Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: 8fklmqQvDQKaQ4pi89IXWe802kYOBaNcxjMXXiXHwqs=
Subject key identifier: FD:59:08:D2:99:E4:74:1D:A0:27:F0:C4:A8:59:4D:C8:32:9D:18:7A
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01967CE9C477B63CDDE04BE12B750BC602C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 05E9
Signing time: Mon 28 Apr 2025 15:00:17 +0000
Manifest this update: Mon 28 Apr 2025 15:00:17 +0000
Manifest next update: Tue 29 Apr 2025 15:00:17 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: p3QdSB5dDQtXIZw33yzNRqRxMRVLXZG2JaHmVEfRfeg=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7c:e9:c4:77:b6:3c:dd:e0:4b:e1:2b:75:0b:c6:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Apr 28 15:00:17 2025 GMT
Not After : Apr 29 15:00:17 2025 GMT
Subject: CN=fd5908d299e4741da027f0c4a8594dc8329d187a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f4:f6:8d:1e:29:35:eb:8c:ce:6e:b8:34:12:
5d:41:39:59:21:9d:86:12:3b:d5:66:f7:93:2a:12:
4d:25:cd:39:5e:d1:da:b2:71:b7:8e:12:5b:42:06:
c5:7e:d7:65:80:7f:2b:cd:9b:c8:90:32:cb:f7:f5:
66:74:44:82:40:42:8a:a9:76:59:7c:01:31:27:80:
0c:34:30:ff:06:f4:5a:f6:d6:42:f1:bb:e3:c8:58:
d8:f4:71:90:0f:19:34:2c:62:52:1b:27:19:06:98:
c1:ce:94:77:1b:c2:b9:69:f0:3a:46:fa:6d:ec:f8:
66:de:a3:dd:0d:13:69:54:00:c1:1f:91:54:53:fd:
5d:88:30:39:30:11:23:3c:8e:3e:fb:89:3d:b2:01:
20:96:71:0d:ae:ab:57:88:3f:1d:c0:6a:73:3e:d7:
5a:e6:ea:2b:54:56:d8:88:d6:62:83:e6:f5:60:06:
f2:7c:35:e1:ed:3a:6a:ee:eb:51:45:a5:64:4e:09:
0b:f8:bf:bd:da:5d:17:64:a7:66:6a:81:b1:55:91:
01:62:7a:85:9a:ec:8e:94:9d:1d:dc:79:67:15:74:
07:2f:18:15:b8:b0:7d:e3:28:dd:3d:e2:f6:fb:80:
84:52:ef:de:53:d1:fb:5d:69:df:42:95:83:e1:24:
b0:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:59:08:D2:99:E4:74:1D:A0:27:F0:C4:A8:59:4D:C8:32:9D:18:7A
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:63:c6:b4:da:5e:21:cd:42:64:dd:24:73:63:42:a7:19:72:
b7:f4:37:78:9a:bc:9e:27:1b:c8:2d:1d:91:f6:b9:af:e9:d7:
0d:2a:34:34:04:f5:43:1f:e3:05:71:9e:3b:24:13:09:e1:e1:
59:34:bd:b2:11:42:e6:33:d6:48:86:b2:19:3d:2d:b4:a0:96:
74:39:8e:44:41:a3:c1:97:02:14:22:45:60:78:4c:dc:39:dd:
13:04:b0:95:33:a4:f1:00:af:05:da:46:fd:5d:f5:01:52:d2:
e0:ff:68:fb:40:fc:2c:8e:99:33:ff:ac:3e:dc:e9:00:af:57:
3d:e0:0c:96:e6:15:5d:9b:e8:ae:57:ed:96:fe:9e:2c:f6:8f:
a3:77:8c:ed:cb:ad:61:a5:4f:2f:80:e9:b7:f5:5b:64:1e:3b:
56:88:6b:83:20:a3:5c:02:71:41:51:7d:30:04:dd:88:26:b2:
31:3c:26:4a:7b:8d:c7:75:0e:0f:34:49:59:bd:d6:a7:0e:18:
5f:0b:c7:39:a3:61:f8:60:51:d9:0f:de:4c:c5:02:ba:dd:8d:
2d:b5:cf:b8:b9:0e:97:90:2a:1b:04:75:66:1a:b7:e3:dd:ff:
8d:53:de:fc:64:66:a8:ce:16:9f:54:52:33:f7:1e:ec:48:27:
48:48:09:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:01:35 2025 by rpki-client