Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: 9Y8Zv46OOMiWX4hKq6LqCG+eIWkwlba/yq0iTgO385I=
Subject key identifier: 50:28:F6:A9:6C:EA:C2:93:B1:9F:28:C6:8A:C4:86:EF:A0:F0:41:45
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 0196BF37E9565FE6D94DECBE8DBEBA34755E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 033B
Signing time: Sun 11 May 2025 12:00:34 +0000
Manifest this update: Sun 11 May 2025 12:00:34 +0000
Manifest next update: Mon 12 May 2025 12:00:34 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: g6r0AZCVzic3d4LezNS0v+sYr0NswPIgFS9GaVbOjJg=)
2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 12:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:37:e9:56:5f:e6:d9:4d:ec:be:8d:be:ba:34:75:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: May 11 12:00:34 2025 GMT
Not After : May 12 12:00:34 2025 GMT
Subject: CN=5028f6a96ceac293b19f28c68ac486efa0f04145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:06:6c:54:0e:46:7e:0c:46:36:0f:8c:a2:
82:87:fd:20:f2:bf:da:16:ca:97:0a:51:f2:ab:d0:
f9:b5:6c:06:be:55:77:c3:28:5b:b3:c4:c1:08:53:
2f:a9:3b:71:93:00:ba:6f:5b:ae:c0:02:25:e3:05:
9c:68:c8:83:5b:c1:60:8d:e6:0e:a1:96:24:5f:29:
ef:0e:da:f9:a3:6a:b9:88:cc:1f:52:2d:c7:a3:48:
f1:16:0c:15:ba:f0:bc:7e:ce:c9:35:ae:9a:25:d5:
8c:1f:1b:44:c6:bb:cf:67:b3:25:9f:73:91:71:39:
0b:4c:36:5b:f9:53:10:b4:00:27:49:a3:f3:ec:00:
fb:da:cb:e5:bb:e9:61:2d:da:2d:40:b5:ad:a2:dc:
a3:ab:98:1b:87:27:68:24:b4:cc:f1:8d:b9:89:71:
de:4a:8f:d2:3c:ca:c8:8f:3e:db:d5:ef:9a:61:ac:
be:a1:2a:8a:40:a7:dc:07:8c:39:d0:0c:17:00:45:
f3:f3:5e:0c:9a:b3:2a:28:c6:8c:fc:e1:b5:50:e6:
49:3a:13:12:93:7c:2d:a5:76:52:3a:d9:f2:3f:31:
5d:33:85:ed:ac:b2:35:53:79:a4:6c:7e:ea:3e:c6:
a8:2e:8f:44:9c:46:79:98:5d:98:7c:c1:09:d2:12:
a8:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:28:F6:A9:6C:EA:C2:93:B1:9F:28:C6:8A:C4:86:EF:A0:F0:41:45
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:e3:4a:f5:68:5f:06:3b:0f:36:3f:c0:b7:10:81:41:48:3e:
01:20:8d:9a:ff:99:a9:6d:22:61:f3:98:94:48:33:16:90:e5:
ba:c7:5e:aa:a2:8e:8e:96:df:c7:c1:fa:af:7e:e6:de:76:6e:
cc:56:51:e8:59:65:b8:fb:1b:be:65:e8:0d:7b:d2:71:5c:8b:
da:2e:5d:da:81:e4:6f:3b:d3:25:fe:31:d6:5b:77:62:66:dc:
77:80:f2:eb:04:d6:4f:a6:76:7f:14:f2:b5:cc:a8:b3:06:83:
ee:98:89:c4:bf:77:1d:fd:d4:10:ba:3f:46:10:5d:17:db:b3:
b5:fc:8e:fc:17:12:bd:90:39:13:02:23:fe:f3:77:b8:3e:6d:
03:b4:62:da:ed:27:25:35:ea:46:88:79:a5:ea:9e:e0:56:9c:
9d:40:11:fe:84:51:ca:52:0b:ee:66:31:eb:ef:f7:0c:03:f5:
7d:46:0c:c6:73:f0:ab:22:df:86:a4:74:cf:22:e8:d8:1f:4f:
a8:53:d9:65:ab:42:11:2e:31:32:af:d2:15:ab:13:1d:83:85:
88:34:94:0a:aa:67:ca:be:38:33:6d:54:68:83:4e:c8:2e:c2:
86:74:46:47:42:e4:b2:ba:98:cd:56:a2:86:bb:25:43:97:ce:
d0:8b:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:31:03 2025 by rpki-client