Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: yOwKACr+QM+urYo/o5pk9kLpPe/Oh7xyxf8kFhV2gOY=
Subject key identifier: D6:12:0C:2F:03:3A:91:2F:05:59:A9:07:F3:DE:58:55:F0:7C:1C:17
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01967454AE0BD499C7FB3A2DDDAAC3AAA23B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 0D35
Signing time: Sat 26 Apr 2025 23:00:28 +0000
Manifest this update: Sat 26 Apr 2025 23:00:28 +0000
Manifest next update: Sun 27 Apr 2025 23:00:28 +0000
Files and hashes: 1: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: FueOWKewbfbY9G88FiQgCnDT8mHXimr5Fz+HXHoCH4w=)
3: OMy-NMj_4HIKuan-FU4-4R9F2VI.roa (hash: VHuQhVgSLMPab+0JI81gOVigOiNulGK5eNNR2LqAh78=)
4: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:ae:0b:d4:99:c7:fb:3a:2d:dd:aa:c3:aa:a2:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Apr 26 23:00:28 2025 GMT
Not After : Apr 27 23:00:28 2025 GMT
Subject: CN=d6120c2f033a912f0559a907f3de5855f07c1c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:93:b4:c5:48:af:96:de:16:9f:f4:17:fd:3f:
dd:35:44:45:3e:51:e5:6a:f0:5e:c5:56:5e:2d:84:
76:8f:ee:48:b2:4b:6a:f0:7c:7d:a1:57:63:92:a8:
fb:96:1a:4b:fa:35:76:ce:9f:fe:aa:c5:be:ba:82:
0e:dd:b2:27:27:5c:88:d0:e2:1c:74:9f:49:6b:24:
10:37:b5:a8:14:cd:7c:7d:96:8a:c1:36:b5:71:01:
48:42:8a:b6:cc:c9:0f:c9:64:c9:f8:e6:ee:08:00:
00:cb:f1:4d:a3:b4:f0:c6:57:1e:8e:d8:a5:75:c5:
ad:13:32:79:e4:b1:fd:e3:ae:3c:16:4f:82:41:86:
f9:f5:96:89:5f:80:65:0c:b4:2d:3c:4c:38:4c:8d:
c9:5f:fe:93:49:e1:0d:75:20:c3:b6:75:cd:39:37:
5f:8b:cf:92:15:6c:59:f9:f5:4e:06:3e:c4:a3:17:
be:3a:98:0d:3d:b1:7d:73:0c:1b:58:f7:ec:22:f1:
71:57:f7:fd:07:59:0b:32:b4:b7:72:21:29:3d:26:
eb:23:65:67:0d:81:61:fd:4d:f8:4f:03:71:fd:a9:
6d:20:81:51:37:9d:cc:ce:e6:18:39:da:c8:88:c0:
e5:03:ba:cd:c2:fd:50:b3:7d:80:1c:dc:aa:cd:fb:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:12:0C:2F:03:3A:91:2F:05:59:A9:07:F3:DE:58:55:F0:7C:1C:17
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9b:bd:ef:8f:c8:c9:7d:90:c0:85:9c:23:ef:10:e8:6a:9c:
24:6d:2a:64:1b:8d:f8:4b:6d:7a:87:89:9c:8b:6b:82:ca:9c:
50:1a:ec:63:c6:a8:c0:89:25:90:f6:01:d7:ef:58:3c:9b:49:
9d:1b:68:e0:4c:e7:cc:c8:9c:c1:b8:22:56:55:de:60:4e:4c:
1c:a7:e1:3b:7f:ae:3f:6c:c9:60:d6:17:59:7e:6e:a4:7d:a7:
d6:ce:e5:aa:71:74:be:84:7d:b7:ff:67:06:b3:38:6c:a6:8f:
07:6a:08:20:44:7b:6d:53:0c:ab:c1:24:30:f7:c0:ce:6f:d2:
9d:2f:39:e0:0a:cc:6c:c4:32:ef:ca:47:b9:da:5f:b2:82:e1:
23:38:e0:cf:7e:ad:2f:ea:90:6a:92:2d:87:11:76:cd:03:6e:
64:82:cc:eb:e0:fd:7f:72:db:b7:ed:e2:6c:92:57:05:de:9e:
60:7d:b3:84:48:6b:67:11:8e:48:1e:37:1c:74:55:8e:c4:de:
88:a5:15:46:78:20:c9:f5:6e:31:e1:e1:72:71:e5:78:05:c8:
b3:5d:51:90:69:4e:f1:67:81:4d:2e:22:78:72:b1:70:3a:72:
56:e5:b2:80:03:e8:6f:26:16:a8:4a:23:2e:85:52:be:cf:57:
7b:f6:2a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:17 2025 by rpki-client