Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
File: kpM-ATZE25ye6bkd9y4TONuOIJc.mft (raw, json)
Hash identifier: CYq7fyzzT4FA+rCYGmVjXP+YWfhErYhuB/pjkEs0dRc=
Subject key identifier: 40:8B:99:CC:22:F0:82:43:5A:47:94:A4:15:44:98:6A:70:EE:85:4B
Authority key identifier: 92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
Certificate issuer: /CN=92933e013644db9c9ee9b91df72e1338db8e2097
Certificate serial: 01968F94FF72E79DE8B3189764F0994957F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
Manifest number: 0D6C
Signing time: Fri 02 May 2025 06:00:28 +0000
Manifest this update: Fri 02 May 2025 06:00:28 +0000
Manifest next update: Sat 03 May 2025 06:00:28 +0000
Files and hashes: 1: 6lxIW7DOsuapgRe4TkqSuAXjoOs.roa (hash: AJ9PIBCPlG0gbaqeqnRofWtKoSg8Ai8VYC5DZAVADvU=)
2: TNgap5W-osn_Rfol75raxYUJNcQ.roa (hash: v9eCsfXIr5Y/Gysizic1m9zP115asEh2Yiu1o/todaA=)
3: kpM-ATZE25ye6bkd9y4TONuOIJc.crl (hash: 9Q6/z4fPb2+Py9ZcemeQ0DwK4PeLXyA3bBWbvWyby94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8f:94:ff:72:e7:9d:e8:b3:18:97:64:f0:99:49:57:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92933e013644db9c9ee9b91df72e1338db8e2097
Validity
Not Before: May 2 06:00:28 2025 GMT
Not After : May 3 06:00:28 2025 GMT
Subject: CN=408b99cc22f082435a4794a41544986a70ee854b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d3:eb:68:8c:f2:d1:1f:78:79:b8:38:b3:75:
03:17:aa:70:4e:91:c9:ed:ec:9d:b0:04:f9:17:d8:
6b:3b:c0:2b:eb:68:83:bc:d4:86:6e:60:6e:f7:ab:
dd:78:be:72:7a:01:9d:9d:6d:92:55:2c:20:c1:98:
18:bd:8f:8c:6b:e4:1f:95:d7:4d:19:af:48:e1:44:
41:58:3c:ba:9c:d5:32:4e:46:43:aa:57:b8:5e:de:
c2:26:41:72:61:80:ef:e1:a9:94:6f:24:6b:96:53:
14:b7:ce:8f:5c:04:28:40:c8:84:36:41:3b:cd:75:
93:66:c3:15:b6:b9:b0:17:8d:d7:61:fd:9a:42:24:
52:55:a5:23:c5:64:ae:e3:8f:97:f1:14:6b:99:38:
e1:a9:47:21:6d:0b:07:93:15:9f:6a:05:81:14:af:
45:d2:76:a7:62:98:c1:ba:91:e8:8b:0b:0c:e1:0d:
66:2e:3c:20:d1:0f:64:6c:12:0a:81:9d:63:99:17:
c7:bc:6d:e0:a0:1d:c2:b2:14:d0:a6:01:9f:ed:ea:
33:a8:45:be:3d:b0:93:bd:48:41:d6:4c:75:b8:41:
65:77:be:1d:26:89:b8:8e:b4:7f:41:8a:5d:e0:76:
f2:8b:e1:8c:b0:78:b2:e1:57:92:8c:e7:2a:a4:0f:
4c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8B:99:CC:22:F0:82:43:5A:47:94:A4:15:44:98:6A:70:EE:85:4B
X509v3 Authority Key Identifier:
keyid:92:93:3E:01:36:44:DB:9C:9E:E9:B9:1D:F7:2E:13:38:DB:8E:20:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpM-ATZE25ye6bkd9y4TONuOIJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bef22-f345-4603-a1e9-5cc2ef099aee/1/kpM-ATZE25ye6bkd9y4TONuOIJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:4f:b1:04:16:ac:96:f9:d2:d8:35:ee:b6:87:fe:04:37:0b:
0a:39:39:ff:4e:82:e0:65:56:07:1a:4e:cd:d2:06:c1:10:4f:
7d:90:b7:b0:2f:76:e9:a4:9c:15:d2:d0:06:a6:93:6a:46:17:
88:d9:ba:cf:cc:5a:c4:c7:a9:b2:9b:93:d9:e3:16:ab:31:dd:
40:41:0f:1b:fc:38:c7:21:4c:5f:27:43:20:a4:75:a5:28:b9:
fc:3d:a2:2b:d2:61:82:85:a6:75:59:3d:bf:27:24:33:17:dc:
7e:71:11:7b:33:26:d6:45:de:89:8f:04:71:e4:2f:94:34:b4:
6c:78:6e:83:54:56:82:a9:8b:a8:3e:8f:8b:47:a3:ec:b9:8c:
70:51:ee:84:39:55:8c:a7:7f:77:33:c4:a8:d6:74:9e:d6:a9:
fa:fd:d3:c9:e9:7e:7e:78:3a:59:8f:df:49:41:7b:e3:fd:b8:
ee:64:29:97:b0:69:f7:0d:d2:51:d5:a6:78:36:9b:4c:87:ff:
15:ed:e6:d4:60:59:f5:94:34:75:ae:04:8c:9f:24:55:85:50:
f1:8a:9d:8b:38:11:03:23:4f:f0:d1:f9:d8:d5:36:54:70:aa:
4f:d2:21:f4:06:52:97:73:bf:5c:d3:ba:33:b9:2f:55:81:1c:
c5:71:2b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 12:01:39 2025 by rpki-client