Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
File: KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft (raw, json)
Hash identifier: F8h/buCzmh3EuIxpsEm9QTZBm2xxD5PUhGZ5Nfw5s54=
Subject key identifier: D3:3A:1B:26:1F:20:53:02:8D:65:A3:42:8C:6E:E4:BA:9B:5E:8B:78
Authority key identifier: 29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
Certificate issuer: /CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Certificate serial: 0196CB733A8518B894065CAD6A6A90154FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
Manifest number: 153F
Signing time: Tue 13 May 2025 21:00:48 +0000
Manifest this update: Tue 13 May 2025 21:00:48 +0000
Manifest next update: Wed 14 May 2025 21:00:48 +0000
Files and hashes: 1: KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl (hash: g2CShGuMyYNxhofs0hdmLuWSdH8cVRcixlkSkMvCa1o=)
2: iinwbjaCpK6V8_stsXvEKtBkl8w.roa (hash: M1V1vtHFjPXfduw3ijubEwFy3tYmjuQ7qndUwyTCfGk=)
3: uJWKugGWqtQl6VVyKAzx1i_N0aA.roa (hash: BJfTtZgXbkNAvLFFTKLvaiDNDprXBJ4/kR9lJ8wjqSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:3a:85:18:b8:94:06:5c:ad:6a:6a:90:15:4f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29109da662f9d302fff2c5c4b4afb8f947fec1c0
Validity
Not Before: May 13 21:00:48 2025 GMT
Not After : May 14 21:00:48 2025 GMT
Subject: CN=d33a1b261f2053028d65a3428c6ee4ba9b5e8b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:e1:2d:c5:de:0c:89:33:c6:e1:18:1a:b9:
ec:7f:90:2a:f7:95:a2:86:ff:ba:85:dc:6d:85:68:
59:3a:3d:07:58:c1:65:86:4f:81:94:d1:77:98:42:
51:0d:b8:ac:54:1d:62:28:f3:d8:36:52:fb:76:6d:
ea:86:9c:9b:84:c0:81:62:c0:74:b9:a4:61:5f:90:
58:ec:b8:dd:94:46:4f:05:28:00:8e:e6:d0:4e:f3:
8d:1f:40:df:73:70:27:f9:67:55:b1:78:a9:18:e3:
5e:99:f6:ff:0e:bf:b1:60:7b:db:fc:c4:1e:40:38:
ab:df:83:20:26:42:c1:e5:77:4c:29:13:56:e6:77:
70:5e:b6:a3:95:21:81:a8:bf:63:e1:03:f7:18:d9:
04:37:e9:17:85:f3:22:cb:aa:45:f0:84:44:d4:35:
bd:27:ac:6e:d5:a1:31:72:cd:7f:74:7d:20:ad:59:
76:3a:a2:d4:3f:9f:6e:61:75:f8:c0:02:96:f5:f5:
e4:ca:61:76:a3:fe:06:ac:5e:52:89:60:be:67:f4:
ac:15:f2:cc:89:3d:c4:3f:04:12:b8:74:d5:6d:ba:
98:f1:ed:2c:de:e0:63:74:42:fe:32:21:a4:4e:25:
c8:75:46:28:d0:86:14:d1:1d:ef:12:56:ef:52:74:
cb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3A:1B:26:1F:20:53:02:8D:65:A3:42:8C:6E:E4:BA:9B:5E:8B:78
X509v3 Authority Key Identifier:
keyid:29:10:9D:A6:62:F9:D3:02:FF:F2:C5:C4:B4:AF:B8:F9:47:FE:C1:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRCdpmL50wL_8sXEtK-4-Uf-wcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/930279-3187-47a5-8137-f4fb5c880509/1/KRCdpmL50wL_8sXEtK-4-Uf-wcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:16:77:11:4c:25:6d:f8:85:3a:69:8f:ad:d1:f8:12:d4:83:
32:85:3d:6d:78:8b:3d:ed:ab:8b:60:59:9d:1b:54:4b:0a:19:
9f:51:f3:f9:76:43:2b:13:27:db:41:51:12:1d:2d:05:39:71:
11:4a:1b:c7:91:91:d5:85:4c:51:12:da:cb:2d:9f:49:8d:40:
3c:0c:6c:ba:de:9e:25:67:a7:9f:76:e8:35:bc:3d:4b:72:1a:
7c:b6:b4:7f:90:4c:81:21:96:54:48:8c:6a:59:38:e6:dd:87:
e7:0b:6b:98:09:70:6e:43:f6:ea:c8:e8:dd:35:9c:f8:29:a3:
b0:61:b0:2f:67:c3:f3:05:6f:31:62:99:8c:42:24:1b:57:a6:
de:a7:75:0f:93:39:07:da:ec:81:15:3e:66:57:9d:06:c0:9b:
10:7f:1e:fb:96:bc:21:21:25:cd:c3:09:19:a5:c8:79:00:3a:
c4:28:65:28:e6:6d:9a:e7:55:23:65:8c:c9:63:b7:10:88:22:
78:7b:67:9c:75:66:c8:d2:7d:c7:36:cf:34:48:e6:e0:22:fb:
03:e3:ba:36:4d:df:52:e2:73:99:4e:74:78:f3:f0:74:9a:13:
89:20:70:c7:e8:96:20:d1:af:0e:f4:33:29:8f:f5:fd:12:e3:
9a:f7:c4:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:23:43 2025 by rpki-client