Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
File: KeoL3n9pK8X9wLFoumFKAnLy5k0.mft (raw, json)
Hash identifier: QihfpahgQjzxvy52rSuXVzO667ZNG+iAe0O2/+g0UTg=
Subject key identifier: 60:3C:38:51:35:54:D7:7D:14:DF:8D:01:A3:54:AA:1D:B8:A9:A9:CC
Authority key identifier: 29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
Certificate issuer: /CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Certificate serial: 01969E9A4901E0963D160561F95B10797661
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
Manifest number: 0B8F
Signing time: Mon 05 May 2025 04:00:33 +0000
Manifest this update: Mon 05 May 2025 04:00:33 +0000
Manifest next update: Tue 06 May 2025 04:00:33 +0000
Files and hashes: 1: 9cEvXYVcBJeRVXoK10hhOCyNhJY.roa (hash: ihTe2JjgXGvlLA7K+HxYQQd7iWcLoXsDNyag9kYHBGk=)
2: KeoL3n9pK8X9wLFoumFKAnLy5k0.crl (hash: zMFTFQKdf2OmlR7LaYVckPLWjsagVmR7U/AV3TAOpPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:49:01:e0:96:3d:16:05:61:f9:5b:10:79:76:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ea0bde7f692bc5fdc0b168ba614a0272f2e64d
Validity
Not Before: May 5 04:00:33 2025 GMT
Not After : May 6 04:00:33 2025 GMT
Subject: CN=603c38513554d77d14df8d01a354aa1db8a9a9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:74:51:21:49:ac:6a:59:65:e3:21:51:a3:
70:75:12:18:b8:eb:56:9f:e8:39:f0:49:5f:39:ab:
f8:99:78:86:2b:2f:23:ce:fb:d1:6b:9b:39:9b:53:
6b:e3:37:ed:4a:b5:e4:7b:2f:a7:18:17:61:2a:24:
86:92:f7:27:f1:73:39:92:63:bc:65:58:9f:4d:77:
71:0c:2b:b7:ea:90:64:ee:43:20:a2:e8:b6:93:78:
e4:20:87:c9:ea:35:2a:87:4c:be:15:2d:3a:8c:1b:
d8:54:33:fd:31:ab:0f:b4:b7:2e:f2:28:38:4f:48:
14:89:c0:19:d5:09:a0:b2:1f:1d:e9:2d:0b:68:4a:
5f:29:df:16:bd:36:c7:0c:ed:50:b6:0d:b1:0a:c3:
87:b8:56:28:5d:fd:ae:8c:cd:b6:67:49:5e:51:d1:
ee:19:0b:5c:48:1f:1b:53:cd:35:cf:30:6f:f1:43:
9f:bf:f3:7a:c6:90:ba:00:31:ad:24:1c:49:b4:27:
e1:90:85:a2:0a:73:fd:f5:fb:7f:59:83:73:06:bf:
1f:e1:ab:07:21:1e:1e:d1:64:94:21:c3:ba:be:29:
3c:e1:a9:a1:e4:f5:c4:3f:a6:e9:cb:b1:da:df:3c:
ff:56:7b:db:dd:6a:e4:cf:b4:01:b9:2f:1c:4b:bd:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:38:51:35:54:D7:7D:14:DF:8D:01:A3:54:AA:1D:B8:A9:A9:CC
X509v3 Authority Key Identifier:
keyid:29:EA:0B:DE:7F:69:2B:C5:FD:C0:B1:68:BA:61:4A:02:72:F2:E6:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeoL3n9pK8X9wLFoumFKAnLy5k0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d2ff5b-0008-4572-9380-976c04bdf18f/1/KeoL3n9pK8X9wLFoumFKAnLy5k0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1c:7c:26:fc:5d:23:5c:95:d0:80:38:71:c0:b6:aa:6c:37:
f8:19:47:4b:6d:fd:62:66:de:13:6d:af:25:81:28:1a:05:75:
1c:13:52:99:38:3d:97:ca:2f:5c:74:a3:8c:43:9e:60:f9:a3:
4c:c7:f4:ed:8a:3f:ba:ef:2f:57:63:58:1f:62:87:0f:81:af:
ee:6d:8f:36:bd:95:e7:67:1b:65:e1:70:2c:c7:4c:e6:c7:3e:
24:11:eb:79:20:03:43:d8:6e:2b:5c:e6:1e:ee:c8:69:54:77:
64:7d:ee:69:26:02:20:ad:d0:7a:31:f8:c2:95:4c:89:0a:a7:
d9:06:c8:fa:c4:a7:6b:73:56:48:95:7f:b8:09:3d:b5:c2:42:
64:c7:60:d4:8b:63:59:96:e3:37:1a:97:97:af:3c:93:a8:09:
ed:ee:bc:36:32:81:ea:12:3e:d3:57:b1:0a:0b:36:97:0e:2a:
c9:79:98:13:2c:65:78:a0:ca:0b:ad:ad:67:fe:69:e9:78:6b:
9b:41:e5:4b:99:e2:c5:57:7a:c6:81:fc:97:e0:f6:9d:79:94:
13:30:a7:d7:b2:9b:24:18:1b:ce:aa:dc:bd:19:4a:ae:2f:9a:
88:75:4e:05:4d:c2:b8:41:ab:8f:79:20:b7:3b:f3:ff:02:fa:
61:5c:f4:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 06:37:44 2025 by rpki-client