Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
File: KT0QRM1I1hcW11ngIN29qoFNXNU.mft (raw, json)
Hash identifier: HcFQgQEcXHwyQUwGT67D0XJsTbu4TUsxW54mez1/RNY=
Subject key identifier: C4:D7:DF:8B:31:C2:AF:5C:F2:9D:D8:F0:C0:3F:98:4C:EB:1C:FF:D8
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 0196BDEE21E9C3B3A119CC9BE4A70422C454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
Manifest number: 0D3B
Signing time: Sun 11 May 2025 06:00:22 +0000
Manifest this update: Sun 11 May 2025 06:00:22 +0000
Manifest next update: Mon 12 May 2025 06:00:22 +0000
Files and hashes: 1: KT0QRM1I1hcW11ngIN29qoFNXNU.crl (hash: sw2knyEPUgicHfXCp8mpYSXuK7itZ/OZWpONKwShWcY=)
2: dJ6Z6uHBiaScsgFwBNYwQYgTmkk.roa (hash: A47IWxTys6UPyaxxT7KgUDJag9HKcyHJ4nrmIQJOjaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:21:e9:c3:b3:a1:19:cc:9b:e4:a7:04:22:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: May 11 06:00:22 2025 GMT
Not After : May 12 06:00:22 2025 GMT
Subject: CN=c4d7df8b31c2af5cf29dd8f0c03f984ceb1cffd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:fe:36:97:cc:43:fc:f8:c7:22:8d:50:5c:ef:
4a:39:79:c9:7f:9a:b7:8f:f3:e6:a0:f4:06:e5:93:
2b:33:69:6b:18:bd:90:b2:65:65:2d:2f:2c:ee:6c:
fc:29:eb:12:20:95:33:f7:fc:28:4a:fe:c1:f7:ef:
a5:9f:76:94:fe:65:8c:37:81:7b:f0:63:a7:96:15:
70:ea:57:d9:03:39:61:52:6a:1f:84:39:09:f8:57:
9f:88:51:a7:1a:cb:3f:1b:1d:d4:01:75:bc:b4:e5:
8d:87:e4:bc:e3:35:62:0a:52:88:8a:45:a8:b0:e6:
38:8c:c8:5d:04:59:3d:77:a3:42:67:07:03:21:2d:
ab:12:57:44:66:44:17:4c:6a:b3:0a:e8:06:66:62:
12:01:9e:8e:46:30:2b:a0:b9:ea:25:67:37:48:c7:
bc:88:7d:dc:63:9b:2d:dc:81:ba:bb:78:99:e6:27:
8a:d1:05:75:e3:db:55:3a:1e:e6:62:83:87:92:14:
bd:a6:c3:5f:11:12:5f:41:80:3c:3c:fe:0a:44:af:
0f:f8:24:f3:18:b6:89:54:8e:ed:5b:89:58:1e:de:
54:61:ef:94:a5:fd:f7:eb:d6:46:19:d0:ba:c5:7d:
8d:a0:ae:3b:bf:bd:ef:3f:ed:6a:38:9a:5c:2f:18:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:DF:8B:31:C2:AF:5C:F2:9D:D8:F0:C0:3F:98:4C:EB:1C:FF:D8
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:22:7f:9a:33:84:7b:4b:5f:b7:bf:76:8b:e2:3d:2b:ca:8d:
a6:9a:75:39:89:5a:89:ea:9d:d1:45:53:86:e5:4a:0d:b6:a7:
8c:f4:b7:4d:06:35:6c:9b:73:0c:fe:79:65:18:47:6a:0a:0a:
0c:ab:4f:b7:c2:4e:81:7c:2b:5a:f3:c0:9f:ce:02:6c:96:5f:
92:ab:55:45:4f:9f:13:25:f8:74:f9:02:8a:7b:a9:69:d1:eb:
ac:ea:69:85:8b:7d:c6:cd:53:a5:04:e4:0f:12:be:4a:e5:e8:
00:e8:0b:43:1d:bb:5b:82:b2:ce:75:78:b1:fe:4b:fe:c7:97:
9d:f5:ce:fc:05:67:ec:61:8a:1c:a8:8d:14:52:49:c5:52:ef:
c3:fe:af:eb:4c:c4:26:fd:d3:e5:f5:ed:8b:af:af:b6:a2:d2:
d5:3f:5c:88:c8:cf:fc:ce:4f:eb:3f:d8:6b:9e:1b:df:29:83:
e7:7b:c4:fb:13:79:5c:c3:94:21:4d:44:92:e1:ef:77:82:9b:
ae:d6:73:18:fe:61:4d:7f:8a:74:6b:99:c2:48:03:12:78:33:
c0:d5:8d:95:86:8c:18:83:d4:d8:15:9e:ae:15:2e:d0:26:a3:
19:77:2c:97:28:45:b3:33:d5:db:08:00:fb:70:31:0b:f6:dc:
ee:6e:ae:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 08:36:45 2025 by rpki-client