Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
File: kw4KO7COSsZzY-MLqDsHFjLQqkM.mft (raw, json)
Hash identifier: CTD+kqz+0TeKDdax4Y5NzP3w4p0lOE9ZIR5OCRuIF1o=
Subject key identifier: 98:88:8C:9D:39:72:61:5B:FF:5C:D5:CE:01:58:AB:F5:56:3F:E9:52
Authority key identifier: 93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
Certificate issuer: /CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Certificate serial: 01968F5E042CEDDD8BFD626576328D2BB42E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
Manifest number: 0224
Signing time: Fri 02 May 2025 05:00:25 +0000
Manifest this update: Fri 02 May 2025 05:00:25 +0000
Manifest next update: Sat 03 May 2025 05:00:25 +0000
Files and hashes: 1: kw4KO7COSsZzY-MLqDsHFjLQqkM.crl (hash: 5b8RwcWZ8MNq5qB9qXlTynpwLtRoMOyV2lRuisab7i4=)
2: xaq4DEF6a2KbAw0s5ehiRgdBeuQ.roa (hash: NrVb13nbYMUhAilB4rQP3yYP82eHLTMIedBxEXPs6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:5e:04:2c:ed:dd:8b:fd:62:65:76:32:8d:2b:b4:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930e0a3bb08e4ac67363e30ba83b071632d0aa43
Validity
Not Before: May 2 05:00:25 2025 GMT
Not After : May 3 05:00:25 2025 GMT
Subject: CN=98888c9d3972615bff5cd5ce0158abf5563fe952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f2:73:80:40:5a:8d:b7:83:07:0d:99:c3:41:
8d:63:4c:f8:7c:03:2e:39:3b:b6:16:d1:4d:a4:08:
4d:7d:56:12:3c:0f:82:cf:60:37:d0:a0:63:61:1b:
f3:80:22:1e:38:60:a0:1e:64:23:69:42:3a:ca:22:
ed:f0:a7:cd:fe:01:9f:b9:01:4e:39:e8:31:a7:53:
57:7c:3b:43:d5:43:63:5b:69:0f:79:f4:7f:ba:94:
ed:e8:49:92:ce:5a:6c:c8:a5:b1:12:2d:79:a2:f0:
13:e6:3e:06:ea:3a:94:92:76:3e:00:91:03:3a:16:
b1:3c:95:96:d1:39:b0:92:bd:c3:0c:7d:0d:ba:e3:
49:c2:46:2e:dc:ac:c8:2c:78:d8:29:8d:4b:b8:11:
ce:d9:e1:c8:74:ce:e1:66:fd:44:53:ed:6e:6c:e3:
5b:5b:69:87:d0:7a:c2:30:cd:e0:0d:cc:f4:da:2f:
ed:6e:50:e7:94:bd:ed:9d:70:44:02:79:8d:e9:50:
09:bc:ae:e0:83:02:11:2d:96:6d:2e:0b:7b:d9:0e:
c2:c9:10:c6:c2:51:f7:78:bd:ba:e0:a2:d0:73:01:
6a:56:a2:d7:14:a7:4a:a1:82:97:46:d8:72:18:a0:
de:65:09:cd:d3:f3:3c:5f:73:fa:03:e3:b0:cd:13:
67:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:88:8C:9D:39:72:61:5B:FF:5C:D5:CE:01:58:AB:F5:56:3F:E9:52
X509v3 Authority Key Identifier:
keyid:93:0E:0A:3B:B0:8E:4A:C6:73:63:E3:0B:A8:3B:07:16:32:D0:AA:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kw4KO7COSsZzY-MLqDsHFjLQqkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5950c9-97ec-40dc-9b11-0295a1c11feb/1/kw4KO7COSsZzY-MLqDsHFjLQqkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ae:87:5b:90:d9:9c:f6:0b:06:40:c8:79:46:33:c6:8b:bd:
80:31:30:35:70:94:7c:11:da:25:33:01:e1:3b:fe:bc:57:4e:
e0:b2:a6:95:bf:d0:a7:73:c7:59:57:d9:2b:f0:35:2b:be:eb:
c4:f6:7b:4e:73:12:0f:79:69:7e:be:bf:55:95:f6:9b:37:d8:
e8:2c:37:75:86:5e:5b:a4:2d:b9:49:49:2b:40:96:dc:64:52:
9f:06:ef:43:10:9d:e8:35:06:1f:07:ca:6f:80:8e:8c:6f:4e:
98:7d:5d:fa:c2:8c:98:e0:78:48:41:60:bb:4f:bb:9e:b9:9c:
c1:01:14:f4:e6:f9:c3:b9:0c:a9:df:e1:e8:b2:59:0c:fb:94:
b2:67:17:2a:81:8d:74:13:6e:70:92:05:52:f6:ae:82:b7:1a:
ad:53:b4:0c:2c:c0:db:13:99:79:4c:d4:80:5a:5f:0d:17:ac:
5a:00:c9:58:8c:a0:1f:b2:69:c7:84:b2:38:0f:64:b7:d7:76:
e6:3e:1d:3c:a2:b0:1e:14:d4:8d:75:49:53:6b:1a:18:89:0b:
2e:00:b8:1b:7b:27:ec:30:a2:bd:8b:d4:85:f5:49:29:a9:43:
98:6f:41:41:0f:e1:68:c9:d0:c8:db:fe:90:db:e8:4a:e5:5b:
1b:6b:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:06:10 2025 by rpki-client