Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
File: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft (raw, json)
Hash identifier: v9OzEXO23iKj1ZdWvcmsqTG7elMjMT+Veo6tpgjXSMA=
Subject key identifier: 9C:77:2E:F8:0C:B5:19:D2:D1:A8:B1:DE:9C:58:28:1E:35:6A:64:64
Authority key identifier: 92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
Certificate issuer: /CN=9246785f469be8aa7151e3333e47465d478fd0e7
Certificate serial: 0196767A574835959F69D5D541AC33CF22B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 09:00:51 +0000
Manifest this update: Sun 27 Apr 2025 09:00:51 +0000
Manifest next update: Mon 28 Apr 2025 09:00:51 +0000
Files and hashes: 1: du_2ZQg8yAJTgrrcsRgGTQ2XG_8.roa (hash: N5/CsUBVJG9ccVWuK1sk9cFhzshfMejmNQXFk3ysFrU=)
2: h0KwGsV7Y4PS9-ubvbwvPxeINTw.roa (hash: QnImr5OAriGOLs8DShZajEz7o3J5PVeEaUrLJ83dAtA=)
3: kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl (hash: EIMqOdZAP65mWEo7Ej4h8uieHfY7C8wFj7jcoZAgb4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:57:48:35:95:9f:69:d5:d5:41:ac:33:cf:22:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9246785f469be8aa7151e3333e47465d478fd0e7
Validity
Not Before: Apr 27 09:00:51 2025 GMT
Not After : Apr 28 09:00:51 2025 GMT
Subject: CN=9c772ef80cb519d2d1a8b1de9c58281e356a6464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:dc:83:41:ce:b4:7d:8a:5f:dd:65:93:c3:
31:7e:01:f8:ae:c9:8d:2b:fb:6b:94:2a:c4:41:90:
94:5a:36:a5:5a:27:db:e1:73:81:9e:4b:f8:f8:05:
a2:25:f3:c4:c9:b2:70:2a:24:b1:d5:4f:92:38:dd:
35:67:2a:ff:ee:9f:72:6a:92:49:a7:28:e7:48:0f:
95:28:97:79:61:56:ac:56:bd:81:7a:6a:dd:ef:af:
a2:87:c2:dd:bc:85:4e:1c:8c:88:07:8e:76:14:f5:
97:19:12:68:85:f8:ed:79:e5:7c:4b:34:31:01:de:
e4:59:f3:fd:31:78:e6:e7:1f:0f:01:e2:32:d4:b0:
1a:c5:04:74:6e:24:7c:9d:4f:eb:68:ae:fd:37:6d:
20:a0:05:7f:0b:eb:16:05:01:b4:28:f2:9d:a2:75:
b6:68:97:3b:62:13:5d:12:ac:53:a2:6b:47:9a:e9:
40:ba:11:85:92:54:59:26:3e:53:2a:83:0f:7a:4d:
6e:5a:2b:4c:f6:2a:72:44:ae:eb:c0:a5:10:72:fb:
f0:b3:4d:38:d3:56:4a:1d:43:3a:40:8c:a1:18:09:
ff:e8:02:c8:54:12:66:f5:81:3b:37:57:6c:bc:3d:
57:d2:23:37:4c:37:ea:35:17:1d:9d:f4:4c:ee:03:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:77:2E:F8:0C:B5:19:D2:D1:A8:B1:DE:9C:58:28:1E:35:6A:64:64
X509v3 Authority Key Identifier:
keyid:92:46:78:5F:46:9B:E8:AA:71:51:E3:33:3E:47:46:5D:47:8F:D0:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/4e0580-8b2f-49a7-abd8-5c38c7475aa9/1/kkZ4X0ab6KpxUeMzPkdGXUeP0Oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:be:e7:1f:c0:45:94:2b:b8:d8:2b:08:94:7d:d0:1e:1a:cd:
97:da:9a:ec:50:c6:d5:3d:a9:09:a0:51:71:f1:d1:36:82:af:
2d:ce:c7:31:7a:70:4e:8d:97:0d:7a:92:a4:f0:f7:9b:c2:fd:
99:75:ee:27:da:a2:8a:9a:46:d9:e4:16:a2:61:64:b9:e7:20:
c4:16:80:9e:c5:03:da:d7:48:0f:5c:32:71:6a:2c:45:e7:de:
d7:18:a2:44:6a:2c:d9:60:39:c4:3c:27:e2:d2:ae:01:16:3a:
f5:43:9e:b6:fe:18:e7:b0:b1:c4:d5:75:d3:ff:4d:94:2b:0a:
df:b0:61:67:3b:98:5e:e5:ac:4f:6a:f2:41:3d:5c:74:5d:cf:
25:c6:01:cc:e7:66:5b:7c:a8:3e:ce:54:cf:4b:8e:78:1d:c5:
58:79:5b:e5:c4:19:90:4e:20:5e:44:af:21:42:50:16:6d:ec:
3d:b6:ac:29:0a:94:69:34:c8:d3:2c:ab:bd:1f:4d:8d:49:20:
af:4c:29:0b:cc:30:8a:77:7f:1e:60:1c:27:de:9a:f7:d3:14:
85:93:31:0d:e6:27:c4:ef:c5:c5:b4:2f:bd:ba:61:a4:b3:3a:
47:a2:7c:b2:1e:1a:0c:83:0a:08:dc:4a:d3:f9:18:7b:8b:69:
42:07:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:09:44 2025 by rpki-client