Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
File: kwHqBZY8l1byjuLpi488xHncn1g.mft (raw, json)
Hash identifier: 5WL8G/v+CalobZ3rEvDygVLlWd+vbgbqf6JF4loHBDo=
Subject key identifier: 69:E0:87:91:15:D7:7E:75:BD:C3:AF:0A:9A:77:DC:F3:D8:2A:C4:21
Authority key identifier: 93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
Certificate issuer: /CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Certificate serial: 0196AA678BB5564480A3369BBC9632551338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
Manifest number: 152B
Signing time: Wed 07 May 2025 11:00:34 +0000
Manifest this update: Wed 07 May 2025 11:00:34 +0000
Manifest next update: Thu 08 May 2025 11:00:34 +0000
Files and hashes: 1: TVR9Wcx95L9uIbI7vmRK3_ppXuA.roa (hash: FBGg+DHw7jOc497O265+HPovAlPdSEs0qwJnAdItW6I=)
2: UvYnHc7rFlBw3j4tqyHKN3v104E.roa (hash: 6QDgTXlr47CFI8bSc1FSdC5Ii7Qu4oH4gM2ZxRc6gQc=)
3: bdOSuRKRee1uOsbVObRylNDB0a0.roa (hash: gjO8qJZwFaEvDikQnhsOULa/ARdOkiQLGR4fYx/iUVY=)
4: kwHqBZY8l1byjuLpi488xHncn1g.crl (hash: xqAkQdhL5XbyIHUxv1CvMvLEyAVmQP7gRuZKagj8GP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:67:8b:b5:56:44:80:a3:36:9b:bc:96:32:55:13:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9301ea05963c9756f28ee2e98b8f3cc479dc9f58
Validity
Not Before: May 7 11:00:34 2025 GMT
Not After : May 8 11:00:34 2025 GMT
Subject: CN=69e0879115d77e75bdc3af0a9a77dcf3d82ac421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:72:94:5b:42:f0:44:a1:e2:47:fd:77:5b:4b:
56:ce:85:fe:17:d0:92:53:4c:72:fb:a5:c6:84:06:
86:45:b7:3c:15:fe:23:65:c9:6f:89:c5:ab:99:be:
e6:cc:e1:ba:3a:88:a3:67:e8:af:7d:ca:d0:ef:ec:
1e:e5:95:71:7d:8b:3f:b0:b0:a8:16:8f:0b:4d:77:
91:7c:16:66:8f:d5:9e:8a:fa:a0:82:39:08:61:f5:
49:dd:1c:fb:15:9c:b0:ee:13:f7:02:61:8c:7d:7f:
56:a0:93:99:af:4d:0f:ce:04:9b:56:79:06:15:40:
0c:5e:d5:20:62:dd:c8:3b:a8:0c:35:84:a6:5f:ba:
17:12:3c:7a:17:e5:c1:43:97:41:49:62:3b:8b:18:
af:d3:9c:5c:59:06:3e:05:e2:bc:60:3f:5f:9b:10:
8e:84:91:7a:50:e4:a0:27:a6:ae:8a:6f:cf:e7:03:
44:7d:51:3d:64:be:56:55:08:cd:b2:28:9c:bf:b0:
49:66:ed:34:b7:2b:e3:80:a2:df:e2:10:b3:e7:dc:
7d:1e:fa:e8:6a:29:9e:e0:86:cd:d2:8f:64:ca:18:
59:22:17:bd:90:78:b8:79:20:24:24:31:eb:d1:fd:
ac:df:7b:ae:de:02:9a:a6:b7:1c:63:23:7c:17:ec:
a6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E0:87:91:15:D7:7E:75:BD:C3:AF:0A:9A:77:DC:F3:D8:2A:C4:21
X509v3 Authority Key Identifier:
keyid:93:01:EA:05:96:3C:97:56:F2:8E:E2:E9:8B:8F:3C:C4:79:DC:9F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwHqBZY8l1byjuLpi488xHncn1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ebf6cb-a779-464f-8bee-8f08e0272df8/1/kwHqBZY8l1byjuLpi488xHncn1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:82:fa:57:ba:ab:78:58:63:99:26:41:cc:c7:6a:b2:9d:a6:
c5:a9:22:3f:71:0f:74:a0:7d:40:90:cc:48:ec:bb:2e:52:4e:
6c:86:4f:5a:39:eb:36:0c:d5:43:16:68:82:38:73:80:7c:1a:
05:b9:f9:d9:6b:08:c2:7e:5c:cd:d4:14:86:8c:0e:c6:0c:cf:
8c:ff:df:6d:d7:a0:75:4b:1f:77:e1:48:04:58:c7:55:fc:24:
fe:2c:d6:37:09:0b:b3:18:4d:60:31:f9:47:f9:2b:78:37:67:
36:e4:61:38:64:c4:ed:aa:74:9e:92:75:14:78:fc:1c:92:f8:
1a:95:b7:71:aa:2d:29:fe:c9:17:9a:cc:3e:de:a0:ab:ed:a7:
8a:2f:6a:07:32:97:d8:23:c7:4e:5c:5d:e6:67:82:6b:3f:da:
f7:b8:1d:23:4f:ad:a6:22:3a:d2:be:69:97:43:ea:fd:8f:a9:
c9:f6:79:c8:69:9b:b5:54:6b:6d:bc:68:39:45:5a:fc:bb:6c:
92:3c:84:c1:67:a1:9d:57:43:38:6d:8c:e4:df:5e:49:c5:61:
56:9e:90:52:84:33:03:8f:ba:6d:61:ae:d8:67:64:5a:82:eb:
0f:c2:f2:7a:ef:e5:c5:18:fc:ea:00:e9:d7:47:44:33:d7:e1:
41:cd:27:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:35:48 2025 by rpki-client