Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: 9j3esdtIz806/C6c8z0OfjZ8D73R8Rc3GFOkVw7t0DU=
Subject key identifier: 1B:0F:39:01:81:5B:D8:B1:B5:72:8D:DF:FF:73:6D:CE:12:86:90:E0
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 01967AC466E5A510A423AC687EA541B307D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 1264
Signing time: Mon 28 Apr 2025 05:00:13 +0000
Manifest this update: Mon 28 Apr 2025 05:00:13 +0000
Manifest next update: Tue 29 Apr 2025 05:00:13 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: 53DNcfAQVmm+x3hkCNQC6zImhvddXyWVOvpE1F0SX7U=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:66:e5:a5:10:a4:23:ac:68:7e:a5:41:b3:07:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Apr 28 05:00:13 2025 GMT
Not After : Apr 29 05:00:13 2025 GMT
Subject: CN=1b0f3901815bd8b1b5728ddfff736dce128690e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:88:11:a7:8d:9b:c8:0e:b5:ab:68:7c:31:
4c:b1:27:f6:f9:d6:dd:25:7b:c3:50:f0:d7:0f:c9:
a5:93:1c:1f:03:51:65:40:38:01:f9:f9:ee:bb:3b:
a0:05:58:51:39:f5:7f:bb:d2:53:d8:ad:1f:c8:74:
b1:63:cb:ec:22:fc:7d:fa:a6:bc:c3:3c:84:84:d3:
c5:be:75:3c:b6:de:94:88:18:3d:aa:b2:5e:76:1e:
c3:c9:b9:87:36:e6:53:a4:55:ef:6e:06:38:5a:25:
da:b3:08:51:9c:15:13:c1:96:66:6b:57:5a:4c:aa:
48:fd:c2:cc:d5:45:81:57:5a:a4:99:ca:3d:8d:af:
16:3c:88:21:03:9f:4a:02:14:ed:03:d3:7f:9e:9b:
16:fe:c2:bc:a1:dc:c8:4f:9a:92:09:43:58:f8:d3:
06:a8:8f:0e:6d:28:7a:1d:36:46:1c:a7:9b:19:5c:
09:58:96:b4:72:46:5d:ed:80:64:ff:b8:16:91:aa:
9b:c2:d5:70:f4:9e:b2:2e:aa:87:05:34:45:e8:20:
b4:a6:11:50:fd:bb:8a:f5:5f:eb:42:58:03:83:99:
ca:80:7a:4f:31:c8:67:65:56:65:92:01:00:5c:03:
63:a1:b1:29:c7:54:90:75:c7:eb:81:a4:cc:8b:29:
cc:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:0F:39:01:81:5B:D8:B1:B5:72:8D:DF:FF:73:6D:CE:12:86:90:E0
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:fe:21:fb:f5:22:27:26:77:88:a0:65:e2:c2:f9:15:54:64:
56:7b:3b:a2:94:2e:5c:a0:3a:3e:fb:ae:9d:37:b7:1f:16:b9:
68:aa:6d:55:89:73:8d:07:ac:ce:4e:d7:18:91:a6:43:22:d4:
d8:b3:c1:56:97:7c:3c:fe:9a:07:6d:5b:25:6b:00:19:9c:27:
9f:57:49:b4:03:06:69:7e:6b:bb:65:71:53:d1:b9:49:a5:a1:
99:7f:cf:5e:18:9d:2c:f9:ba:5e:c6:cb:88:db:d9:e5:8a:3b:
72:a5:15:9d:82:89:cf:bb:24:e0:1b:64:6a:d9:a1:d2:82:ee:
22:ae:3a:61:1f:f6:19:76:a5:42:7e:4f:4e:f0:b7:bb:cd:3f:
6b:23:aa:6f:59:6d:62:d0:4f:be:69:cc:f6:b3:0f:10:63:ba:
2a:97:2d:c5:25:9c:a3:8d:60:6c:95:f6:6d:81:d4:da:15:66:
ab:f7:2e:c6:38:4a:7a:24:07:cc:00:c1:c2:fa:ca:06:96:3e:
60:67:bc:e5:2e:bc:21:6f:d3:bc:b4:81:66:75:06:88:ae:26:
88:86:62:02:94:03:14:b4:a6:f0:76:69:85:50:87:f8:ce:9a:
4b:12:9a:ce:26:66:3f:21:73:f9:44:4e:c3:4d:f2:04:3b:9c:
a3:ac:b6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:17:40 2025 by rpki-client