Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
File: kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft (raw, json)
Hash identifier: 0TsNgJeF7/SlWmYICXdkipZj0mb0o4A71K5M2BE2OZ4=
Subject key identifier: 59:FA:7F:DC:69:80:C9:94:9E:2B:6D:CA:77:F2:D0:98:D4:5A:32:0C
Authority key identifier: 92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
Certificate issuer: /CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Certificate serial: 0196B96CB78A256F1E333E99635FD549314A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
Manifest number: 0425
Signing time: Sat 10 May 2025 09:00:31 +0000
Manifest this update: Sat 10 May 2025 09:00:31 +0000
Manifest next update: Sun 11 May 2025 09:00:31 +0000
Files and hashes: 1: URATm4jCOgD3H4rtfNMfks3a2e4.roa (hash: nWiO/SjK1FVtNWytxucXj9X6RnD6dSqkVKhRqQz1kHk=)
2: hOs9nIaVlgbTGSRX2cF-L9A292Q.roa (hash: 2H7Eh3LEgJqf2jRLorxXZOs950af5ymfMFZuDGRu8KE=)
3: kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl (hash: 2FeSQVMJeKWsM3QAbGLT6yI2hbEEmSX2wPX7ui1+6g4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:b7:8a:25:6f:1e:33:3e:99:63:5f:d5:49:31:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926587a7c42c261fa254b0b82e7bc0719cc64812
Validity
Not Before: May 10 09:00:31 2025 GMT
Not After : May 11 09:00:31 2025 GMT
Subject: CN=59fa7fdc6980c9949e2b6dca77f2d098d45a320c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:63:34:0c:fe:7b:eb:5c:cc:5d:3f:96:4d:
50:cf:c4:8f:24:d1:57:f9:86:e2:49:af:e7:2c:3c:
a6:8c:05:ba:38:40:a9:ba:68:50:13:af:5c:e5:d0:
93:b1:af:21:85:5b:f0:c7:40:fe:cd:3d:f7:1e:ce:
80:f0:37:3e:d9:58:2c:28:a6:5a:49:f2:b0:d7:38:
48:82:ed:1d:2d:96:e0:db:b1:fa:4d:2a:04:0a:77:
32:18:24:3a:8a:43:9b:c7:42:5c:f1:a3:2f:0f:fa:
0b:ad:a0:f8:b6:35:53:8f:6c:bd:08:c6:d4:64:24:
8f:d9:93:c8:6d:3d:b5:6c:10:6e:a4:e9:03:6b:b5:
d0:8b:d2:83:6c:c5:11:ca:fc:e7:c8:55:94:e9:b9:
15:d0:41:1f:04:1e:b9:0b:51:64:55:55:e2:3e:6b:
8c:3b:51:f5:8d:82:9f:f0:ae:71:e8:24:29:8f:cc:
03:36:4a:81:8c:6b:48:8c:6a:46:6e:7e:00:dc:a0:
00:30:fe:83:d6:6d:97:01:30:3f:3d:80:ad:cf:16:
0b:5c:cb:04:a3:88:9e:53:c0:5f:fd:f8:54:e4:b5:
a7:62:c2:79:a2:f7:3c:56:31:41:68:1d:fe:08:dc:
ba:9f:1d:b4:81:fd:39:32:a7:1e:01:88:60:86:81:
dd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:FA:7F:DC:69:80:C9:94:9E:2B:6D:CA:77:F2:D0:98:D4:5A:32:0C
X509v3 Authority Key Identifier:
keyid:92:65:87:A7:C4:2C:26:1F:A2:54:B0:B8:2E:7B:C0:71:9C:C6:48:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmWHp8QsJh-iVLC4LnvAcZzGSBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/bd2005-fb7b-4052-b3f2-88fa3b6eb006/1/kmWHp8QsJh-iVLC4LnvAcZzGSBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ca:1b:53:5f:4f:1a:f1:9d:2f:90:7d:70:93:bc:b9:ee:5f:
d1:d0:53:be:60:1e:cf:3b:df:65:ea:01:40:a3:88:7d:3d:df:
e9:dc:d1:43:0b:5f:4b:cf:69:cd:92:9a:9a:c0:a2:c9:fe:f9:
27:18:54:cb:1d:dc:09:63:c0:3c:89:fa:34:63:2f:3e:12:43:
03:e3:72:fb:90:95:16:e1:20:00:34:07:35:67:b6:a4:af:7e:
73:f1:df:5b:1b:e4:90:0b:61:67:05:89:87:00:7b:75:73:35:
71:bf:7e:1b:be:1a:1d:a7:05:42:60:04:c8:4a:db:b8:d8:2f:
71:5d:95:ad:9c:ce:99:bc:86:c4:43:af:f7:a1:c5:24:c2:17:
ae:f8:66:e8:2e:bc:45:55:9e:c1:f7:02:d6:87:d9:5f:ac:16:
a2:f7:5b:1f:12:3c:a7:d9:c6:cb:c6:35:e3:99:58:3a:3d:54:
35:86:9c:25:e3:3b:9b:3e:84:fa:85:fc:b1:28:24:4c:4a:01:
20:17:e5:eb:bd:89:a6:04:0e:20:5d:ed:fb:60:66:cf:1f:d9:
6e:96:8c:7a:c0:a2:5e:d0:bb:24:25:2c:d5:ae:97:43:24:84:
e6:a6:a6:c0:7c:77:79:15:ad:60:3b:45:46:b6:68:f5:70:e3:
90:50:4b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 15:33:49 2025 by rpki-client