Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
File: kRAQDzzHh9YxUwPLf8iNniXlbqg.mft (raw, json)
Hash identifier: 1zWktI0fcDdOBzTX4890ZhnCMOT0b1qSP9xK97Qb/7s=
Subject key identifier: 55:A9:AC:21:78:B3:68:14:AC:70:EC:B6:09:0A:F3:6E:26:57:47:59
Authority key identifier: 91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
Certificate issuer: /CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Certificate serial: 0196DA788B140A0B010CD8693B631EAFE3B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
Manifest number: 0957
Signing time: Fri 16 May 2025 19:00:55 +0000
Manifest this update: Fri 16 May 2025 19:00:55 +0000
Manifest next update: Sat 17 May 2025 19:00:55 +0000
Files and hashes: 1: bRhGJqv0p8mJ4Y5Zi3hw3lkQdsk.roa (hash: z2JalsCXdVTGdLdK888EdCX/YOon+kmiEVhkkUSf3/w=)
2: kRAQDzzHh9YxUwPLf8iNniXlbqg.crl (hash: Y1u5+1PbPdxBSVkSDvkQp3s8/JLLqv77xWRR21YdOQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:da:78:8b:14:0a:0b:01:0c:d8:69:3b:63:1e:af:e3:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9110100f3cc787d6315303cb7fc88d9e25e56ea8
Validity
Not Before: May 16 19:00:55 2025 GMT
Not After : May 17 19:00:55 2025 GMT
Subject: CN=55a9ac2178b36814ac70ecb6090af36e26574759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:37:e0:0d:75:01:28:a5:e5:91:7a:9d:26:0b:
13:32:a3:f2:db:ac:a7:29:cc:18:47:93:e6:3d:35:
60:4d:5f:73:cf:d1:25:18:54:a2:00:c7:78:10:bf:
13:0e:44:0d:ae:d8:b1:38:6b:9a:a8:95:65:49:98:
bd:e9:ea:dd:68:ea:fb:31:4e:f2:dd:f2:0c:c0:11:
fd:c3:43:af:00:7c:59:06:e2:4e:11:37:48:6d:cc:
05:25:12:73:06:23:15:99:95:51:fe:26:41:b0:28:
9c:fd:8d:4f:af:74:c1:52:77:bf:6d:be:13:dc:cc:
7d:c1:b2:c4:a2:f2:76:34:03:1b:8b:c2:c6:e0:13:
9c:80:22:4a:7e:7e:d6:06:ec:db:6f:fd:6d:7d:38:
c4:3f:02:7e:fb:1d:d7:18:b6:dd:2c:f2:79:e4:c5:
49:90:34:f0:a2:11:db:c8:40:d4:52:ed:5a:56:11:
3a:7b:ab:49:31:f6:52:19:10:69:c5:66:c3:6d:a8:
12:6f:12:9c:8b:95:47:66:86:1e:b8:a1:b0:9e:56:
b6:f6:6f:c5:5e:53:08:53:42:8f:5e:82:a2:8e:9a:
02:c9:fb:ef:f2:a2:94:08:f4:24:0a:53:b9:99:b0:
4a:03:84:5f:f2:8d:27:29:8d:46:7f:b1:f1:87:42:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A9:AC:21:78:B3:68:14:AC:70:EC:B6:09:0A:F3:6E:26:57:47:59
X509v3 Authority Key Identifier:
keyid:91:10:10:0F:3C:C7:87:D6:31:53:03:CB:7F:C8:8D:9E:25:E5:6E:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kRAQDzzHh9YxUwPLf8iNniXlbqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d900b3-5462-4eb4-9c90-0e0377d4e6d6/1/kRAQDzzHh9YxUwPLf8iNniXlbqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:f3:35:f8:04:b9:75:ed:0d:d2:3b:68:dc:86:26:95:05:41:
06:32:68:55:19:fe:5b:bb:d4:9f:57:ed:29:ba:aa:56:92:9b:
5b:7a:a4:20:35:9b:f3:66:2a:5b:4f:64:a7:e4:6c:93:97:0f:
70:5f:ce:97:15:fb:f8:e5:e2:b5:3e:14:3e:f6:f8:29:50:c2:
8f:1e:8d:c3:b7:a2:06:37:c6:99:db:b9:65:b1:9a:36:bc:10:
d9:ce:25:b3:b4:45:69:27:05:f4:b1:20:60:bf:d4:dd:b1:df:
f2:b4:6a:08:0b:d7:8f:5e:4e:33:56:cf:51:e3:2a:61:e0:6a:
4a:ed:5e:02:74:4e:51:79:d2:0a:a9:38:89:06:14:b3:58:ee:
bd:19:e8:6e:01:54:d8:98:be:f9:e3:0e:0f:c9:c7:45:d3:f8:
f7:bb:4e:e5:cf:af:95:4b:13:ff:cc:db:67:4b:e6:ba:10:24:
da:26:f4:03:5b:2c:d6:39:66:00:d9:2a:fb:96:26:03:be:1f:
d8:e1:97:c6:28:42:97:16:ad:b6:6a:68:9e:c6:51:81:17:07:
35:8f:d9:85:87:3f:f6:d1:87:c7:0a:1f:bc:50:1c:e2:56:a8:
2b:59:a2:12:31:d0:15:af:b8:84:d7:c3:b0:9a:6b:0c:7e:5a:
84:7e:9e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:32:38 2025 by rpki-client