Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
File: kyAhKZaVds41f64mycfPmKglDqY.mft (raw, json)
Hash identifier: CN8LCYRZrzAonphZR7XW3URU4ZtV+EqYXDAc1GhODfw=
Subject key identifier: 59:C0:C2:21:8A:AB:A4:A8:F9:20:E2:A4:79:69:04:3B:4D:31:EA:F2
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 0196A31C1B568E113C8B3AEDFF7E60DEBC17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
Manifest number: 0840
Signing time: Tue 06 May 2025 01:00:50 +0000
Manifest this update: Tue 06 May 2025 01:00:50 +0000
Manifest next update: Wed 07 May 2025 01:00:50 +0000
Files and hashes: 1: i0TYuxJTadWsH2nNCaLA3ELCG_g.roa (hash: WKF6rqlqDJ5rXyoCDaodVLIXE1F+Y/5SEavY6SvlaFE=)
2: joszl7vjeMm9I7xAP3JhFk1aZ5s.roa (hash: jKG1eRBOq5nJNcRDVBOsW2QarCcd5ds9sjRhL8pufpI=)
3: kyAhKZaVds41f64mycfPmKglDqY.crl (hash: Uo7y5QQS3+PWinmbE2OS4CjIj0qKKjb7k1tqaRD6lMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:1c:1b:56:8e:11:3c:8b:3a:ed:ff:7e:60:de:bc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: May 6 01:00:50 2025 GMT
Not After : May 7 01:00:50 2025 GMT
Subject: CN=59c0c2218aaba4a8f920e2a47969043b4d31eaf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:34:3a:81:48:b9:8c:20:70:ea:15:db:70:
a6:12:d6:c5:b6:3a:21:be:78:00:69:ef:fc:f5:48:
42:d4:74:db:6b:85:6c:a0:a4:95:40:bd:99:d7:39:
bb:bc:71:e0:09:34:3d:ad:90:4c:50:66:78:b1:64:
77:92:f0:e6:27:6b:cf:a0:83:dc:12:88:77:4f:cd:
01:7b:75:f9:97:94:3f:37:ab:b8:72:2f:5d:2d:78:
65:9b:0a:89:75:1e:f3:3c:c0:71:17:ae:b6:41:7c:
68:24:24:58:fc:46:ee:45:20:e9:9a:36:35:40:cf:
68:19:83:ee:1e:e1:b6:bb:b6:a6:a4:e6:72:d6:95:
a2:4c:3e:d8:e1:11:9e:ff:b5:43:3f:a2:0f:b7:28:
15:bc:3e:6d:78:26:fd:5a:0a:c5:59:84:97:6a:f1:
28:b7:7a:be:ad:6e:fa:26:55:b8:66:24:8f:c6:72:
eb:64:32:c8:d3:5e:55:f1:a8:41:6f:c2:d1:65:e8:
f1:07:7a:c4:38:d5:77:0b:ed:7e:92:71:3b:41:03:
04:08:c9:1b:35:32:79:c4:0e:d3:b7:2d:ca:4a:57:
61:49:21:e7:50:6b:0f:64:91:3e:f1:f7:ab:fc:ec:
4e:e1:af:10:0c:e1:cd:d6:44:25:da:75:f6:4a:d1:
a3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C0:C2:21:8A:AB:A4:A8:F9:20:E2:A4:79:69:04:3B:4D:31:EA:F2
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c4:e5:26:1d:f1:22:1a:29:e6:25:88:8e:bd:ef:e8:05:3b:
87:fa:e2:c2:71:1b:26:de:d2:77:5b:23:54:63:d8:92:ef:9c:
79:8e:54:82:94:dc:4f:d0:d4:3d:46:5c:c4:bc:56:32:3c:6a:
49:39:61:fb:4d:7c:a1:3e:9d:09:f5:c1:7b:ea:e0:be:8d:03:
a9:af:ec:d3:a2:b1:a5:d7:f7:eb:06:0b:df:e5:e5:1c:8d:0c:
00:56:f8:6a:62:74:f8:21:38:e4:1a:e9:43:9b:0e:dc:7f:85:
db:bf:91:4e:a0:5c:4b:5c:f8:80:a9:44:49:b8:ff:03:ef:2f:
9b:43:95:be:7f:93:f3:88:69:d5:e4:05:57:1f:53:dc:34:93:
01:57:ed:af:94:37:1c:37:af:e4:30:b5:79:3e:1f:3c:27:04:
93:2a:14:c3:e7:d5:85:8b:e1:e9:ad:34:f6:3f:4c:dd:58:ba:
6e:e4:a5:61:9c:c7:6b:b6:74:91:ff:59:9f:d9:88:a6:af:ac:
76:96:e2:86:79:da:a0:02:d5:59:4b:23:8a:bf:cf:c1:ae:57:
0b:97:a1:b9:7c:2d:d7:85:a2:e7:62:68:32:2d:e3:a3:cf:18:
b0:ea:0c:10:ea:c9:26:0a:d8:e9:89:a1:8c:02:3d:8f:0b:5c:
3d:d4:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:52:13 2025 by rpki-client