Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
File: KoxYiVEmChGj771tgWvVb4Ly_DQ.mft (raw, json)
Hash identifier: Sk9WcCt4x9fe60awpvl0MTJ8DW0CL9IK3MZ2nq36l7c=
Subject key identifier: D9:C1:19:67:42:53:89:C8:1E:3C:9A:40:11:6C:71:CA:E4:5D:DA:94
Authority key identifier: 2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
Certificate issuer: /CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Certificate serial: 019691BA19A4CEA889B9D6065EDA6E517859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
Manifest number: 0CC9
Signing time: Fri 02 May 2025 16:00:14 +0000
Manifest this update: Fri 02 May 2025 16:00:14 +0000
Manifest next update: Sat 03 May 2025 16:00:14 +0000
Files and hashes: 1: KoxYiVEmChGj771tgWvVb4Ly_DQ.crl (hash: 8GExdlziLLqwKAYcACXokW/OfXSOwLspafgSv4JoMkU=)
2: bEf44I_katxftzRhRoOcb5k7xJw.roa (hash: B4D2C0R7a4GwUSt6VcyTIkYPBhevJsFHyCCfjO/vPIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:ba:19:a4:ce:a8:89:b9:d6:06:5e:da:6e:51:78:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c588951260a11a3efbd6d816bd56f82f2fc34
Validity
Not Before: May 2 16:00:14 2025 GMT
Not After : May 3 16:00:14 2025 GMT
Subject: CN=d9c11967425389c81e3c9a40116c71cae45dda94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:3f:82:7a:f5:5d:c7:5b:4f:0e:39:a6:78:
c9:2d:77:a0:2d:59:9e:1c:0a:ff:a3:3c:c7:0f:c2:
59:e9:76:7f:9f:19:e6:64:51:e7:3c:4f:72:dd:f4:
53:af:df:53:fb:86:01:c5:06:2a:f2:e2:c7:da:8a:
09:bf:53:cd:74:92:e2:21:a3:e5:c8:28:7f:7d:c3:
2a:33:ce:8b:2d:e0:84:fe:c5:e1:8a:55:ef:b3:e4:
f1:ec:38:31:cf:6d:5f:4d:f3:56:ab:df:72:c6:8b:
25:20:51:c1:27:d9:80:ae:27:93:61:21:e4:4e:6d:
b6:9d:1e:60:8e:df:b2:f4:06:05:5f:93:e7:7e:b6:
25:38:43:ea:a3:d6:ec:b6:ac:c8:94:07:fe:77:33:
24:37:54:d1:f0:ce:6c:c5:ce:7b:49:2a:7d:7d:b3:
89:3a:29:ee:b5:38:9b:4e:1f:2b:0c:ff:60:c6:ab:
d7:6d:ee:82:e7:bb:99:72:26:46:08:0e:4d:7d:ac:
49:11:44:96:6d:29:d0:d0:bc:ad:45:c8:53:e6:2a:
59:2e:5c:49:01:32:1e:19:4e:d4:c4:1b:a8:c1:9d:
c4:cf:03:4c:98:e3:c3:b6:7a:fc:16:71:36:09:fd:
49:43:f3:b9:a5:47:9f:82:70:6c:8d:48:40:22:80:
c5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C1:19:67:42:53:89:C8:1E:3C:9A:40:11:6C:71:CA:E4:5D:DA:94
X509v3 Authority Key Identifier:
keyid:2A:8C:58:89:51:26:0A:11:A3:EF:BD:6D:81:6B:D5:6F:82:F2:FC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoxYiVEmChGj771tgWvVb4Ly_DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/4de49c-aa58-44af-b02a-1e8d219f87af/1/KoxYiVEmChGj771tgWvVb4Ly_DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:4c:cb:5c:d2:52:82:5d:b5:ab:67:a5:30:f9:a4:b6:c6:b2:
f0:13:c7:0f:c2:06:0e:64:19:31:c1:ef:75:06:7a:d1:bd:e1:
a3:21:ab:fb:bb:94:4c:c1:5a:7e:76:9d:8d:c6:af:97:26:b8:
19:4e:36:86:1c:25:10:a8:95:0d:77:19:46:f9:1c:73:b0:0b:
6d:88:61:b0:4f:02:10:76:08:26:72:0d:75:a6:32:cc:8f:00:
a9:b1:6d:ca:b7:f8:4e:8c:68:7d:4d:45:9a:77:76:df:c2:92:
e1:f3:0f:63:f6:57:a5:b8:d5:81:9c:84:71:bb:71:88:92:93:
06:56:3d:9a:b2:44:3f:cb:85:7b:0d:90:89:2f:59:ce:19:69:
99:8a:51:17:28:2e:7b:31:2a:3b:bb:e5:ef:d9:d4:fb:f4:d1:
a6:06:24:17:58:f9:1c:2a:fb:ae:77:1a:41:7a:e2:6d:61:81:
b8:6a:13:ee:c7:db:ee:06:24:0e:cf:49:14:71:c9:2b:c9:50:
a0:89:1b:2b:7c:f6:c3:b1:95:44:22:fc:de:4b:d0:79:90:4a:
37:ac:30:31:5a:c7:8c:32:8d:f5:df:cf:6b:7c:d3:d4:c5:ac:
58:3c:37:f3:1f:e9:02:93:16:6a:8c:c0:3b:c1:d5:75:f9:1c:
99:d8:76:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:27:59 2025 by rpki-client