Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
File: KC6tuNjCny5wNVBD4meGIpc08LI.mft (raw, json)
Hash identifier: THieU8cf9/iLmbSAmwWlxJmbUKSpiwUDZ0Ym9bfxPQs=
Subject key identifier: 5E:B1:34:46:61:9F:33:B7:C7:54:F3:BE:B5:CC:51:13:30:0A:61:FE
Authority key identifier: 28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
Certificate issuer: /CN=282eadb8d8c29f2e70355043e26786229734f0b2
Certificate serial: 019685ED10ACBA03E303098021FFC9EC8ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
Manifest number: 1518
Signing time: Wed 30 Apr 2025 09:00:28 +0000
Manifest this update: Wed 30 Apr 2025 09:00:28 +0000
Manifest next update: Thu 01 May 2025 09:00:28 +0000
Files and hashes: 1: EdTyc-f6MbzKNflZEVb0lTRcFng.roa (hash: LosjQRA+dA0QESjdH00I3Sd8eYNzb4MjK8b7Xcsie8w=)
2: KC6tuNjCny5wNVBD4meGIpc08LI.crl (hash: +I71Y0I9VaZJ2XfXh6zK+s2gq9MWjfUmF75/0ekNtkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:ed:10:ac:ba:03:e3:03:09:80:21:ff:c9:ec:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282eadb8d8c29f2e70355043e26786229734f0b2
Validity
Not Before: Apr 30 09:00:28 2025 GMT
Not After : May 1 09:00:28 2025 GMT
Subject: CN=5eb13446619f33b7c754f3beb5cc5113300a61fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:74:d1:4f:b1:ae:1f:54:3d:1c:fd:db:b3:99:
6c:e8:73:f9:a7:81:11:c2:92:08:06:01:64:e3:87:
0c:a0:c8:3d:a7:f4:a5:bc:1f:42:18:f0:5a:0d:19:
a0:94:a9:d5:02:42:9b:d9:6b:6f:d6:06:c9:e0:af:
3a:89:84:f1:fb:da:72:a9:d7:f9:19:50:ad:05:fd:
65:3e:9a:25:5b:c7:82:50:24:bd:c2:31:db:50:b0:
80:34:27:cf:fe:ab:9f:74:45:38:3d:39:cb:9c:72:
5f:46:54:ce:a2:f8:b9:b9:ee:73:a5:60:e2:7b:af:
b7:46:ce:2e:4c:ca:e8:ec:bd:6a:51:03:fa:f3:5c:
23:4c:1e:c6:62:9c:c1:cb:53:09:2a:bb:ff:1a:94:
08:55:fe:8c:8b:77:79:fd:40:59:cd:e4:f0:7b:e6:
c3:4e:b2:91:a4:82:4a:86:37:0d:cc:9b:58:f0:38:
23:3b:99:f0:39:49:e3:ef:c8:f9:4a:54:c4:f2:27:
6c:df:b4:06:c3:cb:52:40:9c:f4:9d:0e:17:cd:af:
31:51:0c:c5:c8:b9:2d:3f:0e:f0:9e:48:25:9e:87:
1b:dd:a6:32:05:0e:7b:eb:33:bf:27:45:e0:72:23:
05:26:e5:08:d5:b9:0e:8d:14:d5:47:9e:8a:3d:05:
4e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:B1:34:46:61:9F:33:B7:C7:54:F3:BE:B5:CC:51:13:30:0A:61:FE
X509v3 Authority Key Identifier:
keyid:28:2E:AD:B8:D8:C2:9F:2E:70:35:50:43:E2:67:86:22:97:34:F0:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KC6tuNjCny5wNVBD4meGIpc08LI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/0faf70-4c38-406f-8ccd-b67f40b4ec14/1/KC6tuNjCny5wNVBD4meGIpc08LI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:78:9f:95:7b:0a:db:aa:fc:5f:d5:fe:70:38:d8:3b:5f:08:
24:6e:17:0e:92:e1:07:20:6f:d7:52:09:58:f8:f7:e6:68:6f:
bd:28:8d:3b:2e:6d:34:e0:21:86:9c:43:60:e8:87:cd:68:4f:
41:39:a9:e1:1a:7d:64:44:ec:cd:95:53:c4:5c:bd:68:7f:67:
f2:41:ea:8e:d0:f5:b1:da:4b:40:25:c7:05:ac:fb:ec:14:61:
de:a1:24:e4:ef:a1:d5:06:80:b9:0d:c9:4f:67:3d:92:53:16:
8b:ad:be:5a:7f:b6:62:25:d3:b4:c0:23:35:4a:63:84:10:0e:
79:de:5d:7e:32:d7:8b:7a:7b:33:3d:f2:a9:3e:5b:be:ac:0c:
d5:77:11:f9:60:ab:54:dc:0a:65:41:5c:be:c4:82:ad:64:93:
ed:2f:6f:3f:29:f0:58:e2:64:7e:b8:07:54:68:33:57:3c:f1:
c8:de:f8:3d:f6:67:5a:9f:10:37:bc:8e:78:be:25:c0:7f:25:
9d:54:1c:d0:1e:c7:51:23:6f:ae:ea:56:1c:91:77:a6:05:66:
38:0b:58:5a:0d:c3:4e:de:b2:f5:67:a4:c0:ef:dd:87:03:78:
2e:1f:a9:55:54:34:ff:79:45:4b:ed:75:0b:5a:ff:b9:ec:1c:
56:b2:91:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 18:45:16 2025 by rpki-client