Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File: kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier: RaSeWw5zec/i8O8830mZB9WimPuSvk+t+M1OGAiNDDg=
Subject key identifier: 2E:AD:C4:6B:34:C9:A1:EB:05:FC:82:03:C0:B3:28:13:50:EC:71:44
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer: /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial: 01968C5D45BE9A40A4832A1200EA04E19B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number: 151A
Signing time: Thu 01 May 2025 15:00:44 +0000
Manifest this update: Thu 01 May 2025 15:00:44 +0000
Manifest next update: Fri 02 May 2025 15:00:44 +0000
Files and hashes: 1: HjQkm2JT356OOTfVxzC91MAJejE.roa (hash: 6EBMcahxPvJvcaJie71cxhJd2CWIr+iW37GbqtuijiY=)
2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: hPh24nNQKLU9OoXNrOjawgyvCQQFDgZCM8k2AWMqU9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:5d:45:be:9a:40:a4:83:2a:12:00:ea:04:e1:9b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Validity
Not Before: May 1 15:00:44 2025 GMT
Not After : May 2 15:00:44 2025 GMT
Subject: CN=2eadc46b34c9a1eb05fc8203c0b3281350ec7144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:ea:43:31:97:ec:f5:d7:ed:47:f9:72:be:
54:13:29:39:4b:10:af:30:d7:c7:9d:4b:18:2c:86:
85:ab:6d:20:40:1d:89:ec:b7:00:a8:7d:6b:d1:5d:
2c:97:f1:33:b0:fa:bc:ce:a5:f0:3a:84:37:a3:29:
49:5b:46:6d:10:34:71:3c:7b:24:dc:8d:2f:a1:77:
7a:8e:7c:8e:61:2b:0b:30:69:63:f5:5b:e6:19:e6:
b6:22:75:6c:7d:94:d4:16:9e:90:64:4c:f9:44:3e:
e8:fd:b7:22:95:f8:2a:2e:a9:b4:d8:bd:78:8d:9e:
9e:b9:ec:bf:b8:e2:df:6e:0d:6d:4a:4c:c2:68:8a:
d5:19:a1:32:9c:a5:74:a8:59:12:1d:e1:8c:7a:c3:
a5:d3:d5:6b:d5:10:8d:f7:6b:28:ff:b3:37:d2:68:
6b:4f:07:bc:06:b6:89:f4:f0:b0:b5:0a:1e:8b:05:
4e:f0:b1:20:06:da:ab:17:ad:b4:24:84:1d:58:42:
bc:7a:df:10:94:79:7e:58:4b:6c:53:56:12:35:25:
69:05:c8:27:c7:93:10:e3:0e:35:a4:a7:24:85:f3:
c4:00:f6:c2:f4:e7:3f:ea:d7:56:f0:49:db:6b:18:
f5:12:52:39:8b:89:b0:7c:ad:9a:ed:e9:ca:b3:01:
9a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:C4:6B:34:C9:A1:EB:05:FC:82:03:C0:B3:28:13:50:EC:71:44
X509v3 Authority Key Identifier:
keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2d:92:69:bd:be:c4:b4:59:60:0e:23:d2:69:90:b3:85:25:
66:28:f0:5f:38:41:0b:71:a7:61:15:35:65:44:01:67:34:89:
be:cd:5c:f3:47:0a:38:bf:47:8d:e4:57:bd:b7:cd:c0:68:70:
62:00:a8:da:d2:5e:b7:bd:92:91:19:80:5f:e5:fa:99:64:8c:
c0:48:51:1c:24:d7:3a:32:9a:e4:95:39:c6:2f:4d:fc:9f:49:
59:58:b9:39:fe:20:2c:61:ab:15:ab:19:5b:99:8b:40:86:15:
0d:99:ea:98:3d:0c:99:c0:da:b3:9a:54:32:96:53:87:c3:e4:
20:63:f3:45:9d:67:92:f5:71:c4:b0:f1:5b:3d:06:66:47:92:
7d:ef:0e:a3:ff:c8:33:01:c1:36:93:35:1a:33:5f:c1:e1:0b:
ec:ed:d7:44:80:a3:46:86:fb:b9:8d:c8:71:6b:0b:a2:9a:9d:
93:7b:2c:49:2c:49:30:db:ff:1c:ab:bc:51:f0:5c:03:83:a9:
43:8a:20:d2:64:02:4f:8c:ff:be:7a:9e:bc:a4:9b:2d:b0:9d:
b2:23:02:76:ab:a3:a4:f5:c9:61:36:d8:fe:4f:df:ea:0d:e5:
48:40:ce:7b:66:12:74:99:5c:d8:9c:52:05:a9:ea:70:46:4e:
69:86:52:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 00:45:14 2025 by rpki-client