Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: wBmt3q9NOWqTPGrNGy0NRYxBH/qecgawx9Ii+2BKaBY=
Subject key identifier: 0C:01:68:A4:83:02:A3:9F:6F:0E:9B:BB:16:B3:3A:98:31:8D:2A:8C
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 0196B8FEABA378DE96D56F9482B34ADBC64C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 123B
Signing time: Sat 10 May 2025 07:00:19 +0000
Manifest this update: Sat 10 May 2025 07:00:19 +0000
Manifest next update: Sun 11 May 2025 07:00:19 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: GrxCepErgoHaKZbqTFkamrT2P1h9mvwXL0GdwFQMufk=)
2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:fe:ab:a3:78:de:96:d5:6f:94:82:b3:4a:db:c6:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: May 10 07:00:19 2025 GMT
Not After : May 11 07:00:19 2025 GMT
Subject: CN=0c0168a48302a39f6f0e9bbb16b33a98318d2a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:86:dc:ef:49:aa:a7:3f:50:72:fe:73:08:
37:a0:a7:16:be:c4:81:0a:e9:a9:64:67:cf:c1:84:
f1:a4:0a:84:d2:db:b7:53:73:34:89:bf:29:0b:bf:
5a:7a:88:0a:85:3f:fd:e6:39:73:db:43:29:16:78:
19:bf:a4:59:e1:2f:48:b6:9e:0d:cb:c9:a8:a7:7f:
6f:4e:92:bf:61:02:66:11:13:ae:ba:b0:19:ce:3a:
a7:fc:c4:65:b4:90:84:2a:72:2f:54:8b:d6:8d:af:
55:5e:1d:9a:ba:e5:9c:64:4e:5c:4b:ef:bb:38:d0:
67:87:b9:cb:41:2f:4d:43:bf:70:13:6c:5b:ff:6e:
dc:7f:9a:3a:dc:01:c1:06:36:86:ad:ee:7b:ad:ae:
aa:34:a3:6c:aa:aa:05:c5:33:27:37:42:8d:16:2f:
0b:69:b7:26:f0:94:da:ee:f8:c8:c7:e4:df:d2:21:
b0:fe:c3:aa:6f:42:87:b5:da:a0:66:c9:cb:6e:74:
24:07:36:24:32:d9:6c:14:40:3c:3e:6f:cc:da:b0:
ba:71:8f:9a:e5:c6:e0:ca:39:5b:63:bb:2e:43:04:
b7:7b:82:10:69:a4:e2:67:81:91:18:e4:22:89:ea:
ea:45:f0:f6:93:59:05:b9:d0:5f:38:6b:b1:8b:4e:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:01:68:A4:83:02:A3:9F:6F:0E:9B:BB:16:B3:3A:98:31:8D:2A:8C
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:8f:0d:6d:bd:1b:95:69:47:22:d7:02:09:de:45:ef:af:bf:
e5:fb:38:d9:46:5e:1a:8a:b9:b8:31:d3:94:bb:db:de:69:1f:
63:73:a0:14:e9:cd:94:92:27:58:94:1c:69:a2:17:c8:c7:cd:
13:e7:10:77:0c:b6:cb:18:03:26:17:30:a1:ac:a8:fc:51:1d:
f1:56:45:c3:db:2d:5a:1b:95:b1:ab:3c:fe:31:fb:ab:88:70:
09:2c:17:34:e4:7d:20:c3:86:4c:0e:99:9f:68:4d:46:18:a1:
08:59:28:0f:bb:ec:47:36:82:bf:c8:0a:ac:7b:27:2d:89:ab:
37:0f:67:a7:70:d6:14:b9:ee:87:ac:5b:d5:40:18:d8:b8:2b:
3b:be:c8:83:10:c2:b7:a6:11:2f:62:cb:47:6c:c5:74:26:78:
6b:cc:b7:94:17:49:d5:8b:d3:de:5d:0b:65:60:7c:54:e2:57:
72:05:eb:c1:23:79:97:97:2c:6a:22:0d:c2:ac:c6:23:dc:4a:
18:4c:8b:ac:cf:7a:10:46:ee:94:ca:ea:48:5c:89:46:5b:38:
0a:58:6f:a3:0b:96:63:3b:31:b5:67:34:d6:b8:3d:c0:9b:a8:
d8:50:78:db:c1:c3:46:e4:05:4e:b5:27:3f:a7:98:1b:f9:41:
5d:2f:2e:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:23:31 2025 by rpki-client