Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
File: klbbNIe0xbrLMAF3BXzzF0z3dHc.mft (raw, json)
Hash identifier: I5E96A14sggop86c14rBuCySD9F12Uiv41Ic7lOsusg=
Subject key identifier: E8:47:47:66:07:30:51:61:5E:4F:6B:C0:24:38:99:58:E5:29:19:61
Authority key identifier: 92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
Certificate issuer: /CN=9256db3487b4c5bacb300177057cf3174cf77477
Certificate serial: 019677C3BA224FD7B2703F1592E342C3703F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 15:00:37 +0000
Manifest this update: Sun 27 Apr 2025 15:00:37 +0000
Manifest next update: Mon 28 Apr 2025 15:00:37 +0000
Files and hashes: 1: Z3X9DsT4VAKW7YkBTMn0rXGuV2w.roa (hash: 4/S1oXOwwM9zeKkXcanc5Gx3gZZLVgK6WEWw0gjjXXA=)
2: evv1AEwBABySsTk3nBF2LjzybHU.roa (hash: kJn/dllwz1lruGXWCmiNDhy21/mDcgsGEnqSuWfi9xM=)
3: klbbNIe0xbrLMAF3BXzzF0z3dHc.crl (hash: UxABieSngfoEBXy064hanqvy/+UoAe//US+AAvrUJQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 15:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:c3:ba:22:4f:d7:b2:70:3f:15:92:e3:42:c3:70:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9256db3487b4c5bacb300177057cf3174cf77477
Validity
Not Before: Apr 27 15:00:37 2025 GMT
Not After : Apr 28 15:00:37 2025 GMT
Subject: CN=e8474766073051615e4f6bc024389958e5291961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:01:9b:90:45:ce:11:0b:1d:7b:ef:8e:b2:25:
7d:71:d5:19:e0:1d:33:d9:4f:20:bf:75:84:8e:34:
01:a8:94:42:a9:68:20:e7:e0:98:dc:32:88:ef:77:
39:50:36:c5:e9:51:5a:6c:09:d5:b2:f7:fe:98:d9:
6d:e2:c7:b9:61:0a:81:f9:e7:97:ba:2e:de:5d:5a:
d9:94:cb:eb:4f:5d:5f:b5:bd:88:dc:84:d9:46:92:
b2:39:c1:c1:51:73:78:51:aa:1d:1b:e6:60:08:f4:
61:ec:52:02:b5:09:4f:67:55:06:0d:8e:41:f9:3e:
7b:46:54:43:20:02:97:68:28:ca:09:0e:c3:d4:3c:
ea:2c:bf:a1:aa:e0:88:28:0e:66:53:1f:de:fb:ce:
16:47:06:fd:2b:c4:f3:3e:3c:1e:74:db:18:c4:e4:
75:0c:c2:ae:87:b1:ab:b4:0b:63:e9:00:1b:1e:04:
86:14:58:cd:76:c7:f3:d2:35:11:a3:db:fc:d7:3b:
c3:9a:fd:68:eb:02:8e:37:32:6a:05:f6:bc:7a:88:
3d:58:3f:7c:ea:a9:59:d3:1e:7c:12:53:1c:8a:9a:
f4:a2:91:85:dc:98:d3:ac:66:74:97:f2:24:8d:78:
25:34:48:48:af:c4:15:74:4d:9d:e3:ec:7f:26:8f:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:47:47:66:07:30:51:61:5E:4F:6B:C0:24:38:99:58:E5:29:19:61
X509v3 Authority Key Identifier:
keyid:92:56:DB:34:87:B4:C5:BA:CB:30:01:77:05:7C:F3:17:4C:F7:74:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klbbNIe0xbrLMAF3BXzzF0z3dHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7b45b9-990b-4614-a64e-0f52ea5229fc/1/klbbNIe0xbrLMAF3BXzzF0z3dHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:06:fc:81:80:eb:ee:35:66:96:53:2f:9d:58:01:9e:c9:61:
bd:4b:dd:c0:a4:42:95:b2:1c:9f:00:49:48:87:9d:b2:03:ff:
fe:76:76:a2:40:d9:4d:60:18:5c:53:c2:0b:b4:08:a5:25:dc:
12:d5:e9:62:c6:aa:e6:3e:7f:cd:d2:03:ba:ee:02:e3:80:aa:
94:b3:c1:45:d8:90:c2:79:68:01:22:9c:d8:d6:46:9e:f7:34:
db:4d:17:40:b4:f9:f6:fb:0b:b8:01:01:4a:4a:ff:9c:dd:24:
3a:e7:10:77:67:fe:70:e5:40:62:58:19:0d:55:81:8a:fe:15:
38:ef:2d:21:29:86:56:bf:c6:cf:ef:27:8b:dd:ce:e6:b0:c3:
0d:d7:8b:b4:fb:20:a1:23:73:e7:27:80:6d:35:32:48:32:b2:
60:3c:dc:c5:0c:ce:a7:7f:86:ec:ed:6b:cd:97:0a:10:bf:c6:
3b:1b:2c:8d:c3:a8:c8:9e:b2:17:d4:b5:1a:e6:84:27:2b:91:
a3:50:35:69:5a:13:0f:56:47:3e:34:c7:02:a5:71:6d:a0:8d:
56:a4:25:4d:b3:b0:22:bd:74:11:29:2a:09:a6:a9:87:d4:d0:
7c:13:1e:77:41:01:bf:2d:40:1e:cc:a9:30:55:b8:b9:b0:e2:
e3:44:42:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:41:49 2025 by rpki-client