Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
File: kmyYtRBh80DM5OC0zjYc40q8L84.mft (raw, json)
Hash identifier: bxA7wEBsrUsvaTFruN0S2ZldZ5vA74te13OSFZ5gtRw=
Subject key identifier: 2E:A9:23:32:F7:AC:FD:61:59:11:A8:5A:A9:40:17:6A:9F:F6:C1:62
Authority key identifier: 92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
Certificate issuer: /CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Certificate serial: 019684A3BD887527A2DDAFE759DB0ECA5C2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
Manifest number: 0563
Signing time: Wed 30 Apr 2025 03:00:45 +0000
Manifest this update: Wed 30 Apr 2025 03:00:45 +0000
Manifest next update: Thu 01 May 2025 03:00:45 +0000
Files and hashes: 1: NSppdy32pK0kuht35Ks5xIRdV5s.roa (hash: e3lqo49PNkPXZsVtpcSw5P8QfGbIbaYvIeXnhh1mWBY=)
2: kmyYtRBh80DM5OC0zjYc40q8L84.crl (hash: VypCNMoyFNPz31oGaXB67RqVM8PrNjca7oHd2V5Ad3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:bd:88:75:27:a2:dd:af:e7:59:db:0e:ca:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926c98b51061f340cce4e0b4ce361ce34abc2fce
Validity
Not Before: Apr 30 03:00:45 2025 GMT
Not After : May 1 03:00:45 2025 GMT
Subject: CN=2ea92332f7acfd615911a85aa940176a9ff6c162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:12:f8:0d:9d:8e:4a:fe:5b:9f:1f:47:1c:da:
b6:ee:8d:67:48:c9:fd:ec:5a:a3:f0:14:8f:e7:7f:
a3:04:a0:75:17:c6:fd:19:0c:06:7e:f9:81:6c:b7:
be:2a:a2:32:34:68:c3:61:9c:25:c8:c2:84:ec:0f:
3d:5f:9c:55:ea:8c:77:24:16:22:03:7b:05:83:72:
07:aa:8c:5b:1c:ae:d7:a7:92:1a:bb:01:fe:77:dd:
ef:a0:c7:e7:b9:e6:ad:3a:f8:54:ac:f9:5c:51:f0:
06:e7:1c:94:f0:83:28:b2:86:34:eb:7e:1e:0d:e2:
6a:05:34:2e:da:a4:d3:93:54:c5:10:39:af:62:36:
e1:4a:20:f0:54:21:0b:6d:e4:e9:d7:c4:f6:fe:2d:
77:4f:06:2f:22:42:6f:c2:95:51:11:94:ef:15:ac:
00:e1:81:24:ec:19:69:43:9c:1c:6d:df:75:6f:f0:
c5:2d:ec:0f:27:39:9a:e8:8a:e0:59:73:ea:a0:44:
ad:e9:e3:e4:49:8c:67:ab:16:a8:9d:75:12:4e:54:
d3:50:95:84:29:40:4f:83:44:af:86:65:4e:65:0e:
32:38:a8:a6:e9:81:ee:db:41:2e:04:a5:e0:8c:b0:
a8:a0:22:63:dd:44:76:67:62:20:ab:c3:c6:73:ca:
da:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A9:23:32:F7:AC:FD:61:59:11:A8:5A:A9:40:17:6A:9F:F6:C1:62
X509v3 Authority Key Identifier:
keyid:92:6C:98:B5:10:61:F3:40:CC:E4:E0:B4:CE:36:1C:E3:4A:BC:2F:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmyYtRBh80DM5OC0zjYc40q8L84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05159a-4529-48fa-95e9-dc76feca94bf/1/kmyYtRBh80DM5OC0zjYc40q8L84.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a1:e7:b0:72:46:39:db:a2:10:72:c9:cc:bc:ce:f7:97:4b:
20:da:ca:38:52:0f:d8:3f:06:86:95:3a:8a:ac:60:13:b3:e4:
0f:3d:15:51:2c:e9:97:36:9a:84:1f:d5:0a:f0:ba:0b:12:15:
1d:68:1a:1c:a6:15:c9:e2:2e:7b:a3:37:91:ec:41:ef:a1:5b:
7c:f4:2e:80:fa:3b:94:9e:dc:c4:83:9d:c5:c3:b8:45:6a:1e:
fd:1c:13:b4:82:15:00:6e:5c:dc:18:a8:c2:2e:f9:48:cf:8e:
c4:6c:66:62:9b:2e:97:92:b6:43:e9:a3:2e:f3:cc:3a:02:5f:
1b:52:e1:90:45:6d:41:b6:74:4f:19:de:8e:27:8b:a4:4c:10:
d9:86:02:00:f8:9c:6a:cb:b2:3e:ba:21:9b:7a:ac:4d:dd:d2:
e9:6c:9a:da:30:5e:5e:98:15:85:11:32:24:7a:6b:0e:96:5a:
36:81:d7:1f:11:15:c2:6f:3d:b0:f7:07:3b:cb:34:aa:6f:5b:
a5:0e:7b:27:38:73:3f:37:5b:f7:5c:d1:9e:31:bc:32:4f:3a:
a9:ac:d0:7b:0d:78:8f:79:25:36:3c:86:30:c8:ac:4b:73:59:
29:98:67:d0:69:4e:6e:ed:b4:f8:34:b7:f1:20:a9:81:f2:25:
2a:18:de:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:55:20 2025 by rpki-client