Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
File: kkQvHPx17REAE4d5MKKdhvieu7Y.mft (raw, json)
Hash identifier: I5NLL01GWc3/md2L7Z+JP/1qB75mREDm/FaxLS4dkTw=
Subject key identifier: 22:2E:DE:07:4C:B3:10:E5:51:97:7F:28:87:B9:FF:7F:2F:26:4E:53
Authority key identifier: 92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
Certificate issuer: /CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Certificate serial: 01969CACCBF5CA7C8333083E68F0E287E9FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
Manifest number: 0BEF
Signing time: Sun 04 May 2025 19:01:32 +0000
Manifest this update: Sun 04 May 2025 19:01:32 +0000
Manifest next update: Mon 05 May 2025 19:01:32 +0000
Files and hashes: 1: kkQvHPx17REAE4d5MKKdhvieu7Y.crl (hash: EyNGv0NR/Hq9qFw5XyaAmFtHZeRI72S8+t8VsKOscJs=)
2: qZc8LbpaDAe8YC_wNESeZVdptts.roa (hash: rHoCkpXeQIISTyOKdyHTZYhLfz5LjhLjx8VWRXWEabQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:cb:f5:ca:7c:83:33:08:3e:68:f0:e2:87:e9:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92442f1cfc75ed110013877930a29d86f89ebbb6
Validity
Not Before: May 4 19:01:32 2025 GMT
Not After : May 5 19:01:32 2025 GMT
Subject: CN=222ede074cb310e551977f2887b9ff7f2f264e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1e:39:ae:45:4d:c7:2d:1c:82:42:b8:4d:3a:
79:d9:17:42:92:0b:36:10:d0:71:39:ed:2b:d8:76:
19:cb:43:36:78:bc:0d:31:00:9e:a5:61:ea:b7:53:
6b:53:75:8c:19:5f:20:96:3d:ec:f5:a7:5a:96:1a:
0c:d9:13:3d:35:86:42:2e:c9:98:62:ab:f9:45:d8:
26:cc:6c:9c:ee:19:4f:5a:fd:4f:3d:3c:7a:36:08:
76:1f:bd:e3:74:bb:95:1f:cf:de:11:68:dc:4b:e3:
ab:a0:95:aa:f0:5f:e4:b3:18:11:0f:0c:ca:b9:dc:
98:ce:9a:24:cb:6b:15:b1:40:47:f2:93:12:53:e7:
0b:fe:2d:f8:a1:7b:fa:6c:b9:b8:d0:0e:53:71:eb:
cc:64:cd:a1:4d:1c:12:b0:6e:48:11:96:66:03:6f:
d8:68:e6:cd:ee:d9:93:30:c1:1e:0b:ce:ec:98:96:
b9:34:af:81:80:51:1b:b1:82:bc:ce:b7:51:c0:de:
f6:e6:82:f7:78:2c:52:e8:3e:f2:be:c4:ae:5a:c4:
7c:91:bb:59:ef:ed:f1:93:a1:42:a4:86:05:41:4d:
81:39:de:11:0c:e0:e0:9e:07:80:12:41:4c:a8:78:
36:66:2c:48:0f:84:df:8a:f4:27:94:85:b4:4c:f7:
31:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:2E:DE:07:4C:B3:10:E5:51:97:7F:28:87:B9:FF:7F:2F:26:4E:53
X509v3 Authority Key Identifier:
keyid:92:44:2F:1C:FC:75:ED:11:00:13:87:79:30:A2:9D:86:F8:9E:BB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkQvHPx17REAE4d5MKKdhvieu7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/9af881-ba0d-451d-a69b-00f96ffcf734/1/kkQvHPx17REAE4d5MKKdhvieu7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:6a:4f:93:d2:88:b9:5d:9a:af:a5:e6:66:ee:33:bb:ca:3b:
6e:78:d0:7e:5b:3e:32:5d:76:b6:93:b8:2d:c1:31:23:1c:5f:
cc:da:7c:70:0d:f1:42:7f:98:8f:98:61:92:ce:90:9a:cf:36:
bb:fc:6f:00:51:c6:96:4c:64:d0:7b:9f:2e:1f:82:9f:de:65:
64:63:35:2b:51:6d:a4:c5:4a:a7:cc:7a:bf:7f:cf:d4:52:f7:
5a:89:95:45:ce:f2:e2:4f:da:32:63:e5:78:5c:54:c4:cd:41:
46:80:ca:cb:0e:c5:3d:ca:0e:93:e8:60:40:01:5e:e7:03:15:
f1:9b:c7:05:28:91:c6:15:73:77:d9:d7:28:9a:8b:57:05:58:
da:1f:2f:aa:4f:73:5f:9d:1d:f4:32:58:a0:53:2d:4e:42:9e:
ee:02:47:7f:ec:a1:b6:9d:6a:f0:0e:4a:14:d4:43:3f:bb:6d:
f5:26:02:af:89:73:e5:e6:e4:40:64:9d:35:fd:bf:5d:18:ee:
f8:13:93:e9:e8:84:d6:f1:5b:16:c9:d6:b1:35:99:ec:29:9a:
89:8d:7d:81:11:3a:35:e7:f3:e2:53:6a:37:92:28:4a:22:0b:
43:d5:88:fe:55:55:53:97:c9:d2:01:64:f9:a2:15:08:ec:ec:
f4:05:ca:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:44:51 2025 by rpki-client