Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
File: KH4cl_cfNVhn4_uHfyGqUTC2z10.mft (raw, json)
Hash identifier: YUEo3XmfepJjrYtG8Y6MjLz0O2fha0h94d/RElikyjs=
Subject key identifier: 81:44:0F:8F:2F:24:A6:01:E8:12:25:C0:30:53:92:BF:03:BC:53:D9
Authority key identifier: 28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
Certificate issuer: /CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Certificate serial: 0196C494FA0C4FEAFC432D4C1DADFAD28F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
Manifest number: 0982
Signing time: Mon 12 May 2025 13:00:19 +0000
Manifest this update: Mon 12 May 2025 13:00:19 +0000
Manifest next update: Tue 13 May 2025 13:00:19 +0000
Files and hashes: 1: HlpYPKfUTSJ7pDq2oQziu1OJN70.roa (hash: 2/lnsP1apTOPlsNH0YhFprUwFbQM2G9j3yZLF5vZFt4=)
2: KH4cl_cfNVhn4_uHfyGqUTC2z10.crl (hash: /HJE6KTJzn3Amc/Y8sFrRNMBQtdTAfXek1vj+5tNHzA=)
3: n82Q14Y2YDik1JFdwsQlLlmUXCU.roa (hash: Pqu0KJ3PErrtF3waClxiFcaMqimhO+E9Mo28nI/aapw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:94:fa:0c:4f:ea:fc:43:2d:4c:1d:ad:fa:d2:8f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=287e1c97f71f355867e3fb877f21aa5130b6cf5d
Validity
Not Before: May 12 13:00:19 2025 GMT
Not After : May 13 13:00:19 2025 GMT
Subject: CN=81440f8f2f24a601e81225c0305392bf03bc53d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:31:a9:5c:2a:16:cc:e9:d9:2e:53:b0:6e:6e:
e8:ae:b1:31:15:4a:8d:e5:69:eb:c4:4d:8a:64:2f:
7c:6e:42:84:16:36:43:a8:8e:f4:71:40:2a:03:a2:
b1:14:66:3b:17:76:70:b4:8f:79:8a:5a:77:6b:7d:
7e:60:7c:70:21:f2:80:aa:71:84:b6:82:d3:2b:62:
2a:6d:6f:fb:c1:95:55:1a:6b:f2:e0:ee:76:a2:45:
40:e5:d2:68:ec:1d:e6:64:d5:70:08:da:aa:2d:bd:
5a:a2:53:6f:56:6b:19:2c:f5:78:e8:c2:f4:e4:88:
97:4c:d1:c0:6d:f0:cf:92:1a:8b:ea:61:3e:28:76:
cc:ed:07:cd:46:33:cb:07:1b:73:30:16:8a:fd:94:
cc:5a:9e:1f:08:98:e9:9f:fa:4d:c1:a0:81:b2:bd:
0a:75:b2:71:39:64:8d:4c:58:70:f2:c0:de:a7:b3:
b6:84:6d:2a:29:30:bb:4a:89:35:ae:fa:c7:ba:b1:
c9:b7:71:6a:6c:ad:ef:5c:89:63:12:e8:28:d5:8e:
df:67:09:83:51:44:02:f9:27:38:9a:66:45:df:83:
74:d1:2e:5d:50:a7:bb:18:de:8b:21:b1:57:70:a6:
b8:1e:62:f5:03:66:d4:9b:74:6c:b0:b5:bf:e1:7f:
ed:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:44:0F:8F:2F:24:A6:01:E8:12:25:C0:30:53:92:BF:03:BC:53:D9
X509v3 Authority Key Identifier:
keyid:28:7E:1C:97:F7:1F:35:58:67:E3:FB:87:7F:21:AA:51:30:B6:CF:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KH4cl_cfNVhn4_uHfyGqUTC2z10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/af161b-ef51-44bd-8e0a-9eb3c682b009/1/KH4cl_cfNVhn4_uHfyGqUTC2z10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e8:8d:70:75:aa:d4:91:db:70:32:34:0c:67:97:9f:b7:b3:
26:6d:3e:51:61:df:3a:dd:f1:28:31:cd:0d:9d:60:c3:33:ac:
5f:33:81:84:4f:3f:ed:a0:16:0c:39:9b:ec:34:e1:ee:0c:26:
93:66:b8:03:d7:55:f3:6c:c3:10:b2:4c:ff:67:02:d7:b7:16:
84:0d:f5:0b:bd:65:c0:7d:17:e2:e3:3f:39:c0:99:7c:06:dd:
67:92:73:de:0f:3b:c5:9f:e7:7c:d2:c7:c4:db:53:4a:96:9a:
4f:bc:3d:1b:15:2c:80:74:65:5c:28:d0:d0:e2:20:9f:31:7d:
0e:64:a6:38:17:18:11:d7:85:6d:58:cf:5e:23:1a:a2:1a:2c:
f1:d6:82:b6:12:7e:56:7a:20:7b:22:56:81:dc:e3:4e:3b:b3:
6d:19:5b:16:75:77:d2:47:cc:c4:96:55:8b:de:45:ed:a4:fa:
0d:7d:46:bf:4b:e0:2b:16:42:4c:4c:44:d3:df:86:c7:a3:7f:
66:4f:06:12:a9:e1:9a:72:b6:e9:d8:56:6a:8c:28:03:88:03:
47:68:bd:1f:1b:00:8e:01:66:f9:a3:e9:89:5d:56:6b:0a:6e:
5e:f2:5f:6d:3a:44:7e:f8:95:71:98:41:5f:30:f9:20:b7:32:
b6:99:03:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 21:49:28 2025 by rpki-client