Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
File: kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft (raw, json)
Hash identifier: ZlHoGbz0iBjuZggF/Td8b1jKABxrvg2PhespwLzBQic=
Subject key identifier: C2:90:FA:B4:53:B7:53:A2:4A:9A:FC:4C:80:19:85:AD:B2:69:45:04
Authority key identifier: 91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
Certificate issuer: /CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Certificate serial: 0196A72FC50198873AC9C26B4F4F889837DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
Manifest number: 1456
Signing time: Tue 06 May 2025 20:00:47 +0000
Manifest this update: Tue 06 May 2025 20:00:47 +0000
Manifest next update: Wed 07 May 2025 20:00:47 +0000
Files and hashes: 1: 6fnAZ8W2MGF8ZNrQkh_nCxeTpv4.roa (hash: VVdXTpC74ZKSlf0OaYeG4sfAbOWwASAnFr5UUxM1yrQ=)
2: jwF2Fe8ZjLBRTo3L_7TINNi10fQ.roa (hash: Ap/raQBvujEIQc3hDUBU94DRN1La9dL+OAKrqJu5rbU=)
3: kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl (hash: 7/ZRG59QktSsXo9wBjgLRTq7lZRDKdhqYixfUwuFJAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:c5:01:98:87:3a:c9:c2:6b:4f:4f:88:98:37:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d01c47f00e64f35cc752d03b34a71b71406b3f
Validity
Not Before: May 6 20:00:47 2025 GMT
Not After : May 7 20:00:47 2025 GMT
Subject: CN=c290fab453b753a24a9afc4c801985adb2694504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:8f:97:fc:5f:ae:35:ab:ab:ef:d0:31:bf:
a5:6d:fb:b7:e5:9c:79:eb:f2:62:38:75:30:b0:8b:
36:ce:02:4f:6b:c7:16:63:49:04:84:9b:fd:7f:3a:
0d:ad:06:91:41:27:82:6b:1c:d3:d5:84:70:06:76:
7a:14:6e:8b:c3:93:40:27:29:f2:ae:6c:84:c4:3c:
2e:ef:24:0e:e2:56:e1:69:1a:2e:f3:bc:9f:11:ef:
55:1b:4a:f4:03:33:cf:ad:27:3e:d0:53:f1:cc:2c:
c8:8f:de:f1:d2:07:4f:72:08:02:84:4b:a4:8e:a6:
17:57:b1:ea:ba:ea:04:e3:e1:e3:43:e6:57:3c:36:
a0:f8:54:53:7f:d9:20:e6:d9:5f:9e:c7:a3:76:f6:
03:35:c6:d0:01:80:0e:86:83:53:5f:15:1e:ec:20:
44:30:4f:51:2c:9c:a5:87:6a:f3:60:e8:63:81:cb:
f1:97:6a:71:bb:f1:22:af:99:57:6d:5f:ea:84:ab:
6c:b5:58:45:02:93:fd:0d:4e:4f:14:ec:34:6f:3a:
54:4c:8f:09:81:5a:fb:94:47:a3:04:ca:fb:f1:b6:
30:9a:7a:46:1d:06:31:eb:c2:e4:6f:bc:44:d7:4f:
af:1e:e2:df:65:0a:8d:eb:66:f5:bd:dc:7a:5d:61:
05:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:90:FA:B4:53:B7:53:A2:4A:9A:FC:4C:80:19:85:AD:B2:69:45:04
X509v3 Authority Key Identifier:
keyid:91:D0:1C:47:F0:0E:64:F3:5C:C7:52:D0:3B:34:A7:1B:71:40:6B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdAcR_AOZPNcx1LQOzSnG3FAaz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/b0fc0c-c537-40b4-9b5b-56b006ef0d3b/1/kdAcR_AOZPNcx1LQOzSnG3FAaz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:1c:83:96:67:84:d8:f5:89:81:a7:15:39:23:2e:81:32:dc:
00:4e:3c:46:b9:39:65:d7:26:a8:32:06:4a:62:32:f3:ac:d3:
4e:81:5e:d0:6a:7a:e2:b0:bf:19:13:bd:e1:c2:a8:77:9a:a0:
d1:47:78:19:5e:38:36:2f:5d:fe:41:40:0b:8b:74:cd:a6:2f:
79:d8:3a:78:cf:10:af:c4:3f:64:a3:12:cc:13:da:aa:35:5d:
75:e0:a3:a4:e9:25:f3:74:55:85:92:20:47:39:07:96:7e:1c:
b0:79:14:19:be:57:77:ce:cb:e0:d3:85:c1:47:e7:d5:32:e5:
56:44:49:fa:55:c2:d7:91:50:e7:57:fd:29:f8:15:3b:22:92:
5a:3b:b4:5c:de:1b:e5:38:d5:4e:bc:f9:7d:77:70:1b:d7:4f:
da:cb:4a:50:89:28:2e:0d:a7:47:71:0c:c7:5b:f6:27:ed:b1:
38:a1:9f:a3:e9:ab:f4:dc:a1:54:c0:cc:3b:0c:d6:72:7f:c3:
f6:21:2d:6f:92:69:eb:a3:20:59:60:5f:70:12:3d:bb:c2:d1:
d1:62:31:03:f6:dc:48:19:56:10:26:5a:5d:b4:99:d8:91:a1:
db:66:88:ce:a5:a8:8f:b3:e6:67:68:10:37:36:8c:e3:0a:df:
15:1b:cb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:21:43 2025 by rpki-client