Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
File: KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft (raw, json)
Hash identifier: 7pVmaii3BMaTMGS98bMAFXasxucizbCJB0nM0J5K+8c=
Subject key identifier: AF:BD:C2:E2:B4:B9:87:69:99:69:63:FB:4D:2F:06:17:56:F1:E5:75
Authority key identifier: 29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
Certificate issuer: /CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Certificate serial: 0196A277200163F5FF6A2F977703EA293097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 22:00:38 +0000
Manifest this update: Mon 05 May 2025 22:00:38 +0000
Manifest next update: Tue 06 May 2025 22:00:38 +0000
Files and hashes: 1: 023NXf0NRLbsgezphpzZHNxZ3e4.roa (hash: 5Oh3BvS9337aAFlKHkUHIB4jGr7DBQIIdxMScBWVcOU=)
2: KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl (hash: s+9e4IZXqYzQ6leRpOPtbcQ2yfWq+/s31X1Zh6BcjlA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:77:20:01:63:f5:ff:6a:2f:97:77:03:ea:29:30:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a39ebb4e57ff34853c76b0f5877ae8ab3c7cf6
Validity
Not Before: May 5 22:00:38 2025 GMT
Not After : May 6 22:00:38 2025 GMT
Subject: CN=afbdc2e2b4b98769996963fb4d2f061756f1e575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b9:b5:1c:a2:24:c1:14:03:d0:fe:10:de:ef:
6a:21:4d:e5:42:d5:c3:28:41:6f:a3:9b:94:88:36:
19:41:91:18:e0:eb:d1:cf:32:18:cc:7b:56:a3:5b:
2e:7f:42:12:f2:f6:6f:0f:41:aa:73:59:27:1e:c8:
df:4e:dd:cc:46:61:0e:47:c8:d0:b7:6d:ae:1e:e9:
24:6a:27:ab:db:52:a3:f0:14:cc:85:3d:ec:b2:0c:
eb:34:5c:8f:49:8f:28:ba:f1:13:57:38:c8:c4:33:
da:cc:00:d5:67:67:da:ee:2c:d7:5b:df:86:c6:f4:
f5:97:4a:9d:eb:8a:00:88:11:f3:6a:94:70:5f:74:
6d:d5:ad:d2:83:56:9b:20:81:ac:18:3c:e5:7a:82:
c2:dd:4a:e7:af:2a:17:3a:10:7d:bc:3f:88:1f:d0:
f5:21:aa:a6:a2:cc:08:6e:ab:5e:95:86:c3:c8:ee:
dc:78:06:26:0c:19:af:43:75:3e:1e:cc:a7:bc:37:
67:f5:21:ff:c5:5d:88:33:82:a2:5a:3f:dd:d4:00:
af:e6:1a:4a:37:37:1c:57:96:9b:cf:4c:d2:1a:04:
d9:a2:4f:63:42:ce:49:f3:f9:bb:d5:0f:d8:1e:4f:
06:44:f9:6b:c2:4a:68:8c:61:72:1c:2a:f6:2b:e0:
e2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:BD:C2:E2:B4:B9:87:69:99:69:63:FB:4D:2F:06:17:56:F1:E5:75
X509v3 Authority Key Identifier:
keyid:29:A3:9E:BB:4E:57:FF:34:85:3C:76:B0:F5:87:7A:E8:AB:3C:7C:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaOeu05X_zSFPHaw9Yd66Ks8fPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/2f97fc-5fa3-4083-9515-cd9da2d92e8d/1/KaOeu05X_zSFPHaw9Yd66Ks8fPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c8:3f:92:d3:e6:1b:a8:fc:ea:3e:7b:c5:d1:23:ac:15:83:
bb:72:93:d8:a4:21:9a:7c:8a:e2:d9:49:72:55:1d:8d:64:5d:
8f:8b:de:cb:26:4c:39:e4:b6:1f:51:af:5f:64:89:d2:eb:f8:
08:e7:da:50:08:30:4c:1c:f3:5d:1b:5b:1f:d1:8c:b6:29:ef:
35:ac:61:b9:12:ac:23:bd:7c:e3:e3:67:0f:4f:a3:ff:8a:6d:
ee:7b:b2:74:f1:d7:c3:87:ee:20:e3:85:32:87:6c:9b:a9:c4:
77:01:64:8d:16:72:57:b3:39:47:b1:e2:7b:c3:13:5a:56:8c:
7d:2d:28:82:2d:2b:36:90:05:6f:a6:a0:d1:16:58:69:48:b7:
e4:04:0e:6e:0e:b9:0f:91:dd:14:49:28:89:40:54:ed:3d:79:
2b:17:e6:69:0e:75:5f:e7:80:1a:5c:76:68:41:4a:c9:95:d8:
73:71:2e:84:bb:8b:62:89:02:f4:22:43:c1:84:9f:cd:35:28:
64:f8:5b:d7:e7:e9:b2:f7:8a:dc:6e:e3:f2:ae:a6:37:d9:71:
53:ff:ad:53:21:3e:db:b7:0f:69:91:04:f1:3b:05:48:6a:66:
b9:37:1d:0c:c5:16:c4:b7:95:82:f9:19:6f:d7:b2:d1:de:91:
97:97:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:20:47 2025 by rpki-client