Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: gl0troiZXfFI7nAb1WpVwlDJaB8vwAHwRd0rRRHLoyw=
Subject key identifier: 57:04:8F:27:34:CB:FE:A8:CC:9D:B5:30:E2:28:86:60:4C:F1:4F:BE
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 01969ABE11FAD6EB66FDEA4914C38601FE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 0936
Signing time: Sun 04 May 2025 10:01:09 +0000
Manifest this update: Sun 04 May 2025 10:01:09 +0000
Manifest next update: Mon 05 May 2025 10:01:09 +0000
Files and hashes: 1: bRhGJqv0p8mJ4Y5Zi3hw3lkQdsk.roa (hash: z2JalsCXdVTGdLdK888EdCX/YOon+kmiEVhkkUSf3/w=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: ly9WUfZpIFD1uD35rgvm/i6UqYtEJox0pr9VFwvRoO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9a:be:11:fa:d6:eb:66:fd:ea:49:14:c3:86:01:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: May 4 10:01:09 2025 GMT
Not After : May 5 10:01:09 2025 GMT
Subject: CN=57048f2734cbfea8cc9db530e22886604cf14fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:36:9e:68:c9:5c:0f:51:ee:1c:0e:e9:c3:
0e:f9:45:63:eb:94:68:86:f1:5f:8e:fc:e9:3a:64:
e1:2a:f7:36:94:db:69:9f:7f:0e:c8:f7:0d:68:71:
12:99:a1:f1:95:5a:08:8c:c8:64:81:68:aa:9f:9b:
74:8c:b3:29:f6:d0:ee:9d:24:a6:81:3e:86:6d:56:
93:f3:ca:03:a4:8c:bb:b0:f3:0b:0c:10:5d:24:18:
01:d7:3f:5e:e8:18:9e:5a:62:e1:87:30:7d:28:e0:
b2:bb:98:8f:b8:42:92:e6:0e:c4:1f:41:9c:66:e4:
6e:dc:cd:2d:89:be:cc:cc:8f:ec:69:0d:42:30:45:
49:84:0f:29:8f:89:9c:c5:ff:8f:e5:f7:1b:40:6c:
3a:79:ba:28:64:17:f3:e8:12:fb:e6:8b:37:bf:c4:
bf:e1:29:d9:e6:9b:42:2c:9f:b1:d0:fc:d1:4e:3c:
62:c9:3a:30:95:c1:e4:1a:48:f3:42:60:98:73:e1:
cd:f8:68:dd:6f:d9:f2:52:b7:e6:e1:a1:4d:38:1c:
ab:ad:75:63:b5:4f:27:0b:9a:b6:89:b0:2f:54:03:
52:ec:a6:36:da:13:8e:d8:40:64:a0:7c:93:51:84:
87:dd:94:53:95:8a:dd:a7:0a:33:6f:90:2a:e6:0a:
09:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:04:8F:27:34:CB:FE:A8:CC:9D:B5:30:E2:28:86:60:4C:F1:4F:BE
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:a9:b0:ac:6f:9f:3c:e6:11:8a:4a:a7:5e:c7:32:1f:66:f8:
a8:9e:e6:47:2e:24:cc:9c:0d:ea:e8:eb:0a:86:e5:bc:e0:fe:
94:27:32:ac:e4:c6:6b:74:e5:8e:3d:08:78:e4:a1:4c:64:f9:
7f:4a:94:6e:47:d4:bf:f0:97:0f:bd:db:0d:f5:53:cc:fb:6f:
9c:25:c9:17:64:a2:00:12:98:41:d3:a2:1a:d7:68:a1:e6:e3:
e0:39:14:bb:fe:e4:4c:d3:7e:7f:11:77:95:17:4f:f3:c7:b5:
58:32:22:17:9f:a1:9e:19:1e:95:78:1a:41:4b:2d:03:c7:72:
66:21:8a:24:1f:9d:c1:b3:4b:ca:2d:12:0b:dd:78:c1:af:f5:
99:a8:9a:1b:53:4b:bb:70:27:1b:4c:bc:cb:b0:ed:8f:c1:5e:
e0:ef:3c:fa:da:ad:24:6e:60:74:36:e5:c2:9a:de:2a:b3:b3:
bb:c8:3d:4f:e3:41:88:4d:8b:2a:fa:29:91:8c:e6:d1:cd:e0:
24:28:ac:bf:99:74:2f:f0:be:cf:89:68:7f:0b:40:71:b5:d3:
71:30:6a:84:fe:95:ac:5f:72:d6:63:da:ad:83:67:4c:d7:3c:
06:7d:a3:8c:3b:d2:d5:8e:cf:13:63:c6:e4:dc:a8:ba:c2:95:
2f:e6:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 17:10:15 2025 by rpki-client