a3052f56f3c7/1/ksVw_KpohEpfp53iyi57wb7JEZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1b:be:c8:ba:41:a6:71:21:2d:2a:f6:71:e7:62:8d:ac:f2:
55:1f:72:a6:6f:21:88:d9:f8:73:67:36:23:0f:aa:8c:19:92:
02:f1:97:46:67:e9:72:0e:fc:ab:37:7e:8a:71:e9:2a:26:e8:
cd:6c:fa:d3:0f:a0:7e:22:3a:7e:5f:64:d1:b0:35:16:b7:32:
d2:38:a1:7f:c2:fa:61:1d:55:df:43:a7:6f:11:67:d3:58:e3:
0b:2e:2d:0b:53:28:5c:4b:fa:6b:46:de:9b:ee:5c:5e:13:28:
d0:59:1b:8e:94:b7:db:66:1d:45:30:c1:d3:fc:49:01:85:93:
d4:2d:c7:7e:3d:e6:fb:21:34:68:5e:1e:8c:ae:4d:c7:a1:43:
b2:45:ff:d5:b0:1a:34:05:18:11:6b:d0:91:18:c0:58:c2:4c:
69:e4:52:35:42:69:df:83:3d:71:36:1f:98:0a:04:ea:63:d8:
f0:b2:77:5c:12:27:42:f8:e8:92:9a:29:6f:22:89:b0:76:ca:
f9:52:f8:7a:cd:57:4a:d1:8f:8b:ab:36:27:0d:ed:5f:ac:d2:
d1:6f:f5:38:1c:70:71:3b:aa:1c:58:ad:cc:c4:45:6e:d9:f4:
cc:65:ac:0f:96:34:b2:9b:8c:e8:6f:0a:7f:dc:42:bb:c4:4c:
59:63:f6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 04:21:58 2025 by rpki-client