Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
File: Kw51nA6mfY_3IqrIh8fszs3tPsc.mft (raw, json)
Hash identifier: ZmcwWiyUbjF44tOZX93M5gAoEXMcLp7TznLl7isuQIU=
Subject key identifier: 84:46:30:95:95:A4:BC:9B:C7:82:C9:99:EE:0F:7B:DE:6A:1A:ED:1B
Authority key identifier: 2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
Certificate issuer: /CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Certificate serial: 0196C984B81B869B2320D72943DFAAF19ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
Manifest number: 10E8
Signing time: Tue 13 May 2025 12:00:40 +0000
Manifest this update: Tue 13 May 2025 12:00:40 +0000
Manifest next update: Wed 14 May 2025 12:00:40 +0000
Files and hashes: 1: Kw51nA6mfY_3IqrIh8fszs3tPsc.crl (hash: PVa4I7kAdekQG0YMkR4jD2GgSTMuPGi2idmNug+kAJE=)
2: gK2aqLyacYNLut1v3SVo1JeIzsU.roa (hash: jw6ne3V3i5hc0TYypnVPI2Vg7jRiBa/IR1Y/Jp3Wy/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:b8:1b:86:9b:23:20:d7:29:43:df:aa:f1:9e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0e759c0ea67d8ff722aac887c7eccecded3ec7
Validity
Not Before: May 13 12:00:40 2025 GMT
Not After : May 14 12:00:40 2025 GMT
Subject: CN=8446309595a4bc9bc782c999ee0f7bde6a1aed1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:d9:80:f3:05:a3:da:a8:df:35:5d:5b:f4:
13:05:81:5f:29:b2:46:c0:60:88:d9:09:f4:36:6e:
ca:3b:8a:4a:f2:c2:aa:ff:29:d1:68:76:bd:57:9f:
6c:e1:f5:43:29:b4:8c:65:63:78:40:db:49:80:cf:
d4:25:b2:47:85:c7:71:99:f2:33:e9:de:3a:1e:06:
80:96:68:cf:bd:53:7d:ce:13:6f:84:df:32:03:fa:
47:17:d4:c5:fc:bd:64:67:2a:63:04:e9:a2:71:73:
2d:87:66:20:00:96:fa:0f:9f:a1:ae:0f:f6:05:e6:
2d:c8:2c:dd:1f:94:19:79:9c:a8:63:09:f4:b9:6f:
2e:47:bc:0e:89:79:51:23:a7:9b:6f:cd:07:ab:7a:
7b:b7:9a:7a:4b:b2:b9:b4:04:67:a5:c6:0e:b5:4c:
7f:0f:d4:d1:10:11:b0:c3:a5:aa:66:76:cf:d9:46:
f3:8d:fb:0d:2e:5c:c4:2f:a4:1f:29:27:c7:f3:db:
e4:e7:ee:fe:b4:27:7d:50:63:f9:f2:79:af:7f:59:
95:d3:e2:1c:92:34:22:d2:4a:18:eb:26:66:b2:09:
e3:88:6a:90:3c:66:61:23:52:35:45:66:14:53:26:
66:41:6b:7d:cc:b1:a4:06:b1:09:1a:fc:2d:c5:da:
b9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:46:30:95:95:A4:BC:9B:C7:82:C9:99:EE:0F:7B:DE:6A:1A:ED:1B
X509v3 Authority Key Identifier:
keyid:2B:0E:75:9C:0E:A6:7D:8F:F7:22:AA:C8:87:C7:EC:CE:CD:ED:3E:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kw51nA6mfY_3IqrIh8fszs3tPsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d4db03-e8ad-4027-9ce8-55e1ff7f32f9/1/Kw51nA6mfY_3IqrIh8fszs3tPsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:81:f0:15:12:71:49:f4:57:ee:c1:23:c0:e2:89:06:01:
72:c6:c5:c7:7b:c8:ee:9a:a3:4d:73:dd:d8:3d:bb:dc:54:68:
b4:03:aa:98:fc:4b:45:01:1d:69:28:7c:06:b4:99:20:c7:9a:
de:05:7a:1f:6f:c6:e3:ab:23:18:90:72:97:c1:ae:0d:5a:82:
a0:01:e5:40:cc:c1:13:02:44:bc:4a:3e:5f:da:2b:c4:1d:9b:
4a:a6:5c:5d:a1:8b:12:82:65:17:1d:ee:b6:07:a8:78:8d:37:
71:7a:b3:97:84:41:ce:f0:66:75:44:8d:fa:51:4b:53:90:e9:
54:47:a9:83:ea:d7:ef:d6:61:04:82:08:93:d5:cc:7c:1c:f7:
d1:5f:36:05:3b:fc:6a:60:66:d8:33:45:66:45:f3:74:26:3a:
57:10:f6:0e:c7:31:03:d4:21:5b:78:01:b0:6d:a3:a6:f7:a3:
0b:29:d0:09:2a:ff:07:f4:dc:47:42:a0:fc:8b:0e:74:76:16:
b3:66:45:74:03:3f:59:8b:6c:4e:fd:f5:59:41:65:07:88:33:
7e:fb:ba:7c:9d:bf:45:7e:01:f5:29:62:8a:00:e5:5a:02:ea:
89:30:7d:2c:02:54:7d:fe:e5:2f:ca:e6:b1:92:ba:a3:d8:7f:
36:ab:66:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 18:58:32 2025 by rpki-client