Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
File: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft (raw, json)
Hash identifier: 8J18378VSCqgZH4oCH6YAIrUEBMGZ5OKa0LYcSTm8lc=
Subject key identifier: A4:96:0A:2B:15:FA:61:46:AD:85:35:36:F4:C6:15:4D:E1:D6:A8:7D
Authority key identifier: 28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
Certificate issuer: /CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Certificate serial: 01967F4674A4957E4AB6361B198E6AAE2B6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
Manifest number: 12BA
Signing time: Tue 29 Apr 2025 02:00:45 +0000
Manifest this update: Tue 29 Apr 2025 02:00:45 +0000
Manifest next update: Wed 30 Apr 2025 02:00:45 +0000
Files and hashes: 1: 3tngVW8LtfBpGAaHjHlOFUm8OH8.roa (hash: aEmicBF+rkX/VE/VudL8BN7DqijXENPur1ReRDbdgFc=)
2: KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl (hash: ySErTtOEC/50HpgE0tMUC1MC4UFMTr9H0aaK9+ulQHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 22:36:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:46:74:a4:95:7e:4a:b6:36:1b:19:8e:6a:ae:2b:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28cb661a643968f3f81e7b119eeb96c50d2d39c7
Validity
Not Before: Apr 29 02:00:45 2025 GMT
Not After : Apr 30 02:00:45 2025 GMT
Subject: CN=a4960a2b15fa6146ad853536f4c6154de1d6a87d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:96:9d:f8:9b:be:20:d3:3a:1e:b5:86:82:9a:
cd:dd:ab:ea:2b:a7:a5:58:f0:93:fa:19:50:88:df:
b9:2c:7b:47:21:6a:25:6f:73:b4:4b:ed:b3:97:fb:
c5:78:6e:d6:ae:d2:64:07:63:99:74:48:f2:f7:5a:
17:88:bc:d6:64:b6:f3:96:f5:01:3c:b4:77:59:74:
49:92:81:3d:9f:a3:48:e5:b0:f2:73:b4:29:04:b4:
a8:91:9a:94:9e:fa:a6:19:14:9e:ad:18:49:62:a9:
8d:cb:78:66:91:de:8b:3f:f8:cd:87:89:f2:a6:76:
ee:ec:f4:a4:ae:80:6b:b6:c3:d3:e5:c3:e0:96:32:
6c:7f:d3:2c:16:a0:52:ca:b1:a3:e4:76:6d:9c:ba:
fb:e8:1a:eb:28:26:73:65:54:d1:de:78:a9:f6:78:
e5:26:6b:16:52:9f:84:6a:eb:a2:34:51:ba:5e:8a:
57:44:c8:1b:a9:8e:06:f6:77:0c:a1:dc:fb:8d:9b:
e0:07:79:dd:53:c4:9f:10:9d:1e:1a:ee:9c:e3:f5:
e6:25:02:8a:02:da:62:e8:f2:fc:d7:c3:c2:9d:0a:
8a:3d:d9:df:39:39:50:4b:af:84:58:a9:05:14:52:
f6:97:a5:51:cb:2a:c2:dd:35:4e:88:1d:57:6f:30:
18:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:96:0A:2B:15:FA:61:46:AD:85:35:36:F4:C6:15:4D:E1:D6:A8:7D
X509v3 Authority Key Identifier:
keyid:28:CB:66:1A:64:39:68:F3:F8:1E:7B:11:9E:EB:96:C5:0D:2D:39:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/276bf7-7a15-4c56-ac56-7d4e68dd4cce/1/KMtmGmQ5aPP4HnsRnuuWxQ0tOcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2d:ba:95:83:6d:1f:f0:ee:b1:50:c7:95:84:24:fb:f3:7c:
ef:22:16:ee:f8:da:7d:49:cc:00:b9:ed:82:d6:1b:99:49:65:
74:e8:ac:4a:39:ee:24:8d:b3:ca:ee:a1:30:c1:d9:80:d8:46:
95:3d:4f:4e:53:7a:da:91:36:68:d3:e8:da:d9:01:80:e9:7a:
3d:42:eb:0a:52:0a:c4:bc:4d:42:d6:e8:8f:fd:82:42:1a:45:
76:1e:d1:82:97:55:b1:b5:d9:9d:10:6a:d0:e3:ac:1b:dd:69:
2e:41:e5:8f:c8:1d:91:b1:20:ee:cb:0f:6c:3f:c0:39:03:e4:
f4:ca:58:ee:1c:8e:97:d8:6f:39:cb:fd:cd:7a:1d:c1:ca:5d:
64:4d:37:d6:64:69:7e:50:a2:26:17:4b:53:a0:05:b0:38:c5:
6a:c9:b5:5d:15:8a:00:49:22:2d:69:61:a1:07:5e:19:a0:4d:
28:c3:8a:74:96:c4:1e:ff:b7:9d:ab:56:f8:0c:8b:75:14:81:
c6:5d:18:6a:40:3c:d9:5f:87:8e:63:db:07:cd:05:b4:49:50:
38:13:0c:72:bb:d5:04:4d:80:ad:9d:25:52:75:31:76:53:cb:
9e:40:d1:a4:ce:8e:77:9d:20:dc:79:f2:89:b5:1c:f5:2f:13:
3f:4a:4e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 05:17:34 2025 by rpki-client