Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: cRhxBXWrAgGDPHbYsMEh1e9q3dqdHJIcsnNgvwtAdIg=
Subject key identifier: 90:71:22:28:A8:5F:C0:4D:91:D8:2C:56:63:8F:8A:94:00:64:41:8D
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 01969C74DA946334D380EF87D9B3AA4CF8D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 0F1E
Signing time: Sun 04 May 2025 18:00:25 +0000
Manifest this update: Sun 04 May 2025 18:00:25 +0000
Manifest next update: Mon 05 May 2025 18:00:25 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: 5qKt1P0yJw8lEaLPv3xYyL/7m1FSXUhuu929wejNPvE=)
2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 18:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:74:da:94:63:34:d3:80:ef:87:d9:b3:aa:4c:f8:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: May 4 18:00:25 2025 GMT
Not After : May 5 18:00:25 2025 GMT
Subject: CN=90712228a85fc04d91d82c56638f8a940064418d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:57:59:75:b3:55:d1:3c:90:38:91:b4:ba:
4d:ef:20:f6:67:c5:c3:8f:7c:3e:eb:c4:6f:e0:ef:
5d:a0:38:6e:a5:8d:6b:f1:be:0d:2f:78:45:c7:0e:
5d:b8:d3:7a:15:b8:db:9c:d9:43:e0:76:b7:55:b5:
af:22:95:82:f7:e4:24:65:b2:87:7b:6d:14:17:7f:
3a:a7:21:a1:20:af:17:4b:8e:ee:e7:72:32:6e:a2:
39:d5:b7:93:0f:7d:0d:98:af:d0:34:aa:6d:cf:d5:
c6:43:ef:80:5a:31:73:16:38:71:4f:b4:07:7d:76:
e6:ab:06:82:92:e9:ab:09:57:a6:3c:9f:ce:ac:ed:
21:a0:80:a5:90:ed:34:01:61:ab:23:0e:1c:4c:35:
1a:59:57:70:5d:23:03:f0:cf:cb:ea:f9:28:55:0f:
92:82:60:b1:7e:b8:dd:3c:81:72:16:a8:9c:e1:65:
fa:7f:df:a2:f0:df:7d:45:f9:86:17:4a:92:34:0c:
14:94:46:65:94:3b:4f:9f:95:70:e5:84:d7:ec:8c:
78:1b:6b:07:1c:cf:31:1d:a5:9b:d3:1a:83:9b:67:
d4:2f:28:2f:be:bb:26:03:8a:37:aa:f6:52:96:c1:
e6:69:5e:dc:b3:df:08:3b:d4:f3:6c:33:84:d1:ed:
1d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:71:22:28:A8:5F:C0:4D:91:D8:2C:56:63:8F:8A:94:00:64:41:8D
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:da:bc:cd:7e:a6:8d:e1:56:9d:98:19:23:2d:a1:38:e4:84:
62:3a:bb:bd:0c:72:b2:f5:75:32:c7:fd:d7:8a:f1:fa:e3:50:
55:96:76:f5:d7:73:2b:95:d0:4a:09:3a:c2:9a:ea:5c:55:63:
8c:ff:7c:69:69:4a:de:17:0e:29:4c:71:4a:20:c6:66:35:91:
b5:7e:51:ce:29:e5:62:fa:f2:d2:7b:92:ae:98:4f:09:b3:a3:
91:0a:08:ed:26:8c:85:e9:4d:af:c9:6a:6a:fd:f4:5e:c4:4a:
4c:d2:7f:19:95:25:2a:e1:c9:e8:46:ed:9d:fb:19:c0:18:75:
b7:e2:8e:de:61:7e:4f:56:1a:81:12:35:9a:95:d7:8c:88:95:
4b:d1:62:81:d5:2c:e0:62:bd:2e:ca:5f:05:fb:30:fe:45:31:
63:30:2c:ef:95:95:de:63:fa:c9:fb:71:6d:4b:c4:1a:ae:fb:
b8:d5:ba:d7:a5:0a:d9:13:a1:2d:b2:00:7b:dd:dd:5c:8f:b2:
e7:10:d2:66:83:90:a3:ab:f1:51:24:39:15:7d:c8:74:6d:39:
36:93:39:d3:49:aa:fb:8e:25:93:d7:2d:e8:05:a6:9a:78:a7:
ed:67:88:c1:4f:64:65:bb:02:5a:d0:7a:3b:e2:42:16:04:46:
3c:c6:83:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:00:48 2025 by rpki-client