Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: AFFKxffg53ei3w3MMRnxyTUX5x68JffUCTgF51lhciw=
Subject key identifier: 5B:68:9D:24:F7:83:00:29:39:9E:36:36:BC:8C:61:5F:F4:E0:34:CC
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 01968849E257796703ABBAD5E32277F58FF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 1519
Signing time: Wed 30 Apr 2025 20:01:05 +0000
Manifest this update: Wed 30 Apr 2025 20:01:05 +0000
Manifest next update: Thu 01 May 2025 20:01:05 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: 1xrvBzrFbgQWFfkBLf5XPn6agtfI6eOWrBnKr9E93pM=)
2: ZhfTjFWerubW-wXYF5uHcQImBi0.roa (hash: ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:e2:57:79:67:03:ab:ba:d5:e3:22:77:f5:8f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Apr 30 20:01:05 2025 GMT
Not After : May 1 20:01:05 2025 GMT
Subject: CN=5b689d24f7830029399e3636bc8c615ff4e034cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:1e:28:cc:79:bb:02:51:e2:c6:5d:ce:83:
be:29:44:35:bd:fb:47:51:04:63:3e:97:49:cd:d4:
8a:83:90:59:f9:3f:38:a3:90:37:47:a4:c2:8f:7a:
dd:05:f0:ff:21:b5:12:0a:76:07:31:e2:5e:5b:46:
09:0f:75:f2:dc:88:69:d3:45:e0:75:8f:d5:83:54:
bf:b3:36:c5:6e:93:a2:89:60:5d:e0:05:24:f1:fc:
d0:08:29:94:85:37:60:83:b4:c0:13:a9:ed:ed:5f:
6e:96:b6:eb:0f:72:9a:15:ce:1a:73:9e:5f:45:a4:
4d:57:fc:e6:30:b5:b3:dd:7e:4a:de:0a:ce:3a:a0:
86:52:e7:32:70:d3:f3:db:d4:1f:58:bb:a8:d2:24:
e3:f3:ee:c2:15:f5:9f:2d:46:4a:c4:6b:3f:6d:cc:
f5:77:c2:9e:82:9d:00:8e:96:27:4b:a4:1c:28:ee:
2a:4a:9c:4b:64:a4:b1:e6:8c:32:e1:b3:ec:4c:89:
33:77:42:c9:45:1d:d6:48:33:43:26:95:4a:39:b9:
f5:05:54:1a:c3:ef:bd:7c:f6:9e:6e:f8:fc:22:13:
39:d2:48:00:af:b1:e3:e8:60:41:9b:ad:9c:d9:4b:
7b:e2:8f:14:6a:ee:dd:be:69:8c:13:5f:f4:90:3f:
0b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:68:9D:24:F7:83:00:29:39:9E:36:36:BC:8C:61:5F:F4:E0:34:CC
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:54:b0:cf:08:bb:5f:fc:f0:9d:e3:a4:8f:d5:68:90:7e:90:
fa:5f:cc:22:86:26:1e:7c:0a:df:db:90:1c:f2:0c:28:df:ae:
0b:c0:b1:6d:27:bb:7e:b6:97:d3:84:82:ce:c1:b2:f8:22:1b:
9a:e4:16:4d:11:3f:eb:eb:1a:6d:fd:e5:94:84:38:1a:7c:ec:
84:be:75:7f:05:3a:2f:67:dc:3f:6c:03:c6:9c:f1:07:c2:24:
5d:41:fd:bd:6c:bd:6f:1d:22:5c:c9:14:86:c7:7d:cf:1b:a7:
30:7e:ce:49:03:74:59:b2:87:d1:48:80:92:59:a8:0b:e9:9c:
d8:1d:09:da:5b:69:63:3c:7c:c9:44:6c:54:c3:fa:fb:78:10:
68:df:8a:78:f8:d2:3b:a0:81:90:10:66:72:5c:e6:05:da:8f:
e8:f6:1d:b9:f0:8c:12:e3:35:f0:8c:b1:b1:c0:60:43:4d:62:
98:3f:3c:7e:f7:57:cd:44:6e:ca:cb:fd:2f:cf:a8:c8:58:3b:
2a:80:e9:de:c6:33:5f:50:d9:f2:bc:d0:58:a5:f4:58:86:65:
62:06:7f:b9:8d:5d:2c:0a:97:70:05:fc:7b:cf:49:3d:d2:7e:
0a:3c:fc:15:0d:ab:e3:07:83:0e:5d:54:f1:b7:6b:a3:90:a5:
49:0a:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 00:13:15 2025 by rpki-client