Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
File: _kWQZfcoEX0ccLjFTNqPRh24BHU.mft (raw, json)
Hash identifier: samRXIaMtkeNHEu26FSqbWDwINRpl/GYOgEl50ufQS4=
Subject key identifier: C9:01:B5:2F:A0:C7:0E:69:A0:40:F8:10:FF:81:D4:7D:F4:26:0C:38
Authority key identifier: FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
Certificate issuer: /CN=fe459065f728117d1c70b8c54cda8f461db80475
Certificate serial: 0196B47D6FFCA9411E3FA5BB0C408FB8D1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
Manifest number: 0455
Signing time: Fri 09 May 2025 10:00:41 +0000
Manifest this update: Fri 09 May 2025 10:00:41 +0000
Manifest next update: Sat 10 May 2025 10:00:41 +0000
Files and hashes: 1: _kWQZfcoEX0ccLjFTNqPRh24BHU.crl (hash: K0IdWBlC1obnxWF49aDRKwsgsN0LGXL6b6kS4TwH7Dw=)
2: j0TrgD1mMe4SCFwW2zXApzSjMys.roa (hash: A16AXZA8TA0369WZ1QSUTK6vpWpKMrbFHrcl2YyzIA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:7d:6f:fc:a9:41:1e:3f:a5:bb:0c:40:8f:b8:d1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe459065f728117d1c70b8c54cda8f461db80475
Validity
Not Before: May 9 10:00:41 2025 GMT
Not After : May 10 10:00:41 2025 GMT
Subject: CN=c901b52fa0c70e69a040f810ff81d47df4260c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:9b:2f:3f:81:a7:29:a3:7a:1f:58:39:3a:81:
f7:e5:bc:b2:9f:8d:68:16:21:f2:68:ea:b6:8c:b9:
62:c0:26:5f:64:e9:35:22:13:ea:07:77:a1:98:41:
36:b6:d9:c9:b3:02:b7:20:99:93:89:d4:23:cb:35:
b4:48:0f:35:a9:77:e2:89:38:22:1c:d5:85:80:9d:
02:dd:aa:89:52:7d:93:c1:26:e8:b4:5f:a7:d4:0d:
12:08:78:86:59:f2:36:9b:d1:fb:4b:14:9e:e6:be:
43:c6:41:c5:a6:5b:88:12:44:49:8f:a4:c2:ad:f9:
4f:e9:3d:58:ff:e3:c8:d7:62:bd:ca:f0:78:e2:46:
0c:14:52:fd:b2:88:4e:c0:18:f9:80:1d:76:a9:19:
08:90:2a:b6:53:00:55:39:26:6b:f7:73:3f:8d:69:
6b:83:90:fc:11:5e:7a:51:99:de:54:59:77:a6:1b:
5a:e3:eb:45:2e:34:94:49:4c:69:54:40:b6:23:f1:
1b:f4:50:66:7d:ec:39:3f:fd:fa:9d:75:24:17:c1:
81:bf:44:3d:ec:5a:a0:f1:07:49:ce:91:f5:84:9e:
79:b4:34:09:13:f5:d3:bd:63:cd:8c:1d:6b:4b:80:
fb:c3:f0:c6:af:41:92:f9:6b:bc:22:c8:4a:b6:62:
e6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:01:B5:2F:A0:C7:0E:69:A0:40:F8:10:FF:81:D4:7D:F4:26:0C:38
X509v3 Authority Key Identifier:
keyid:FE:45:90:65:F7:28:11:7D:1C:70:B8:C5:4C:DA:8F:46:1D:B8:04:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kWQZfcoEX0ccLjFTNqPRh24BHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/060222-5741-4e23-97d6-d63a23cf114c/1/_kWQZfcoEX0ccLjFTNqPRh24BHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b3:55:c4:b9:e2:eb:d2:74:b9:82:7f:69:01:c5:29:9f:21:
5a:48:1f:c3:62:55:fb:f7:8a:6e:c2:31:d1:22:65:8c:b5:0c:
6c:d7:db:ec:03:a8:b5:7e:bd:14:d0:32:88:48:da:91:50:7c:
d4:27:c5:c9:90:05:fd:6a:db:a2:61:3d:a8:d9:a7:2e:e9:48:
79:97:c7:05:7f:81:9f:b2:76:8a:5d:c4:25:0a:94:31:1a:3e:
38:1a:5e:27:ce:e2:5e:df:35:8f:e0:75:93:74:2a:45:f3:31:
d5:6d:0f:20:cb:f8:44:4a:19:41:eb:17:db:70:3b:91:12:52:
fc:f2:02:be:4f:05:a8:8d:ba:53:36:cf:7b:01:15:51:8e:3a:
3d:58:14:f0:cf:22:a2:dd:0a:93:1a:b4:a6:e1:a0:3c:92:47:
e7:26:4e:fc:e0:54:94:f9:c5:72:0e:58:97:e0:15:fb:26:36:
45:a9:c5:cc:33:c0:6f:6c:ce:65:59:a9:d7:69:21:da:e0:36:
9d:6b:7a:26:1f:48:e4:f4:a3:5a:20:29:47:d6:f2:e2:e8:6d:
de:fe:fb:ee:18:2e:07:ce:a5:2a:ca:7b:39:fc:6f:06:be:1f:
25:7b:8c:67:7e:2b:49:ab:5e:8a:8d:e8:f0:b1:82:3d:59:c5:
d5:26:a0:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:58:19 2025 by rpki-client