Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
File: KslDUX9eO3R-dTAyB4mgNES0ORI.mft (raw, json)
Hash identifier: 2QZdxvSKcnneUojCnWyg2GsGIsuKkEGX8+3KP0t7D6w=
Subject key identifier: E5:D7:8A:2E:E8:FC:D6:68:76:BD:54:EA:86:04:08:3C:A9:88:E3:C8
Authority key identifier: 2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
Certificate issuer: /CN=2ac943517f5e3b747e7530320789a03444b43912
Certificate serial: 019674547BE13CF5C37A07E485AA30C9D717
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
Manifest number: 0DFD
Signing time: Sat 26 Apr 2025 23:00:15 +0000
Manifest this update: Sat 26 Apr 2025 23:00:15 +0000
Manifest next update: Sun 27 Apr 2025 23:00:15 +0000
Files and hashes: 1: KslDUX9eO3R-dTAyB4mgNES0ORI.crl (hash: y0Co8pqaoAMLFg1nUDvs0WsV0sAzexO1o/SEnd8WBuU=)
2: hRopNkKlsL4OwqAqAiJ3QXD2oug.roa (hash: NMdRr2OaOIcyhizjr1sKy4ahHmQgfdQZAiHU+pJ6knM=)
3: wXKkmEzVnT6wH-e4RUZ5ISziflM.roa (hash: 0ibg6oISPGaXyJMIkBYpRfjFyr2Dyc5Kyu9O/zaq9rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 23:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:54:7b:e1:3c:f5:c3:7a:07:e4:85:aa:30:c9:d7:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac943517f5e3b747e7530320789a03444b43912
Validity
Not Before: Apr 26 23:00:15 2025 GMT
Not After : Apr 27 23:00:15 2025 GMT
Subject: CN=e5d78a2ee8fcd66876bd54ea8604083ca988e3c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4c:43:84:9c:2f:4f:38:25:c3:8d:20:8d:e7:
fe:7d:b0:ae:93:3b:d1:98:5b:04:a3:1b:a6:dc:bc:
cd:f4:c4:74:9b:d9:73:9d:af:fb:b4:03:bf:1e:b5:
37:72:fd:20:b6:a4:bf:cf:2e:3f:1c:8f:f1:40:99:
87:e6:69:43:3e:e3:09:a4:0b:79:78:5e:59:59:d4:
4f:9d:43:d3:16:ce:7c:27:6c:57:0c:6f:a1:8c:65:
d3:f6:60:97:61:8d:c9:d7:95:6b:88:60:2a:66:2c:
fd:0f:19:0d:06:ac:c5:59:94:a7:bc:94:47:91:47:
8b:ae:ed:1d:d3:9f:5f:b5:3b:4c:12:53:22:84:14:
a9:29:de:3e:b8:e6:71:7b:9c:73:7e:a6:31:ad:16:
a1:e9:80:5e:51:39:b5:d5:a0:80:80:5d:67:58:de:
bd:ed:3c:13:9b:99:4a:3d:df:49:76:d1:f4:91:ff:
2b:48:f9:67:45:f8:52:08:d6:43:35:f9:0e:86:2c:
4f:0e:56:1f:2d:7e:80:f9:96:14:33:71:dc:fa:be:
73:30:22:52:78:26:98:23:1d:04:b0:41:cd:f0:40:
a4:63:b2:6a:2c:56:b9:d7:d3:f3:4d:db:f3:9b:19:
81:60:ca:84:15:d0:22:47:4c:b3:fb:e9:f4:d9:a9:
10:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D7:8A:2E:E8:FC:D6:68:76:BD:54:EA:86:04:08:3C:A9:88:E3:C8
X509v3 Authority Key Identifier:
keyid:2A:C9:43:51:7F:5E:3B:74:7E:75:30:32:07:89:A0:34:44:B4:39:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KslDUX9eO3R-dTAyB4mgNES0ORI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/19511d-537e-4241-a0d8-2d91cfd7aaf4/1/KslDUX9eO3R-dTAyB4mgNES0ORI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:32:31:af:d8:b7:bb:92:a2:98:58:fe:75:e5:bd:1b:04:d0:
cb:b0:37:3b:d5:e1:37:6d:6d:84:02:ee:55:6a:2f:ec:2f:43:
34:1f:75:21:0d:f0:56:88:15:31:27:87:e7:ef:e4:60:a6:87:
32:51:a2:c1:09:08:6d:fd:08:19:be:ee:b0:b8:a4:b4:68:c3:
0c:eb:be:7a:1e:10:a5:28:5f:5b:6e:8c:18:cc:b8:5f:f8:f2:
16:9a:e4:48:66:b3:4f:ac:8e:60:65:ef:38:8c:71:9e:9a:a1:
52:47:b6:bf:ab:44:f3:fa:a1:91:e8:b1:17:46:82:75:01:40:
e4:19:de:c3:5b:b3:48:0e:f9:a7:ea:fc:b4:87:5d:51:52:20:
92:6b:58:60:e0:3d:6e:57:87:70:77:49:6c:3b:3a:84:69:d8:
dd:25:53:14:ad:e4:c0:12:8f:ad:4f:d1:9f:b8:90:71:80:2f:
13:36:7d:50:8c:2d:ae:62:64:69:8a:11:69:ae:93:5a:ea:b8:
ee:1d:83:43:22:56:61:d5:10:8e:c6:62:83:7b:7b:f7:5b:67:
6b:67:8a:33:b4:c8:66:a7:22:61:ec:64:24:55:5b:9a:7b:ec:
41:82:ca:a4:ed:c6:8f:c0:cb:6c:28:76:5c:95:2b:cf:79:e5:
55:c9:e2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:08:30 2025 by rpki-client