Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
File: kuDCRw6wpptO-lhbnLLAZ2ErN54.mft (raw, json)
Hash identifier: S+bcBcMg6ziZuccbxsm8GZP3NPZknBCAdg+CUtNIYtE=
Subject key identifier: F7:D2:98:5E:7F:38:A3:73:31:1E:82:02:2E:93:10:2C:47:83:A1:2C
Authority key identifier: 92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
Certificate issuer: /CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Certificate serial: 0196D8F813F91A158AB7FFB7AEC91DB39370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
Manifest number: 1545
Signing time: Fri 16 May 2025 12:00:58 +0000
Manifest this update: Fri 16 May 2025 12:00:58 +0000
Manifest next update: Sat 17 May 2025 12:00:58 +0000
Files and hashes: 1: PFjd2yWfyUqACNexTKNE7uw-CUw.roa (hash: 2N8aNvblU0PO6uAwaoOi3OFj+fZYGQD09CyRfcuaD9M=)
2: kuDCRw6wpptO-lhbnLLAZ2ErN54.crl (hash: NpOEzSi60SBe+rcytY2olf8cAA9oBoiiZjOIn5eLW6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d8:f8:13:f9:1a:15:8a:b7:ff:b7:ae:c9:1d:b3:93:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e0c2470eb0a69b4efa585b9cb2c067612b379e
Validity
Not Before: May 16 12:00:58 2025 GMT
Not After : May 17 12:00:58 2025 GMT
Subject: CN=f7d2985e7f38a373311e82022e93102c4783a12c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cf:77:42:7c:f6:85:57:bc:6b:ab:1f:45:a5:
c2:a9:a0:e9:3d:4f:dc:0f:32:18:26:56:ea:b2:b4:
de:c9:47:f0:22:c0:17:10:15:e8:56:a2:ae:26:dc:
0c:d3:08:8b:d9:f0:c3:89:71:7b:9d:68:d6:2e:8e:
64:c7:73:0b:f8:8e:92:7f:a5:db:e6:7b:a6:fb:69:
00:58:30:c5:0a:50:b2:ce:7d:13:ad:7e:34:97:55:
2f:fc:b2:c0:e3:02:5e:15:49:91:fc:49:a4:0d:d4:
68:ad:f3:72:49:73:69:9e:19:8e:76:51:05:c1:fb:
37:dd:ef:c7:aa:9d:7b:39:8f:36:fc:fe:43:32:40:
d8:1e:7e:5f:f1:20:5b:df:62:8d:02:c4:52:bf:04:
17:44:1b:a9:95:3c:77:8e:fc:74:43:b0:cb:fc:33:
de:37:a2:27:90:46:c0:53:cf:da:91:a3:0f:b6:f6:
e5:d0:87:46:00:fe:c6:8f:3f:1c:27:57:d7:06:4b:
93:ac:de:d9:77:73:0f:22:a6:76:bb:6a:1d:55:fa:
b1:a6:5e:24:58:e3:8f:14:42:b4:9b:d0:cf:c9:6b:
6c:83:b9:ff:6d:ca:02:80:71:26:b7:d6:f9:c3:a3:
c9:c3:2b:2c:19:c2:8d:87:16:79:14:fe:28:73:24:
da:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:D2:98:5E:7F:38:A3:73:31:1E:82:02:2E:93:10:2C:47:83:A1:2C
X509v3 Authority Key Identifier:
keyid:92:E0:C2:47:0E:B0:A6:9B:4E:FA:58:5B:9C:B2:C0:67:61:2B:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuDCRw6wpptO-lhbnLLAZ2ErN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/13b0cd-5992-4561-9729-b30fe058d162/1/kuDCRw6wpptO-lhbnLLAZ2ErN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cd:f5:e5:1e:3e:c8:bd:7a:65:41:74:51:2c:1d:66:4a:49:
da:3a:cf:d3:01:f5:c7:02:a2:5a:15:c5:2b:f9:e8:51:97:ea:
bf:28:85:8a:20:d7:49:32:13:c4:3e:06:71:6e:14:25:8b:22:
5f:38:47:b8:9d:5a:a5:e2:6f:b0:20:60:e2:a9:74:37:48:8f:
7d:f0:44:4a:d5:81:b3:68:fc:96:a0:d7:fe:80:21:69:0a:84:
67:df:f2:74:0c:55:c1:5d:31:7a:9e:fb:8a:f7:b8:19:e8:97:
53:da:16:75:c9:84:64:da:04:96:25:c7:99:c5:87:86:d6:d0:
71:17:bc:76:db:23:74:ea:cc:0b:57:7c:ec:49:58:eb:4e:d0:
f3:8f:18:26:6d:a5:25:37:2c:06:08:b5:3c:99:f0:2c:9d:ad:
e4:e2:82:6c:b8:5b:57:3c:b8:1e:89:92:2c:97:99:7b:20:52:
7b:51:da:e8:2e:21:2e:9c:2e:b1:34:e4:7d:38:69:5e:74:3b:
3a:4d:58:40:bd:82:0a:b1:b3:bc:d4:1b:4f:cd:b6:b4:9b:22:
1b:ec:b5:a9:ac:81:d9:b0:ae:9a:fc:59:d3:87:98:d1:ec:06:
76:55:e6:af:c5:3c:38:11:b3:38:ea:81:4f:6f:39:79:0e:33:
6e:21:59:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 19:20:59 2025 by rpki-client