Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: GoWLpUOCyyJcJJLtC5dDHvOx39hIDSF8ct2rFatTQ5w=
Subject key identifier: 20:F2:F2:8B:E3:4B:1F:03:8F:5C:26:23:32:05:AF:35:EE:9D:B8:5C
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 01968BB9045E8D6A7A700DB14B1E61F4EEEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 06F0
Signing time: Thu 01 May 2025 12:01:20 +0000
Manifest this update: Thu 01 May 2025 12:01:20 +0000
Manifest next update: Fri 02 May 2025 12:01:20 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: 65pmwN+Uv78ZHVMH9qLJDUgaYGtkiiD/dTfFPLqPi3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:b9:04:5e:8d:6a:7a:70:0d:b1:4b:1e:61:f4:ee:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: May 1 12:01:20 2025 GMT
Not After : May 2 12:01:20 2025 GMT
Subject: CN=20f2f28be34b1f038f5c26233205af35ee9db85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:5b:70:67:e0:7d:39:09:8d:d8:db:34:fd:
5c:6e:29:56:78:00:9b:c1:70:dc:79:b1:64:36:2c:
d0:d5:94:9c:f2:e2:77:89:fa:d9:7a:b3:b6:6d:e7:
d4:2a:68:c4:3f:7a:7c:ac:5c:8f:c7:2b:1c:2f:47:
b7:c9:57:3c:3c:ea:fd:30:81:66:33:20:2a:e1:23:
f6:0e:c2:b0:01:e2:bc:e5:47:c2:a3:89:e2:69:65:
22:85:3b:b3:70:e8:b2:6e:6d:ee:86:8e:46:2e:77:
14:91:fd:d8:4e:e1:c4:4a:48:9c:df:b9:b7:9f:96:
fa:5f:10:54:98:4f:dd:4f:3c:df:ec:45:9b:09:92:
7a:91:4c:09:a4:ac:0f:5c:52:fe:9e:a4:a9:34:7e:
82:e3:a9:f7:52:ae:2b:d2:74:b1:21:49:ec:8e:0d:
d4:bb:ae:d8:39:6f:e7:8e:65:26:71:bf:db:f6:8e:
1d:81:ef:51:07:ad:00:fb:a2:2c:b9:38:62:42:ac:
73:ca:21:ff:b4:f4:0e:5a:ee:77:27:ec:5a:b6:da:
8a:8a:4c:89:52:47:6a:42:f5:72:f0:c8:7f:88:b5:
bc:cb:15:ca:be:cf:d7:d9:a5:a1:00:78:00:a8:dc:
02:2e:6d:1a:4e:49:87:e4:98:20:10:0e:37:ff:59:
47:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F2:F2:8B:E3:4B:1F:03:8F:5C:26:23:32:05:AF:35:EE:9D:B8:5C
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:52:75:ed:3a:1f:25:3b:9f:85:fa:b3:f1:ba:3a:c6:41:a0:
ae:3d:13:50:d1:e0:74:9d:72:d4:fc:73:f8:8d:87:55:7b:6f:
24:9c:2b:9f:cf:55:04:c8:87:2b:8d:c9:7c:36:ed:08:3d:ed:
18:76:7a:90:80:d2:20:dc:5a:ca:bb:29:51:01:e4:af:d7:de:
98:3d:7f:9d:a2:0c:cf:61:e1:cb:69:b5:a2:11:3d:4c:35:cc:
56:fe:36:91:91:0f:80:9e:9a:3d:58:c7:bd:8b:db:98:27:88:
d2:2d:68:bc:4a:2a:69:b5:75:48:13:15:fc:fc:8e:1f:57:60:
ef:51:b9:2b:ac:bd:8a:c4:ff:23:83:f8:ad:ae:ce:9d:3c:53:
7b:5d:6d:d5:a6:ac:bd:9a:70:3c:2a:7f:75:d7:88:a7:7a:0c:
98:53:eb:73:92:99:65:ab:b7:87:e2:34:9e:ca:25:6b:a2:24:
4c:7b:de:49:33:b9:51:c6:60:79:2a:34:de:56:ea:c8:d0:66:
f2:55:66:03:28:2a:6a:b6:c8:c4:34:67:23:36:f9:35:a1:d4:
0e:20:f5:0f:5b:d5:51:ad:8f:2d:a5:8e:e7:15:a8:f5:32:c2:
46:f0:89:b2:5c:92:01:70:af:51:d2:42:20:62:6f:cb:ef:2b:
4f:a4:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 21:57:48 2025 by rpki-client