Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
File: klUhi2nlURQ8UfodkZUS4aRMXJ0.mft (raw, json)
Hash identifier: jHLipG2vfiFV0UQrhVh3sahoPSU8eK5Rs7nYUhsJ8kk=
Subject key identifier: 35:CF:31:D2:0F:5A:2A:41:42:0A:28:72:CF:D4:2C:CF:CD:2F:2C:6C
Authority key identifier: 92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
Certificate issuer: /CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Certificate serial: 0196C3F0B27DF2294803448DEB73C9DC54BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
Manifest number: 1279
Signing time: Mon 12 May 2025 10:00:53 +0000
Manifest this update: Mon 12 May 2025 10:00:53 +0000
Manifest next update: Tue 13 May 2025 10:00:53 +0000
Files and hashes: 1: GHhfFCE3A402Gr9cqgeQDfKgELg.roa (hash: ykZ7G8ecfT0Bn+ARhYf2ZXhWVJ+RmdfZPxrqGyOjY/E=)
2: cl0W_dg6-SS2WR9dVPceKMDs_Vs.roa (hash: /pB+oHyiaUXmAAdbfPeCmqHZJhPFFFtRAcQpmJHE+pY=)
3: klUhi2nlURQ8UfodkZUS4aRMXJ0.crl (hash: m695QSiLMmPibhDOOIxxwnUWhvA4Em4HQ9QrUoLAHc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:b2:7d:f2:29:48:03:44:8d:eb:73:c9:dc:54:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9255218b69e551143c51fa1d919512e1a44c5c9d
Validity
Not Before: May 12 10:00:53 2025 GMT
Not After : May 13 10:00:53 2025 GMT
Subject: CN=35cf31d20f5a2a41420a2872cfd42ccfcd2f2c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f9:c3:df:3e:f9:ba:01:a6:bf:1c:36:a0:e7:
84:f8:a9:92:a1:1e:d8:2b:20:d9:12:eb:d5:b2:4e:
0f:09:3e:9f:4b:3c:72:e7:b3:5e:82:71:00:6f:6e:
1a:8b:e9:db:55:55:f1:e1:ca:6c:fd:56:36:bd:46:
9c:b4:2b:a5:86:c4:63:c6:a6:ab:e5:24:c6:ec:6d:
8a:74:9e:62:02:aa:c1:ae:25:4b:0a:a2:ae:00:f7:
41:b2:0e:87:49:9d:38:f2:43:40:a8:e2:34:1c:fa:
ff:e9:16:cb:ce:38:e4:83:4f:84:59:50:21:25:67:
a8:86:33:50:f0:6e:66:56:6e:e6:e4:75:3f:81:f4:
14:56:c3:73:6d:19:96:56:16:57:d4:c5:c9:dd:a1:
98:6b:d7:4b:65:46:ab:8b:25:a8:3f:05:28:c2:76:
e3:fc:30:f9:91:19:95:6b:65:f0:86:0e:d8:d8:66:
d0:db:c0:24:7b:5c:4e:08:b7:8c:8a:c7:a6:44:1d:
f5:8a:e5:62:b6:5d:aa:8f:f6:d0:fc:ea:28:53:9b:
d3:e2:22:cf:eb:4f:2e:08:0c:86:3c:99:58:f0:97:
52:13:23:ad:49:50:87:31:89:8a:a0:03:07:00:35:
01:54:db:32:16:f9:59:45:78:1a:61:00:8c:c7:4a:
bb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:CF:31:D2:0F:5A:2A:41:42:0A:28:72:CF:D4:2C:CF:CD:2F:2C:6C
X509v3 Authority Key Identifier:
keyid:92:55:21:8B:69:E5:51:14:3C:51:FA:1D:91:95:12:E1:A4:4C:5C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klUhi2nlURQ8UfodkZUS4aRMXJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/482896-826a-4bed-b14f-affba2df3d62/1/klUhi2nlURQ8UfodkZUS4aRMXJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:25:80:bd:58:ca:02:4e:4c:f3:50:19:b8:63:31:e3:04:63:
13:cc:6b:68:55:20:a2:d4:58:75:9d:34:67:ba:33:20:69:81:
53:d3:22:f5:37:20:17:97:16:92:d8:78:66:ac:8f:c0:5a:80:
d8:77:20:c8:12:0e:90:34:49:bf:86:be:18:8a:e1:2c:2a:8d:
04:85:be:f4:81:7e:2b:10:73:10:29:12:4d:74:f4:89:8e:3f:
b3:0c:71:ba:4a:c0:0a:a7:47:df:83:63:6f:33:c4:7b:89:43:
47:40:aa:e9:64:0f:c6:43:67:4f:e7:ba:30:cc:26:fb:59:4d:
53:ef:43:11:13:c5:14:19:af:7d:ce:6d:2c:72:50:74:5d:64:
66:c1:45:49:48:b6:b0:51:74:b5:e8:d4:38:96:f6:9f:f6:bc:
ec:e8:9e:9d:8a:ab:92:be:37:35:9d:3a:50:16:a9:2b:ae:19:
66:5f:06:8c:78:67:b5:5c:ac:6d:02:fd:4a:ea:23:c1:8c:a0:
8b:01:92:e1:99:8d:2a:88:95:6d:68:75:c0:65:2a:53:e4:1b:
50:b0:b4:8b:4f:2c:8a:6d:3f:ce:bc:4e:d8:a9:26:62:cd:40:
a4:1c:79:03:ef:a1:c6:85:19:23:04:e1:9e:45:2e:f4:89:90:
30:b2:58:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:00:30 2025 by rpki-client