Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
File: KVZYS3DOhHwam0AFSLFNsDG-3_I.mft (raw, json)
Hash identifier: 4yG2oa+8Ny2OIbgrt8rrOd+NWHV+Q2E+UguYSN+K8vA=
Subject key identifier: 4E:90:90:0D:79:C3:4F:D2:96:EA:72:18:25:CC:2F:BC:21:71:74:B4
Authority key identifier: 29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
Certificate issuer: /CN=2956584b70ce847c1a9b400548b14db031bedff2
Certificate serial: 01969E2C7985D8C31D6A74C830E2A1EAA382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
Manifest number: 0808
Signing time: Mon 05 May 2025 02:00:36 +0000
Manifest this update: Mon 05 May 2025 02:00:36 +0000
Manifest next update: Tue 06 May 2025 02:00:36 +0000
Files and hashes: 1: Hg9ftZU-9AaUb-uuud6YLmFeeqc.roa (hash: kIMrWnLBKnZqV6WvzFWIcWQTCQyb5mE+suXdE7Wee/M=)
2: KVZYS3DOhHwam0AFSLFNsDG-3_I.crl (hash: zPtk9qNKYoc4TForO67FO4+tUpoZDPoT6ylzZWi3HNM=)
3: UY5PADzbeIj93cBuCOAZIezRods.roa (hash: 94p+JoB1n19vWg1B3h2izrs5nmNxhhnj9iR596bjT+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:79:85:d8:c3:1d:6a:74:c8:30:e2:a1:ea:a3:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2956584b70ce847c1a9b400548b14db031bedff2
Validity
Not Before: May 5 02:00:36 2025 GMT
Not After : May 6 02:00:36 2025 GMT
Subject: CN=4e90900d79c34fd296ea721825cc2fbc217174b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:94:e3:9c:96:06:28:13:dd:4c:dc:1f:3c:
a4:85:e7:c0:4b:e2:1b:65:0c:c1:ea:d3:49:7c:8b:
9b:f6:96:b6:f7:02:af:14:34:9b:f4:bc:4d:61:57:
f3:ba:28:86:2b:73:6c:46:06:28:e3:fe:06:0d:09:
86:a1:30:00:73:02:02:05:bf:2e:38:07:ae:73:92:
6b:19:80:6c:d9:cd:f9:09:8c:5f:57:ab:aa:ef:f7:
77:cb:2f:02:ca:b9:bd:a9:a0:dc:6f:2a:62:2f:90:
b7:bb:7e:c5:49:87:0f:51:cc:46:32:3e:a5:12:c9:
4f:cd:d2:e5:3e:fa:ef:d1:2e:3d:84:47:72:10:08:
dc:3b:c5:a7:6f:aa:20:b1:40:63:85:b5:db:38:05:
b4:51:b3:65:99:1f:64:86:17:f9:0c:f2:ee:27:ea:
4a:af:09:9d:dd:5f:e4:67:65:f7:49:de:b6:72:41:
b4:34:a2:26:15:dd:09:17:95:c5:28:fd:be:f1:72:
ac:fd:88:96:24:73:68:bc:d3:f3:26:ad:3f:5e:9b:
1c:f5:9c:8d:2c:a3:f2:1c:15:aa:9b:fd:f0:b9:6f:
48:60:51:15:24:16:ba:be:7f:30:ae:18:3d:01:74:
87:16:26:2b:21:ad:b1:04:f1:73:d5:34:35:73:23:
e2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:90:0D:79:C3:4F:D2:96:EA:72:18:25:CC:2F:BC:21:71:74:B4
X509v3 Authority Key Identifier:
keyid:29:56:58:4B:70:CE:84:7C:1A:9B:40:05:48:B1:4D:B0:31:BE:DF:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVZYS3DOhHwam0AFSLFNsDG-3_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/64fe7d-862d-4e1a-9fd0-06b41ef1398d/1/KVZYS3DOhHwam0AFSLFNsDG-3_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:ab:95:29:16:cf:a4:46:63:12:b6:67:ff:d9:fa:a6:17:5e:
00:21:79:08:44:0d:51:36:ff:98:8f:f8:11:c8:30:25:11:88:
b9:8b:f2:86:e5:54:5d:8a:a6:9f:38:93:f7:bb:88:23:17:d0:
e2:23:3c:7a:2a:ec:2b:eb:a9:14:43:ae:cc:e2:1d:60:ee:94:
39:cf:a1:74:1b:22:86:0b:76:bd:95:bf:55:ff:22:eb:42:fe:
cb:3c:a3:3b:b4:1a:48:4f:15:4e:e2:99:7f:be:7b:57:98:e9:
75:38:e4:0e:fb:a1:16:4d:71:87:dd:e0:f3:55:a4:04:71:99:
58:3a:27:4d:9d:6e:77:f3:bf:03:9e:7f:0a:1a:85:2a:7e:e5:
06:cb:60:c6:05:3a:d6:26:c4:dc:98:f1:cd:90:9a:a5:42:b4:
79:0e:51:9f:80:c0:3e:b8:8b:18:f4:ff:96:10:53:b9:d2:95:
a7:51:ae:d1:09:e8:ed:64:f2:20:f2:bf:11:d1:28:86:f4:ed:
32:3c:74:66:fc:67:1b:6c:56:58:c8:a8:e1:95:08:74:ed:b0:
4b:eb:90:e1:9e:40:6d:1a:73:13:8d:ff:b7:90:2a:6c:6a:52:
a0:7e:08:3f:e0:47:8e:87:a2:db:cf:f3:43:8b:23:ff:f2:f7:
ce:05:99:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:52:10 2025 by rpki-client