Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
File: K04tNMzuRXa1znYFoITmwIUiwig.mft (raw, json)
Hash identifier: 9Q9BdU7eVk/RD93oQtqtXoMVFfF5zkM2Ot+COFfLvlo=
Subject key identifier: 15:7A:93:37:98:38:1E:1A:5F:5B:73:CF:B9:99:6C:1E:D3:8E:54:FB
Authority key identifier: 2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
Certificate issuer: /CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Certificate serial: 0196B823ABD50F59556107E985E9A695CB36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
Manifest number: 1535
Signing time: Sat 10 May 2025 03:01:07 +0000
Manifest this update: Sat 10 May 2025 03:01:07 +0000
Manifest next update: Sun 11 May 2025 03:01:07 +0000
Files and hashes: 1: GSpTlfTO5KcQK2jI527EKT02SMc.roa (hash: TpoUJbGzlzV0iUGibBYOB2or2f2ZUtWBHSlc5utMfHk=)
2: K04tNMzuRXa1znYFoITmwIUiwig.crl (hash: ghc6KNddzCrawXbL2L6xD52HOLyibXQNoeJ92NeIcFY=)
3: inTF6SWHroBiGHmy-0U30O5ydnA.roa (hash: evzJBNLsSCaxTpI1F1FxS8W2lXJa9MwPxDq+MYhTrqw=)
4: qgbAAtOcnU1uj0vsxF1XX4uS6aw.roa (hash: sqwZAEeBQvSXLjPqcFlAmMMOVHBKwCNCWM9uKLuZCYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b8:23:ab:d5:0f:59:55:61:07:e9:85:e9:a6:95:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4e2d34ccee4576b5ce7605a084e6c08522c228
Validity
Not Before: May 10 03:01:07 2025 GMT
Not After : May 11 03:01:07 2025 GMT
Subject: CN=157a933798381e1a5f5b73cfb9996c1ed38e54fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:57:98:88:09:94:0c:57:f4:1b:dd:c0:2e:
72:16:7c:64:29:c9:54:24:92:74:6e:54:34:88:3c:
ad:d2:52:30:20:5a:a6:4b:4e:96:cc:4d:21:a1:ed:
79:47:0b:b0:26:b1:57:7e:19:e6:12:cd:9d:4e:b0:
71:4b:8b:bf:af:f6:e7:0b:a0:34:11:dc:43:20:86:
25:ec:ec:4c:7d:a9:d9:76:1e:30:18:d7:5c:7b:82:
1a:df:67:d1:9a:55:35:2f:64:cc:e3:d1:a2:5d:aa:
d8:41:b1:84:4b:88:71:e4:8a:87:a6:bf:21:0d:02:
2a:4a:ee:a2:b7:a8:70:c0:75:c2:ff:bd:e2:fa:08:
bf:23:6c:ff:72:81:63:55:d7:9b:ac:8a:ed:b1:e4:
f4:50:1a:84:e0:f0:2d:f8:96:6a:d2:06:81:18:44:
1e:70:9b:07:75:f8:30:59:df:04:89:3a:b0:c5:f0:
5a:cb:d0:37:0c:66:d7:3f:9a:84:b4:c2:35:f2:a7:
87:9f:fd:03:05:ca:1b:96:36:80:21:3b:d1:e8:60:
b4:b6:11:01:0b:7f:90:bc:50:15:a1:71:04:a6:e4:
e1:93:38:35:34:72:ce:17:5a:c8:fc:f5:c3:6e:bb:
fa:b2:e5:52:41:89:f8:ac:41:4b:79:01:ca:34:e9:
cb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:7A:93:37:98:38:1E:1A:5F:5B:73:CF:B9:99:6C:1E:D3:8E:54:FB
X509v3 Authority Key Identifier:
keyid:2B:4E:2D:34:CC:EE:45:76:B5:CE:76:05:A0:84:E6:C0:85:22:C2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K04tNMzuRXa1znYFoITmwIUiwig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d899cc-5357-471a-bc1c-077bc8ba1e5d/1/K04tNMzuRXa1znYFoITmwIUiwig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:26:7a:0f:ed:b2:45:72:cc:34:fd:1b:6b:71:be:76:1d:9c:
f8:d4:72:68:d0:34:1b:4c:7c:cb:b5:af:5e:d8:41:8a:17:b6:
bc:1f:c6:65:cf:72:8f:a9:69:bd:b6:10:b4:2c:01:f6:26:1d:
b0:14:69:14:10:a6:38:8d:fd:38:2a:c9:97:61:f2:7f:c5:af:
4b:5e:de:33:40:a6:bc:95:bc:31:b4:d6:c6:20:6a:e0:cb:24:
68:bd:19:23:8f:be:14:fe:8b:58:be:ce:9c:ec:e6:3d:73:bf:
4f:37:34:ff:73:bd:eb:8b:70:56:68:1f:d9:6c:b6:20:ce:2d:
71:f8:21:8e:c0:57:f5:97:1a:11:6d:f2:44:3e:7e:67:7f:68:
87:d8:aa:1d:d9:0a:c2:9f:df:4c:cd:d4:7d:07:15:55:46:f1:
1c:b8:df:b9:0a:ec:56:2f:05:bb:2b:2f:61:00:01:19:09:b1:
ed:3e:24:0d:38:d3:64:e8:0a:06:04:b0:11:d8:96:58:3b:bf:
6b:d6:76:a4:d0:f4:72:1c:a0:7b:56:20:26:1f:21:58:a8:af:
0a:82:1f:52:7e:95:a1:73:ee:39:6a:9c:e4:d0:d1:2c:c7:e7:
c3:93:1f:4d:e8:f7:a3:e5:3f:30:fe:cb:ac:21:fd:5e:9f:0a:
5e:2b:73:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:03:36 2025 by rpki-client