Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
File: KBeCQ6CGawkSctHh60UeceQTuZo.mft (raw, json)
Hash identifier: n735Pvtf/MI9SHJd7J63Oozh4q/CrsVWSisaHGFNOJs=
Subject key identifier: 52:38:24:8B:CD:70:5C:AD:D2:AE:64:8F:59:F6:44:20:38:B2:4D:43
Authority key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Certificate issuer: /CN=28178243a0866b091272d1e1eb451e71e413b99a
Certificate serial: 0196B8C816C219F74834B9073E753BE69359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
Manifest number: 0574
Signing time: Sat 10 May 2025 06:00:42 +0000
Manifest this update: Sat 10 May 2025 06:00:42 +0000
Manifest next update: Sun 11 May 2025 06:00:42 +0000
Files and hashes: 1: 9b2tSpH9I_YDuaAeaEvrPjYTSYA.roa (hash: CQ+HO3gorMuwRRve3+ZDJ9LD5LzYPKSs3rQmvQ37N3I=)
2: KBeCQ6CGawkSctHh60UeceQTuZo.crl (hash: kIKCYK5jkIT1MLdzzE0+1sUkNsXZGYyb+KYPKYMeiRo=)
3: aXUaEE4Rc3FPn930-LUjFOMalKE.roa (hash: k4xvVX6CkM3fxWMUWFx76Dj4mkNerIxARf8E+Dyy4rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:c8:16:c2:19:f7:48:34:b9:07:3e:75:3b:e6:93:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28178243a0866b091272d1e1eb451e71e413b99a
Validity
Not Before: May 10 06:00:42 2025 GMT
Not After : May 11 06:00:42 2025 GMT
Subject: CN=5238248bcd705cadd2ae648f59f6442038b24d43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f4:cc:26:58:6f:ac:66:1c:2f:5f:cb:a8:47:
87:f5:f2:cc:e6:a0:86:89:73:2b:ca:27:2a:69:89:
5f:3c:60:41:e8:93:09:b4:5e:14:09:66:60:07:75:
a0:cb:de:aa:7e:09:32:45:46:30:05:7f:fb:2b:8b:
c8:ad:73:1d:6b:a3:aa:33:62:97:02:80:22:9b:d8:
81:74:39:ef:5b:9b:80:26:67:75:27:c3:71:5d:b4:
e7:ad:c4:ac:07:e1:c2:65:61:89:b8:bb:d1:11:27:
d0:fc:2f:9d:db:72:27:9b:61:8e:30:0a:46:82:3e:
b8:47:72:0a:db:c0:d0:cf:00:82:00:dd:f8:c7:8e:
a2:b1:f0:2e:34:8e:55:d1:b3:05:95:67:bf:aa:64:
a9:47:bf:4f:b5:49:35:be:f1:5a:ed:04:bb:d2:97:
f3:97:35:9e:af:5f:dd:18:96:07:6d:96:93:c1:e8:
47:72:53:61:57:f9:e3:c2:c1:50:82:80:a2:07:8c:
58:36:04:0b:23:f3:a0:3a:cf:65:e5:a2:64:a6:b4:
60:76:6f:de:55:20:9a:5c:77:b4:b0:10:8e:4e:af:
d5:6a:8c:5c:b1:07:29:b2:8d:85:50:25:3c:4e:a1:
f4:66:6d:38:f9:00:6b:42:0d:29:eb:c9:c2:6e:e5:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:38:24:8B:CD:70:5C:AD:D2:AE:64:8F:59:F6:44:20:38:B2:4D:43
X509v3 Authority Key Identifier:
keyid:28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8a:45:68:00:9a:cd:17:5b:ef:b2:8c:0f:f5:11:09:e4:39:
d7:2c:4d:14:11:a2:77:bf:e6:c4:5b:73:87:33:8d:d3:fa:a3:
4e:b7:48:f6:36:61:85:40:21:20:d3:05:23:dd:41:f9:5e:46:
61:62:d4:af:25:ed:33:29:b6:0a:9b:47:5a:a6:f0:7b:00:55:
21:84:7d:a1:9d:58:0a:33:2a:4a:1d:1e:71:96:c0:45:bd:aa:
a4:71:a2:1c:df:25:04:7d:72:b0:37:b9:ee:56:01:fb:6e:be:
a9:71:a5:c1:6e:46:5f:7a:f2:57:3b:5b:79:00:1d:db:3a:40:
5b:ea:5a:cf:26:13:5e:4f:14:14:c0:bb:69:d5:d4:ad:a1:3f:
5a:90:b0:bb:d7:82:d6:7b:1b:cc:37:17:1f:1a:4d:3b:09:a2:
e8:12:fb:ee:fe:95:25:2d:38:47:03:92:9e:e8:95:80:4c:11:
87:f5:54:f2:78:85:c5:ac:8f:01:9e:db:e8:81:48:53:2a:94:
c0:54:c2:87:b6:c7:05:c8:e4:16:07:25:b7:67:00:a5:68:04:
cc:cf:1e:10:ae:bc:28:ba:72:0c:d8:3a:44:7a:9b:da:d6:77:
44:54:52:e7:84:f1:5f:f1:da:a6:ec:0d:b7:b7:82:c6:a6:8f:
91:41:52:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:39:58 2025 by rpki-client