Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: 6djfA260wcofI20tHCYfnSce9LKMFlRm74led4zSJO8=
Subject key identifier: C5:CE:E4:60:2D:17:C7:15:DC:83:87:34:3C:6C:C7:B6:45:F2:EF:33
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 0196D664A22B4912CBEBFD427FC7BC134E5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0D07
Signing time: Fri 16 May 2025 00:00:41 +0000
Manifest this update: Fri 16 May 2025 00:00:41 +0000
Manifest next update: Sat 17 May 2025 00:00:41 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: t2jnPc1xrrmIFFUSzA68+q8/ItPlRTvpi6RcPZ9Lk5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d6:64:a2:2b:49:12:cb:eb:fd:42:7f:c7:bc:13:4e:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: May 16 00:00:41 2025 GMT
Not After : May 17 00:00:41 2025 GMT
Subject: CN=c5cee4602d17c715dc8387343c6cc7b645f2ef33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:43:66:9c:16:bd:47:a1:37:4b:ab:3d:4c:6a:
93:71:ca:27:7d:59:22:34:07:0e:36:e6:cc:a9:66:
41:3c:af:e2:ae:ce:6b:ee:fd:80:76:0a:db:82:4c:
75:38:ef:1c:85:4c:ef:57:75:f1:9d:bf:9a:07:4b:
90:5f:50:14:e8:47:68:02:9b:0f:82:60:85:5b:07:
13:27:01:6e:ba:ee:76:01:35:98:8d:6c:0e:a2:8c:
c7:eb:65:ed:8a:e2:74:e5:08:d9:0b:5e:89:13:17:
d9:c3:e9:8a:a4:f5:3b:96:fa:a5:4e:ca:bb:1e:a2:
bf:cc:f3:7c:bc:5e:70:4f:39:28:69:d1:a1:85:5b:
04:ee:ca:99:b8:d7:f2:8b:2d:9d:6f:5c:d0:1e:c9:
37:57:74:66:50:7b:7c:99:e3:eb:bc:19:e9:97:43:
b1:79:27:6c:52:7a:37:d0:2c:b2:99:4e:ad:0a:39:
db:0c:9c:87:7e:22:aa:fb:a5:fd:05:bd:39:77:b1:
24:54:e0:78:2b:d5:81:1f:4b:34:59:02:89:57:43:
3d:f3:c6:b9:7c:f4:b1:78:0b:c9:6f:a3:71:0c:3b:
2f:5a:96:04:8e:5f:e1:eb:4d:02:fd:cf:35:83:13:
fc:33:c8:a1:33:fb:70:42:a2:8c:0d:49:5f:ea:16:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:CE:E4:60:2D:17:C7:15:DC:83:87:34:3C:6C:C7:B6:45:F2:EF:33
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:81:f8:42:7f:d2:b9:37:08:dc:cc:54:78:c5:05:10:7c:
8a:aa:25:4f:a5:aa:8d:54:a2:1c:0f:c1:e7:6f:47:03:74:5b:
85:ac:ba:ad:b3:a4:f3:fa:a9:43:bf:58:fd:50:82:a7:4c:99:
12:54:83:b9:02:df:54:6b:20:33:e5:c1:a6:ac:5a:36:87:23:
7e:a7:36:14:c0:af:58:3b:55:16:d2:5d:db:2d:aa:f0:34:9c:
61:9f:f1:c9:c9:4d:3b:00:4a:fe:e8:3a:37:fd:dd:3c:75:92:
83:e0:83:e4:98:33:35:8b:84:b7:ee:04:18:1d:48:3e:5b:43:
93:5c:ef:03:a4:7d:59:f5:83:da:5a:35:d2:37:a5:9e:fc:fa:
1d:aa:df:d4:4a:cd:79:5a:a7:2a:0a:49:dc:35:96:15:dd:97:
45:8b:52:e1:29:58:af:e6:f4:d6:39:50:2b:00:82:d6:73:10:
ff:aa:cf:0f:e4:e9:b8:d3:04:01:8a:c3:27:43:8d:64:54:19:
7f:54:4a:6a:ce:e3:f3:f9:ee:e9:f0:ec:78:77:71:70:fc:9a:
12:c2:86:be:b7:10:91:0f:9a:db:61:7a:56:1e:c3:f7:be:d6:
4d:20:2c:2a:40:a2:e6:d7:b9:5c:60:6e:6a:18:42:a6:71:ec:
97:51:8f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 16 06:22:07 2025 by rpki-client