Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
File: KJVkfZ_RahaU-AJuvod2DLUx6w4.mft (raw, json)
Hash identifier: FoDSmeUFgG86N0tJ4GzdFalBKYFk4k+XnIzKZ/T/kGA=
Subject key identifier: A6:F2:56:9C:F0:25:B0:F4:F5:4D:E4:D7:70:90:8A:FA:8D:C0:55:97
Authority key identifier: 28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
Certificate issuer: /CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Certificate serial: 0196CA60224608E4155DBD8E2A39FF7FD119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 16:00:19 +0000
Manifest this update: Tue 13 May 2025 16:00:19 +0000
Manifest next update: Wed 14 May 2025 16:00:19 +0000
Files and hashes: 1: 0HbGWRHIhLcfmf6kLXAQdepQymA.roa (hash: RFLCzQy5MXPE72eUiDWdR8f6HUuF1oAdf92PY+ZrIEU=)
2: KJVkfZ_RahaU-AJuvod2DLUx6w4.crl (hash: c7kp8Dsiz84yUwJAmFbxa6HEf7WrxxlgOOaJhSt3hGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 16:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:22:46:08:e4:15:5d:bd:8e:2a:39:ff:7f:d1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895647d9fd16a1694f8026ebe87760cb531eb0e
Validity
Not Before: May 13 16:00:19 2025 GMT
Not After : May 14 16:00:19 2025 GMT
Subject: CN=a6f2569cf025b0f4f54de4d770908afa8dc05597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:32:33:53:ee:e8:ae:3e:ac:aa:90:d2:a9:ba:
42:a5:25:53:24:3b:6c:9a:8c:84:ac:1e:e6:05:08:
dc:ea:6c:36:c2:41:07:c8:3b:50:42:e0:5b:56:10:
2a:dd:c4:30:aa:8e:23:5e:13:af:f8:2a:2b:12:a1:
6b:56:3f:39:36:bf:25:29:16:d4:4d:88:06:ec:0d:
9e:b5:45:d1:ca:4b:f2:65:2d:b6:df:2e:9d:a8:af:
ad:10:f7:ee:22:4e:89:68:bf:83:51:bd:33:22:66:
20:e7:c9:d8:49:ad:60:f3:f8:c8:0c:e4:15:a1:b8:
2c:69:36:b0:ff:ed:9a:b0:02:f8:14:3f:72:f7:1a:
10:dd:62:50:2e:a4:dd:4d:b5:1c:02:70:84:37:0a:
46:17:a7:86:da:c9:7f:10:af:3d:ce:db:64:fd:49:
14:32:af:d0:26:68:fb:5b:58:a7:5d:3b:af:1d:e6:
70:b2:82:35:ff:db:82:ce:98:c9:66:91:b6:55:89:
8e:4f:9f:58:85:cf:d6:86:cf:3e:3f:41:51:c4:02:
0b:9b:a5:25:52:e0:77:b6:5a:45:d6:af:9f:bb:98:
c4:fb:5a:5a:e8:4b:0e:3d:ae:20:d6:b1:92:61:c5:
4a:22:e0:5a:bf:17:c8:5d:67:e4:70:a0:e5:4a:b4:
ad:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:F2:56:9C:F0:25:B0:F4:F5:4D:E4:D7:70:90:8A:FA:8D:C0:55:97
X509v3 Authority Key Identifier:
keyid:28:95:64:7D:9F:D1:6A:16:94:F8:02:6E:BE:87:76:0C:B5:31:EB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVkfZ_RahaU-AJuvod2DLUx6w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/489576-4dfb-4a03-b0a3-eccdc0ce7d14/1/KJVkfZ_RahaU-AJuvod2DLUx6w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:52:91:a3:95:d4:33:51:20:8f:eb:3e:a1:0a:21:e7:88:9c:
b4:b1:c1:e6:55:dd:04:3b:7e:29:32:f8:a8:10:0e:51:86:8b:
e1:6e:37:5a:53:d3:ca:b5:37:01:4c:85:60:8e:bf:03:e9:34:
77:38:44:de:15:2e:55:7a:b0:28:cd:6d:31:d9:32:d6:60:14:
fd:4c:60:be:f3:5c:7c:9a:36:b1:38:6a:1c:74:1f:d9:61:d2:
1d:c8:ab:da:b1:bd:de:f9:fd:d5:af:6c:e8:12:a3:0f:0a:67:
39:af:5a:31:7d:c3:74:7d:bd:3b:57:29:4d:08:05:3f:e5:18:
17:7b:4d:ef:ba:fd:59:8e:bd:aa:4e:9b:dc:73:75:16:ba:eb:
4a:1c:9e:19:21:95:36:15:1d:e1:ca:3a:fb:84:d4:49:ac:70:
0f:d5:13:1d:2d:fc:da:74:a1:88:d5:3b:11:17:7c:a8:df:30:
bd:10:3b:a9:7c:70:38:b7:ae:e6:d2:6e:ed:47:1f:8e:c3:0d:
48:13:b1:86:d5:f5:9d:c3:3e:37:c7:19:dd:a6:70:e8:a5:40:
3e:ad:af:94:f6:1a:a4:fe:2f:48:9e:19:b6:c6:bc:1a:1f:28:
c9:ac:c7:50:64:3d:8b:6f:82:5a:85:46:0b:72:7a:24:f3:e8:
dc:89:cb:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:36:42 2025 by rpki-client