Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
File: K6cIjjnnrYgXt9EOoqW4oJikegs.mft (raw, json)
Hash identifier: 6hJlKQj22u5lQjPr8zxrkvafO/e3u8krCS7U2cpbZzQ=
Subject key identifier: 4B:17:BE:72:29:0A:12:F9:13:56:38:B5:3A:53:59:B5:48:8E:3A:43
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 0196D7AE31BCF569C35A539461B0DBFA3EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
Manifest number: 1544
Signing time: Fri 16 May 2025 06:00:39 +0000
Manifest this update: Fri 16 May 2025 06:00:39 +0000
Manifest next update: Sat 17 May 2025 06:00:39 +0000
Files and hashes: 1: K6cIjjnnrYgXt9EOoqW4oJikegs.crl (hash: hWV6zeCNciuWRLdxHnuN2vajnNeYCOIvmM4NtVTA+CU=)
2: nFthzao_iVS1TdMPq7jAXyRRLuU.roa (hash: NXsb3alCPuDvQ88g31RvJaxIIcKhEe221c9ghi3si40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d7:ae:31:bc:f5:69:c3:5a:53:94:61:b0:db:fa:3e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: May 16 06:00:39 2025 GMT
Not After : May 17 06:00:39 2025 GMT
Subject: CN=4b17be72290a12f9135638b53a5359b5488e3a43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:67:a5:76:73:1f:6d:eb:fa:dd:31:a6:d1:4b:
1d:9c:d5:d3:d8:5a:1a:30:08:db:b9:20:95:5f:08:
47:3a:2d:17:aa:34:92:cf:0d:c1:dd:b7:4e:4e:28:
08:b1:00:98:70:3f:17:36:ee:4a:a0:21:48:b5:73:
95:f0:ac:5d:21:96:36:21:cf:7f:1f:19:a5:c7:07:
5d:0e:b7:b4:ab:c5:76:c0:ea:8b:77:7b:24:6e:11:
a9:e0:27:c8:b1:23:45:cb:71:91:a7:ad:bf:09:75:
64:ef:34:14:e0:76:5d:b6:99:05:c1:ed:d0:69:da:
6a:19:18:b6:53:c9:96:36:34:bf:a0:c4:4b:cc:94:
2a:6e:3f:c1:10:20:f2:7b:7f:41:03:1a:43:15:47:
3c:d4:d0:d1:27:62:8f:da:80:da:89:92:db:26:4e:
8a:92:c4:db:68:20:aa:92:af:61:da:85:c8:f6:cb:
d5:f5:11:2e:0b:1a:ff:21:91:db:f4:ed:cb:74:3c:
66:54:37:13:30:34:e4:31:43:80:da:72:87:f4:20:
aa:89:a2:a7:f8:6c:4b:0b:76:d4:4b:90:6f:96:6b:
bd:83:5a:b3:c6:ab:c0:ba:03:05:20:be:48:33:79:
8e:6c:f8:23:51:29:12:d8:d0:39:1f:a4:f2:e0:ee:
59:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:17:BE:72:29:0A:12:F9:13:56:38:B5:3A:53:59:B5:48:8E:3A:43
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:d0:7a:5b:d4:62:c2:c2:b8:a1:eb:2e:00:7d:20:4b:c8:b2:
f2:d9:16:86:c0:7b:53:6a:f9:3b:58:b5:05:1c:4e:03:28:21:
f1:ee:74:fd:ea:5c:ff:d9:b1:d4:6a:b8:3e:19:d1:e1:85:ff:
ca:cd:d1:3c:f4:7f:b6:a1:07:90:c5:44:ab:a9:3a:e9:c4:7a:
36:31:de:41:9e:c9:42:6b:3c:df:0f:de:aa:a4:12:81:2c:e3:
80:11:9b:81:8f:e0:a8:0b:d9:f8:85:13:90:f3:00:10:00:e0:
0b:02:5f:08:8f:f4:1f:88:4e:02:f7:d3:08:eb:17:12:41:27:
06:68:87:04:57:6d:00:67:25:d3:01:04:68:af:7e:e9:b8:06:
2b:04:65:fb:24:e3:56:85:f5:86:81:30:18:ea:89:8c:c6:43:
eb:bc:66:10:7d:60:af:b0:ad:4f:ee:ee:05:15:5d:8f:ce:37:
07:db:0b:7f:25:22:fe:b2:8f:ef:b0:ae:a1:78:00:e8:27:a5:
08:47:52:77:fc:98:e7:28:a1:16:d9:9f:28:90:7b:9c:2c:be:
eb:af:79:55:5c:6f:06:d0:00:c8:3b:2d:df:82:b7:ee:9c:88:
d6:3d:0f:b9:27:7a:c5:24:e9:38:a7:14:60:a2:13:3a:10:99:
67:a0:b0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 12:15:57 2025 by rpki-client