Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
File: KWJHhUnYzCZMLMV9znGQXRdvuIo.mft (raw, json)
Hash identifier: 12g5gtF4xcbOVmd5v7NPFtu5DBYb1i6sXgHYl6V4HbQ=
Subject key identifier: 88:D3:97:27:8D:40:28:00:23:D2:8C:BC:FD:7F:CE:A0:4D:E4:42:65
Authority key identifier: 29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
Certificate issuer: /CN=2962478549d8cc264c2cc57dce71905d176fb88a
Certificate serial: 0196A3C11E98F26B886F499F24890732B603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
Manifest number: 14B7
Signing time: Tue 06 May 2025 04:01:04 +0000
Manifest this update: Tue 06 May 2025 04:01:04 +0000
Manifest next update: Wed 07 May 2025 04:01:04 +0000
Files and hashes: 1: Db4cgvqb5UOgeQz4JyUwJf6Q1lU.roa (hash: zvZMT/bbatMS4tl05cs3bvS/uoQt4c5U4AeQiIO1dXo=)
2: KWJHhUnYzCZMLMV9znGQXRdvuIo.crl (hash: dpE+9rWxuJr1aYxDMZ4K6RXIKaopPBu179g/+orlE0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a3:c1:1e:98:f2:6b:88:6f:49:9f:24:89:07:32:b6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962478549d8cc264c2cc57dce71905d176fb88a
Validity
Not Before: May 6 04:01:04 2025 GMT
Not After : May 7 04:01:04 2025 GMT
Subject: CN=88d397278d40280023d28cbcfd7fcea04de44265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e5:21:61:44:a8:4b:0d:ab:30:c6:f0:d3:74:
6e:55:73:85:89:04:2c:db:6a:e1:21:08:a8:a0:ff:
2b:f3:6c:29:cb:cb:cd:33:22:fa:82:78:aa:7e:b5:
52:7e:72:c2:a4:8a:27:38:2c:ec:a9:8d:c1:1c:5d:
32:f8:c3:09:f5:24:a5:4f:d4:23:1f:e9:7e:e1:b3:
d2:9d:ce:26:71:5f:b8:4d:27:00:06:90:fb:e2:75:
65:76:07:3d:f1:6c:02:d2:e0:03:74:7f:d3:68:68:
89:25:8d:6b:5e:8a:f1:37:67:e4:7b:95:66:0a:f9:
fc:ba:9c:de:89:b5:c2:79:23:63:6c:9a:3a:97:49:
08:18:3e:1f:2f:77:44:27:2d:03:b6:a3:1e:6d:cc:
62:55:14:95:24:a9:b4:dd:85:0c:7f:80:fe:21:64:
94:46:b1:5e:e7:a7:d3:d0:d0:8f:5c:d3:51:7f:98:
af:8c:1f:ab:51:3f:a7:ee:31:3f:94:4e:ab:cc:b4:
eb:68:95:58:a5:44:64:cc:f2:5d:9d:fc:5e:8d:4b:
68:03:b8:b5:77:c8:d1:8e:33:bb:85:80:a6:29:9a:
2a:1a:2a:31:b7:6f:20:cb:41:c8:de:1f:65:f3:03:
60:57:7e:08:eb:ca:b9:36:bc:f8:96:b9:ea:d4:3d:
78:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D3:97:27:8D:40:28:00:23:D2:8C:BC:FD:7F:CE:A0:4D:E4:42:65
X509v3 Authority Key Identifier:
keyid:29:62:47:85:49:D8:CC:26:4C:2C:C5:7D:CE:71:90:5D:17:6F:B8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWJHhUnYzCZMLMV9znGQXRdvuIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/545258-f8a9-4ceb-b01b-c8df84e7ae29/1/KWJHhUnYzCZMLMV9znGQXRdvuIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:2a:d0:9c:0e:8b:fa:4e:21:18:b6:a2:0b:73:3c:57:44:f0:
d5:41:2f:7e:68:73:53:45:9d:ab:c6:76:0f:3f:72:55:61:77:
a7:b6:4e:18:a9:32:87:12:f3:d3:d4:67:75:65:04:c3:fd:d6:
bf:14:46:83:30:e3:b2:f5:87:44:47:48:3d:42:e7:2f:0a:15:
da:42:2e:a2:a9:17:ab:44:a9:e0:ca:a5:be:56:64:95:a2:3a:
c2:c7:5f:42:35:b9:58:63:09:3c:fa:4c:59:5b:2d:a3:c4:95:
b8:96:2e:a3:02:5c:93:12:56:00:37:71:aa:d4:a7:61:27:e3:
ea:67:91:93:15:15:4a:4f:de:34:9c:55:07:12:50:ca:e2:11:
01:44:17:f7:b0:86:b4:90:ce:9c:d3:56:88:fa:6b:c0:2d:44:
c3:e0:d0:fc:47:3c:61:e2:8b:ba:43:c9:13:69:cb:5f:50:f7:
3b:67:26:de:4a:82:9c:80:f8:61:0a:fb:0e:a5:83:ca:36:84:
7c:cb:52:85:a6:9b:50:4e:6c:e5:78:3c:c5:e7:ae:49:b7:72:
19:0c:82:22:f3:50:17:c4:7b:18:cb:ee:dc:3a:d3:39:30:ae:
f3:bd:41:38:42:eb:22:a5:78:26:a9:3a:81:a3:12:31:93:cb:
dd:50:c6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 07:25:09 2025 by rpki-client