Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
File: KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft (raw, json)
Hash identifier: 8VfXr0M51gykrzielHmY3755P9HGDF522f/uMZQNw50=
Subject key identifier: 82:68:90:D0:BB:B6:10:9E:56:5A:B9:DF:64:A7:27:46:F7:00:86:5F
Authority key identifier: 29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
Certificate issuer: /CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Certificate serial: 01968F27F9BC38865FAE8D686976BACFDB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
Manifest number: 151B
Signing time: Fri 02 May 2025 04:01:23 +0000
Manifest this update: Fri 02 May 2025 04:01:23 +0000
Manifest next update: Sat 03 May 2025 04:01:23 +0000
Files and hashes: 1: 9H_Kait-j-Qscd6pOWC4j8dpNJg.roa (hash: X52do8h3PQmiEbN5LZNuqcyFDYy1wul4mKE1Lrt4Z+M=)
2: KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl (hash: jC4aHoE1SlZWGaGGwp7LyJd/dHlzb1SOJsZQxOiC5MQ=)
3: z3Ot5yZtdQ2I7c3yBTGW4OxIbZY.roa (hash: HMFp3zS5F5zXQPk83xR6QIUNoMCPUQejJzCTAnl5q10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:27:f9:bc:38:86:5f:ae:8d:68:69:76:ba:cf:db:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d313a7fd2ba3d995c44a7ab4af332f875cc40c
Validity
Not Before: May 2 04:01:23 2025 GMT
Not After : May 3 04:01:23 2025 GMT
Subject: CN=826890d0bbb6109e565ab9df64a72746f700865f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:ad:5c:89:4b:04:cb:98:a6:0a:5d:28:a9:
c0:d7:43:18:4e:50:71:e3:0b:6c:f0:17:8e:c1:c0:
27:c8:96:8a:b2:0e:20:16:dc:a5:b3:7d:79:99:ee:
86:88:68:39:1e:95:63:3b:64:b6:fd:53:2c:13:16:
63:7f:59:3c:d5:df:74:4d:20:d9:c1:30:b1:97:a6:
8d:89:16:18:b5:7e:79:52:a3:e0:6f:df:3c:70:ae:
40:ce:1f:7c:56:74:64:00:64:69:ea:aa:53:a1:3c:
37:ca:eb:d3:ac:85:eb:8f:1a:49:dc:72:8c:ac:36:
08:cc:44:9f:f7:0d:4b:d3:8d:f5:ce:75:50:63:e7:
83:91:9c:e6:2d:db:26:d6:36:0e:f8:45:a4:bd:37:
8e:1d:b0:cb:9e:8e:a5:8a:96:22:a8:3e:0e:5d:f6:
4a:62:57:c7:22:82:42:03:e3:e3:c6:42:29:90:24:
2c:68:13:24:fc:fe:63:3f:c7:3d:7c:a0:bb:40:32:
25:bd:bf:f4:c3:a0:3a:9d:a2:5c:5f:24:3a:bb:fb:
71:43:56:f6:77:e0:7f:f3:4c:d2:1c:f7:1a:45:31:
8f:a1:03:21:d7:6e:43:1b:29:fd:9c:1d:1a:6f:10:
63:2a:d8:c5:63:92:dc:69:a3:5a:5b:4a:b4:c2:e2:
23:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:68:90:D0:BB:B6:10:9E:56:5A:B9:DF:64:A7:27:46:F7:00:86:5F
X509v3 Authority Key Identifier:
keyid:29:D3:13:A7:FD:2B:A3:D9:95:C4:4A:7A:B4:AF:33:2F:87:5C:C4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdMTp_0ro9mVxEp6tK8zL4dcxAw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e4ef53-30bf-4897-b210-d519b82afc36/1/KdMTp_0ro9mVxEp6tK8zL4dcxAw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3a:37:e4:a2:24:58:01:49:ec:14:d0:ce:b4:48:b6:4b:a8:
b2:21:8a:25:e1:61:cf:b1:54:8d:27:37:c2:82:b8:be:2d:5b:
e3:e5:62:70:05:ef:48:e2:6a:65:9c:b1:7e:bc:ed:21:49:9d:
6e:98:ec:d4:35:c5:68:fe:12:23:57:97:c6:2c:38:aa:d1:78:
93:df:8d:d2:d3:68:c5:85:8b:6d:87:81:f3:e5:12:f7:5c:0b:
59:03:b6:8e:6a:a9:e1:27:c3:92:5b:f2:e3:67:ee:44:45:8c:
da:11:17:2e:c0:71:23:bd:93:4b:03:98:31:9c:e8:c0:82:38:
1c:0f:c8:32:98:2c:82:b9:45:8e:a9:ed:55:fd:41:d7:a0:29:
96:5c:ae:f5:9e:2f:d4:3c:d1:fc:f4:69:81:c7:3d:53:68:67:
61:99:05:52:d4:0a:77:61:81:e8:fa:50:9c:f6:8d:61:df:63:
85:c9:11:41:af:a7:1e:09:4a:4f:a2:9a:8b:c3:33:d1:9e:ea:
f4:d3:61:13:22:7c:7e:92:f9:d0:c2:21:4d:13:a7:97:ea:9f:
78:db:1d:43:a5:2d:7d:84:57:59:9f:f0:9b:e9:2f:14:23:96:
45:21:63:dd:c8:7c:9b:7a:b2:9f:70:fe:1e:e9:88:d1:9b:8a:
95:9b:0e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 11:08:28 2025 by rpki-client