Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
File: kWAz3VV0R5Zb2u-LRySl5308Ba4.mft (raw, json)
Hash identifier: yXaNtAgiZaG46IEkJRahlkAxn9ttfYPf04yKOJgfyKM=
Subject key identifier: C9:86:0C:16:19:BC:51:CC:BA:74:7A:0C:B0:73:CB:FD:48:97:09:D1
Authority key identifier: 91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
Certificate issuer: /CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Certificate serial: 0196A01A8A35BF1174119097B814EB8AFF8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
Manifest number: 078D
Signing time: Mon 05 May 2025 11:00:15 +0000
Manifest this update: Mon 05 May 2025 11:00:15 +0000
Manifest next update: Tue 06 May 2025 11:00:15 +0000
Files and hashes: 1: BJ4VFOskRK3bBiJBpHiT_tAzA5A.roa (hash: UXn6LX6IgvE9frtcP3dcRwG57JPhrEUAXhgX1T/Y+PE=)
2: kWAz3VV0R5Zb2u-LRySl5308Ba4.crl (hash: asZXz8U8DYfHyIxEUsnqvqpY1I34NEyUUtMSLdqBLAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:1a:8a:35:bf:11:74:11:90:97:b8:14:eb:8a:ff:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916033dd557447965bdaef8b4724a5e77d3c05ae
Validity
Not Before: May 5 11:00:15 2025 GMT
Not After : May 6 11:00:15 2025 GMT
Subject: CN=c9860c1619bc51ccba747a0cb073cbfd489709d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:40:50:ba:87:ba:b4:45:29:e9:11:16:cb:
8e:e9:a1:f9:b8:93:69:eb:b8:21:1c:43:9e:4c:30:
97:76:fc:e9:5e:df:4b:dc:3f:37:08:f4:b5:f6:4e:
f5:98:83:74:55:a4:dc:c1:88:2e:1e:cc:d4:6c:c5:
43:5b:98:b5:e6:ac:07:27:d2:1f:f4:a4:4d:37:bf:
3d:c4:92:ee:94:89:e5:b4:1e:24:87:7b:81:a2:bb:
d5:8d:d6:6b:a0:62:ef:9c:a8:43:19:1e:12:83:ac:
82:2d:00:1a:43:72:97:89:46:cd:da:e0:d7:42:90:
51:c2:8e:49:c3:ed:a2:fa:02:d0:6f:f8:ec:8c:b6:
59:07:8c:32:26:3b:87:77:b8:32:33:e0:d8:d1:18:
fb:18:b9:2c:c6:c7:80:45:c7:b0:d1:97:fe:6e:3a:
82:59:6f:e4:88:9f:e5:a7:ec:58:6d:07:f4:ae:37:
34:a8:85:27:0e:7b:86:b7:55:40:97:be:13:ee:66:
11:39:66:ca:8b:13:07:1b:cd:88:7a:9c:41:e7:e6:
dd:af:f6:74:57:e6:d2:84:f4:cb:1b:e4:f1:e5:ef:
6e:7a:b7:7a:a7:f8:41:b2:54:b7:0f:52:29:81:30:
02:e3:6b:27:b0:0e:7b:86:be:ae:26:ba:3e:f4:a0:
b8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:0C:16:19:BC:51:CC:BA:74:7A:0C:B0:73:CB:FD:48:97:09:D1
X509v3 Authority Key Identifier:
keyid:91:60:33:DD:55:74:47:96:5B:DA:EF:8B:47:24:A5:E7:7D:3C:05:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWAz3VV0R5Zb2u-LRySl5308Ba4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bc51f4-61f2-4faa-a02a-602936539405/1/kWAz3VV0R5Zb2u-LRySl5308Ba4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d4:56:cb:62:ab:ac:d6:3b:0e:b7:51:60:4b:c3:da:d0:1d:
0a:d3:dc:a6:a8:48:b4:36:49:77:f1:19:69:e0:62:28:ec:fb:
17:88:e7:5c:ba:54:96:49:53:b4:d6:6f:75:90:7c:f2:72:97:
84:1b:ca:07:d7:f2:ae:b7:f4:ee:80:21:ed:b4:47:fa:36:91:
23:fd:4b:de:55:a6:0b:90:cc:49:5f:64:1c:39:78:ef:d4:da:
41:63:ee:96:49:c0:9f:61:75:b1:86:ed:43:af:9e:04:02:e9:
b1:1f:2a:a3:55:73:bd:7f:46:4f:e9:63:1f:af:6b:58:e1:bc:
1e:5c:c5:3e:19:72:03:fb:a6:66:cb:ed:de:c5:c0:ed:b5:17:
90:44:4a:ae:42:44:2a:d5:c5:7f:58:13:50:37:dc:74:0e:f0:
7a:a0:e1:b1:fc:e7:28:c1:65:bb:a5:98:38:28:f1:4e:bc:41:
2b:21:7d:ff:7e:4c:ba:e5:cf:68:e5:b4:1b:6a:1d:42:f7:fe:
6b:d9:47:77:85:9f:f1:d1:57:fa:61:0e:b6:04:40:b0:ae:f1:
d8:06:f4:bb:1f:c6:32:45:4c:4f:93:94:71:83:ad:f5:42:44:
cf:a9:7e:9f:e4:09:09:cb:12:fe:9d:21:3c:bd:db:dc:f6:62:
41:9c:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:08:21 2025 by rpki-client