Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: yZY3Y9GmDAu4J6fUo73IqRcnXG6IsVLK8B0uQpwkCnk=
Subject key identifier: C6:B0:C0:8F:FE:48:94:16:C4:AA:9F:4B:4B:67:39:00:69:47:A7:49
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 0196CA605EF5F1767247F0FF64AC3CB8E1A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1539
Signing time: Tue 13 May 2025 16:00:35 +0000
Manifest this update: Tue 13 May 2025 16:00:35 +0000
Manifest next update: Wed 14 May 2025 16:00:35 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: qdKYKlNy8LDop8tHlDghdSnyFx9EhIvqFrGznt+5N8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:5e:f5:f1:76:72:47:f0:ff:64:ac:3c:b8:e1:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: May 13 16:00:35 2025 GMT
Not After : May 14 16:00:35 2025 GMT
Subject: CN=c6b0c08ffe489416c4aa9f4b4b6739006947a749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:aa:02:a3:37:22:13:06:0c:7d:6b:2f:41:
93:b5:da:fd:39:2e:45:e2:06:99:ac:d2:29:07:a9:
83:19:97:73:08:f1:cc:02:da:1a:ec:05:04:c2:60:
40:3d:5b:70:d4:35:b0:92:ed:6c:34:69:78:54:1d:
d9:2d:b1:7f:15:27:a8:7f:e9:3c:03:e6:d6:77:29:
b0:f2:e2:a2:aa:f2:f9:1f:ad:8b:d5:af:0f:4e:be:
e1:26:54:3f:d0:cc:05:9f:c8:96:10:6f:55:1e:2e:
46:70:06:51:c5:d9:5b:0b:fb:25:64:ce:dc:ab:fa:
3d:af:22:73:8b:97:75:4f:7a:a2:d1:1f:8a:c0:4e:
5d:22:24:ed:14:c0:8a:3b:fc:07:f2:2b:4d:0a:fc:
86:b5:11:01:73:59:54:88:c3:a6:0c:08:15:bd:a7:
45:e9:e6:3b:ec:df:41:6a:c6:a3:ec:2c:fb:35:ea:
83:55:56:4c:8b:f3:f8:d4:b6:d4:ea:c3:4a:d5:5c:
a3:75:a2:f0:cc:37:c2:e5:dd:e7:6b:be:bc:1b:26:
a9:1e:d2:98:7d:4c:6e:8b:2b:95:2e:c7:83:83:d5:
40:b1:b2:9c:99:8f:dc:96:d6:7b:76:10:c2:cc:20:
b5:b7:6d:59:fa:03:ee:bc:6f:1b:e9:b6:df:ed:30:
92:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B0:C0:8F:FE:48:94:16:C4:AA:9F:4B:4B:67:39:00:69:47:A7:49
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8b:06:f9:8c:c9:0e:cd:bf:ab:14:7f:3c:8e:34:28:75:ba:
96:b6:a4:4f:55:d1:d3:a7:5c:89:f7:3a:6a:65:0a:f1:03:55:
e3:fd:a9:79:6a:f9:c6:d5:96:0b:a8:13:ab:6c:9a:a8:77:db:
17:ff:87:46:f5:f1:ab:1e:9f:ba:b1:7a:ef:9b:f6:12:8e:97:
e9:da:bf:0b:48:38:bd:c0:8e:c7:6b:0a:5d:f0:87:0e:b4:fc:
2f:fe:14:26:37:13:66:d1:c0:90:41:f9:6b:5a:84:22:66:08:
e9:16:f3:ba:6d:7c:90:2c:e3:dd:d9:07:25:b2:34:15:22:1a:
83:bc:c1:c1:bb:e8:17:86:9b:5c:00:ec:19:51:81:02:f9:a7:
22:c9:e8:cf:d9:cb:3b:22:13:79:fc:6b:67:17:ef:49:31:fd:
f3:2d:51:a6:02:d6:47:14:99:98:e9:aa:39:e7:74:d3:32:0c:
0e:29:d4:89:57:7e:cc:a2:21:52:90:0b:8b:96:b8:5a:81:c4:
c7:53:af:8b:6a:ce:9c:4b:ce:12:e4:ff:1c:95:ce:8c:2c:53:
10:f0:fe:eb:66:81:3c:1f:2b:29:11:d2:b0:31:3a:f1:7c:06:
a0:ee:b7:2c:0a:5d:2f:e0:f8:86:7d:2a:9f:6d:35:3e:64:e0:
55:2d:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:11:29 2025 by rpki-client