Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
File: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft (raw, json)
Hash identifier: vlWHXwMW6l+iembMU8Qp5gomccdvqgMftoaO0p59Eb0=
Subject key identifier: 23:89:E7:E6:07:9C:38:98:20:CD:68:74:5A:47:D9:07:BE:B2:97:D5
Authority key identifier: 44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
Certificate issuer: /CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Certificate serial: 01967EA13F92F3952F2F75D3047ED6BB6750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
Manifest number: 1517
Signing time: Mon 28 Apr 2025 23:00:18 +0000
Manifest this update: Mon 28 Apr 2025 23:00:18 +0000
Manifest next update: Tue 29 Apr 2025 23:00:18 +0000
Files and hashes: 1: 0vFjVDYAA-6QI2qHPCdosu1GYFw.roa (hash: IQ3S8+qzPktEg1qP0FjMswDmKCTlK9fgpP4sOBqgbxM=)
2: 8FU11yYabBJRRjHXhYHw1w8tXqs.roa (hash: zgTg9U8qNVapSlofgSsQ7L6J3LMkMrbN8ivrl35eIuc=)
3: RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl (hash: p2mTmjmFC/A/uns9QkKx/6RCk7ZYXSDlJasrG8yPtDk=)
4: n_A6Qzt5rx35hoVU_97TwDYIfYU.roa (hash: AiRnXdqpWHaW5BVZZURmZ+ZKd/dN4DFkv2OtB71gThk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:a1:3f:92:f3:95:2f:2f:75:d3:04:7e:d6:bb:67:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44af4b76312680e9d40a23b3ca2f19abf2f6c73b
Validity
Not Before: Apr 28 23:00:18 2025 GMT
Not After : Apr 29 23:00:18 2025 GMT
Subject: CN=2389e7e6079c389820cd68745a47d907beb297d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c3:13:1e:2d:78:ce:75:48:c5:54:d3:55:7d:
00:04:bf:74:56:5a:fb:7b:b0:47:f0:23:39:fb:19:
25:b4:d5:32:53:dd:45:a9:18:19:42:a6:d6:9f:28:
a6:57:a0:4e:ad:b2:52:ae:f1:9d:67:2f:3e:79:88:
7c:54:ad:d6:35:39:d0:1a:ac:51:f9:6a:71:9f:24:
7d:2f:43:6b:37:c9:65:0c:70:a8:db:36:2c:dd:0f:
db:0f:6e:f8:49:f8:48:85:d3:dc:29:d1:3b:31:c2:
57:5c:03:1b:26:e3:9b:2a:70:49:57:40:a3:4b:67:
3b:41:25:c5:63:86:9d:ba:06:56:fa:bf:06:0b:81:
cb:13:e4:4c:59:2c:5c:c4:b0:d1:de:0c:bc:98:34:
7e:7d:34:72:a2:76:ab:68:d8:45:fa:c1:39:d0:86:
7c:da:72:aa:45:ce:81:88:7e:8a:86:ba:4b:40:8e:
02:31:5b:0a:21:19:c9:fc:f9:87:db:12:22:bb:41:
35:26:13:04:64:c9:ae:d5:b9:ff:e9:d5:37:72:95:
85:08:9a:e8:14:9c:9c:93:e6:a0:24:30:5b:2e:b5:
2d:47:be:92:5a:57:94:c5:54:1d:5a:e7:77:46:72:
2d:d7:2a:bb:41:72:60:72:b7:7b:20:e0:77:ac:ed:
f4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:89:E7:E6:07:9C:38:98:20:CD:68:74:5A:47:D9:07:BE:B2:97:D5
X509v3 Authority Key Identifier:
keyid:44:AF:4B:76:31:26:80:E9:D4:0A:23:B3:CA:2F:19:AB:F2:F6:C7:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/685aa1-ef22-48a5-b70a-5ea8f53ab491/1/RK9LdjEmgOnUCiOzyi8Zq_L2xzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:33:b6:ed:b9:ae:3e:07:5a:ff:2d:89:23:ea:b8:4d:80:86:
e3:65:49:96:7b:4f:cb:c1:24:83:8e:ef:3d:0b:87:11:ed:59:
3c:a1:7a:08:36:88:70:a8:62:a0:8b:05:0d:29:8c:c1:95:55:
3e:6b:4c:5c:31:7b:c9:71:3c:65:d2:74:00:60:c9:f0:64:4a:
05:24:11:6a:71:40:47:c3:0e:70:20:56:2c:86:31:18:a5:70:
79:a6:de:eb:32:e5:c2:7b:fe:7e:a0:7f:48:0b:20:82:66:00:
88:6e:2e:e4:da:15:35:41:57:92:79:c7:0f:84:ad:5c:c3:fa:
ff:bb:15:52:86:51:1b:bd:bf:d0:43:89:80:50:8b:6d:f1:00:
c4:c4:51:b1:b9:fb:1a:db:24:36:b7:c5:e1:42:7f:b5:49:75:
d2:18:97:83:94:b0:99:88:7a:58:00:99:82:4a:41:93:44:fc:
d0:0b:00:8e:c5:b4:37:74:bb:1a:ce:ad:39:ac:a2:6e:47:7c:
1f:a7:47:b9:b6:5b:55:fa:7f:ba:9d:82:88:b9:b8:cb:c4:5a:
1e:1d:69:55:4c:af:0c:4f:e9:cb:07:ae:81:d2:4c:65:9c:30:
ff:f7:e3:cb:bf:18:6b:fb:0d:b9:40:a7:7c:dc:fc:7a:72:07:
a2:9b:f3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:02:41 2025 by rpki-client