Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
File: KhLvrumX6adjtGCrWS3dpnoN63A.mft (raw, json)
Hash identifier: MWODLOUjk8P112SBnLlFyN0lfzAqxLlEbxVYjZM3J5o=
Subject key identifier: 5B:7B:23:56:CE:06:92:1F:22:26:DC:92:D1:9F:7D:13:A0:69:A1:12
Authority key identifier: 2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
Certificate issuer: /CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Certificate serial: 0196BFDC81BC32E37F2A20BBC340A4729157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
Manifest number: 0119
Signing time: Sun 11 May 2025 15:00:21 +0000
Manifest this update: Sun 11 May 2025 15:00:21 +0000
Manifest next update: Mon 12 May 2025 15:00:21 +0000
Files and hashes: 1: 8u9hb0S_4Uuo5fYUwLVSXZK5rxM.roa (hash: 6iQilpXzVprtaKFu2A9AhzRE5Pgx6o9DaMAB494sBrc=)
2: KhLvrumX6adjtGCrWS3dpnoN63A.crl (hash: ax+jeffxFFO7uNjApTDFV1d8LnKxM4hqFyEucQaLKa0=)
3: SccPUBWuljMHYcMk3K5QOdOVb6g.roa (hash: uBtJ4Y5vGvXPCHheXT9gg13uzVBy/aYh9vF63HwlhDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:dc:81:bc:32:e3:7f:2a:20:bb:c3:40:a4:72:91:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a12efaee997e9a763b460ab592ddda67a0deb70
Validity
Not Before: May 11 15:00:21 2025 GMT
Not After : May 12 15:00:21 2025 GMT
Subject: CN=5b7b2356ce06921f2226dc92d19f7d13a069a112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:59:8f:a4:f4:a0:27:3c:61:f4:34:f3:d6:f6:
ef:0c:b9:7f:db:6b:cc:0b:14:28:50:03:07:a9:a0:
89:b9:36:7b:bd:1c:0a:42:5d:9e:f1:3d:ac:f5:26:
34:51:b7:6c:5b:71:3a:1a:e4:49:25:95:61:91:36:
fd:29:a9:92:1e:ab:e5:40:0e:62:e6:14:7b:32:27:
65:6c:49:6d:d9:44:33:2f:32:7f:d7:b5:4b:c8:e4:
77:09:2a:a7:d1:05:9b:39:a8:bf:aa:fc:cd:98:f8:
19:88:8f:e4:28:36:db:86:2c:27:e8:99:bb:ae:22:
03:cc:a3:31:5f:ec:73:1f:5f:80:8f:a7:c5:92:e5:
6e:02:eb:b0:fb:98:48:c9:73:b4:67:bc:1f:0f:99:
c2:3d:1c:97:15:7d:48:3b:88:df:7f:17:02:2d:75:
71:ac:0a:52:67:ee:84:0b:4b:00:fa:ef:56:db:a7:
b0:39:7a:87:49:ce:cd:15:e0:0e:35:4e:e6:a1:6c:
0b:68:71:70:2e:c8:de:23:40:06:c3:dc:3f:da:d9:
cf:c7:66:59:4b:e1:6f:25:b1:68:c5:63:32:0c:ea:
4c:ca:81:13:9c:c8:ff:4b:1a:3a:e1:44:8e:64:83:
e3:e3:9a:cb:00:60:07:a3:0c:d8:5b:e0:41:1d:25:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7B:23:56:CE:06:92:1F:22:26:DC:92:D1:9F:7D:13:A0:69:A1:12
X509v3 Authority Key Identifier:
keyid:2A:12:EF:AE:E9:97:E9:A7:63:B4:60:AB:59:2D:DD:A6:7A:0D:EB:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhLvrumX6adjtGCrWS3dpnoN63A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/6ff43b-27ab-4064-af1d-09ed7800fdfb/1/KhLvrumX6adjtGCrWS3dpnoN63A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:9f:5e:7c:57:18:d9:04:9d:7f:32:2a:b6:87:c2:3b:6e:fc:
ac:e2:d9:7a:9f:f0:fa:b9:d5:46:4c:20:53:04:96:f9:51:7a:
ca:e5:49:b0:3c:c2:61:5d:4c:8f:11:39:09:c0:cd:83:a8:a5:
41:42:cb:bd:f1:bb:29:d8:3f:11:79:dd:7c:a6:75:3b:56:99:
f8:67:47:0f:14:aa:7d:b2:04:68:63:62:0f:1f:8a:23:a7:03:
11:bb:1a:0b:1f:90:1d:49:f5:39:15:63:d0:51:00:42:a5:d6:
c4:9f:38:a9:d3:be:2e:6c:93:21:32:97:dd:05:7e:47:03:35:
34:04:1a:24:ce:9b:15:a2:34:79:77:44:93:ab:e7:ec:7a:a1:
f8:18:bf:da:79:10:7b:f3:7e:1d:3f:11:48:57:e3:95:fd:56:
89:db:15:89:3f:67:b5:1a:e9:65:58:80:35:a5:e0:d0:9d:23:
53:08:af:1a:35:a9:f7:41:a9:16:18:96:c1:1a:f2:8f:24:4a:
f9:11:51:75:03:94:a5:da:9a:47:6e:19:02:8b:04:74:03:ed:
f0:51:59:70:b1:75:19:57:b9:cf:e8:a4:a2:df:53:60:0a:e4:
23:00:74:26:09:b4:30:b6:da:b9:2f:01:76:1f:75:17:97:5e:
51:b7:f3:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 19:00:42 2025 by rpki-client