Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
File: kCmtIleaaAXB_4se5dc1KQwBNAs.mft (raw, json)
Hash identifier: eXWuYjBJKep2I8MEaoBa+E6JzY7r+b52rspwM5Iv4oA=
Subject key identifier: 8E:24:6D:3E:EB:3C:AB:F4:98:19:5A:0D:3B:57:86:42:2E:B4:B1:FB
Authority key identifier: 90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
Certificate issuer: /CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Certificate serial: 0196A2E54C1916387FB8A4C7F0B66F91639A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
Manifest number: 148F
Signing time: Tue 06 May 2025 00:00:58 +0000
Manifest this update: Tue 06 May 2025 00:00:58 +0000
Manifest next update: Wed 07 May 2025 00:00:58 +0000
Files and hashes: 1: FzL4SlSs_uFjHZS5YX5ero2HyWw.roa (hash: 3lSLuBolW3IlEuxgHTGtyQj8Ri5qBsROLZSgukqH9vw=)
2: kCmtIleaaAXB_4se5dc1KQwBNAs.crl (hash: EyGiDHxtTu8Rz0+mxzwr2XfNqWz1zm+N65PvUKLF6Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:e5:4c:19:16:38:7f:b8:a4:c7:f0:b6:6f:91:63:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9029ad22579a6805c1ff8b1ee5d735290c01340b
Validity
Not Before: May 6 00:00:58 2025 GMT
Not After : May 7 00:00:58 2025 GMT
Subject: CN=8e246d3eeb3cabf498195a0d3b5786422eb4b1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:ee:22:1e:46:62:6d:c7:ff:e5:97:55:57:
40:fc:30:77:74:87:2f:23:84:a3:5e:15:2c:d6:03:
43:e7:25:bd:47:f9:5c:d0:3f:08:6a:9a:02:e7:fe:
25:c3:8a:5c:c8:77:7a:66:6e:4e:c6:7f:86:bf:09:
19:bf:72:8b:39:07:c3:6c:e1:cd:3a:2e:eb:e1:87:
a3:e0:0e:45:c9:7c:28:30:2a:d6:74:f0:4a:57:b2:
bf:73:8d:99:75:cd:c5:ee:87:4d:e9:ce:d8:74:5b:
bb:ba:9b:61:93:7f:9e:c8:9a:2c:2c:49:cb:5d:2c:
e5:97:7e:b0:b9:e6:72:3f:d7:62:e2:c5:80:23:96:
e7:52:b4:ad:d4:a2:ca:bd:99:37:70:13:76:8e:e2:
41:88:cd:60:4d:97:4f:e4:54:b7:c5:7b:83:77:c5:
59:f9:4d:88:49:53:38:8b:55:d6:52:19:1d:28:3e:
25:3f:7e:b3:c5:78:fb:50:ff:bb:aa:be:fd:56:ea:
54:11:b2:e9:1c:a7:55:f2:92:b5:18:2d:41:cc:90:
20:41:e0:0a:a3:53:cd:91:a8:cc:5b:87:b6:c9:71:
cb:07:cc:ba:72:27:1a:5c:5e:9c:6f:08:73:fd:04:
d1:04:5e:0c:14:a0:66:16:ec:5e:69:06:54:44:08:
bd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:24:6D:3E:EB:3C:AB:F4:98:19:5A:0D:3B:57:86:42:2E:B4:B1:FB
X509v3 Authority Key Identifier:
keyid:90:29:AD:22:57:9A:68:05:C1:FF:8B:1E:E5:D7:35:29:0C:01:34:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kCmtIleaaAXB_4se5dc1KQwBNAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/edaefe-c870-4147-9e3b-c799d6d6144a/1/kCmtIleaaAXB_4se5dc1KQwBNAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:de:6c:10:cd:e4:2b:b8:a8:ad:e1:f5:8c:1a:7d:90:3d:ab:
75:e0:1e:5c:5a:a6:99:6f:8d:f6:e2:59:4a:46:8b:fd:d8:f9:
cd:ba:02:a0:87:94:5a:55:5f:6b:c2:7f:2d:e8:f7:ae:2d:e3:
db:c3:e8:a0:fc:ff:d8:8d:c9:63:d5:61:4c:83:10:b8:5e:3b:
04:2e:dd:92:52:c0:87:f5:b7:a5:f7:cc:86:d2:5f:29:15:23:
96:b0:7d:e3:67:f2:ff:e7:aa:e7:2c:31:73:e4:3c:58:a1:d0:
44:cb:92:30:54:a7:9d:a4:cb:f8:16:33:72:47:f6:6f:ab:4f:
91:5f:5d:05:bf:ab:65:a0:59:9a:29:30:3e:b1:28:b4:42:5d:
de:45:1b:76:98:b1:8d:95:32:db:55:dc:29:6a:bf:0a:0f:81:
d6:fd:5d:6e:ec:79:53:cf:7e:e7:bb:57:fe:db:7f:ee:c7:d9:
2a:2c:84:0d:7a:4b:6c:a1:30:07:11:be:70:9c:8f:31:53:7f:
ad:3b:27:86:d9:55:73:71:94:27:fc:b5:33:68:c1:86:6a:d8:
54:9d:34:65:b7:3c:6d:c3:9c:be:d4:f7:1b:12:22:f1:7e:0e:
cd:fd:85:77:d7:ad:ca:f8:29:25:a7:2d:72:01:d7:63:14:c9:
a6:81:1b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 02:52:33 2025 by rpki-client