Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: GtBxl+KeVvQhFkUV11cL0a78dTO4qyMJOLX8yMFoUQw=
Subject key identifier: F9:C8:BC:A2:D7:FC:DA:DA:41:F1:95:E0:20:8D:71:F9:D6:8E:C7:E2
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 0196C45E1D93E0367EFFEF8F330C6B50DF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 060E
Signing time: Mon 12 May 2025 12:00:24 +0000
Manifest this update: Mon 12 May 2025 12:00:24 +0000
Manifest next update: Tue 13 May 2025 12:00:24 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: SnyUvkS8Gtxh+9NjSpJsRw2pACtQtifV+SxGZs0CMPI=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:1d:93:e0:36:7e:ff:ef:8f:33:0c:6b:50:df:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: May 12 12:00:24 2025 GMT
Not After : May 13 12:00:24 2025 GMT
Subject: CN=f9c8bca2d7fcdada41f195e0208d71f9d68ec7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:2f:48:ed:3e:31:41:fc:83:e4:fe:07:e6:
97:3d:28:f5:28:50:9d:cd:ba:ff:13:40:f8:d8:59:
52:be:44:df:b9:e7:8c:d5:db:a4:95:15:de:4f:40:
d3:b7:68:be:d8:d4:30:53:9d:26:4e:5a:47:97:71:
af:37:33:9e:ff:8f:e2:ce:3b:30:3c:23:4c:cf:6f:
f2:c3:8e:59:6b:ee:89:1b:f9:76:bc:ed:44:c1:a8:
55:da:65:f3:a5:c7:cf:ec:00:f0:e4:f8:3b:b6:00:
8f:15:84:c0:da:1c:2c:22:47:a7:cb:5f:bc:dc:f7:
16:57:74:01:95:95:32:71:1c:22:26:cb:1e:c6:7a:
44:4a:9f:1c:85:8e:10:ef:c1:e6:51:2a:55:1b:fc:
98:e7:2f:ba:18:c4:c9:ec:e5:71:c0:33:c5:00:ff:
69:01:b3:00:91:e1:b1:f0:e5:e8:63:05:e5:04:33:
3f:36:c8:96:d8:03:80:3c:1f:08:50:09:90:92:36:
6a:ba:9e:64:32:3e:4f:bf:74:75:4a:ab:9b:5e:78:
21:df:7f:33:ad:02:5d:b3:a2:22:ad:57:af:63:c4:
de:71:b0:4e:b1:af:36:68:ba:15:45:47:09:52:81:
75:3c:f9:19:a7:38:08:37:a2:60:11:73:89:aa:e2:
d8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:BC:A2:D7:FC:DA:DA:41:F1:95:E0:20:8D:71:F9:D6:8E:C7:E2
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7c:03:49:21:e5:50:3e:66:9a:62:68:a7:3b:a0:ff:aa:96:
28:47:7d:c1:b9:07:f9:a2:c1:47:d7:3e:66:fd:14:6e:a6:71:
98:f6:1c:cb:9d:06:9f:87:2a:57:fc:b2:8c:a2:45:d8:e4:f1:
d7:0f:51:13:09:eb:2e:cc:8c:c8:f7:e0:ce:b1:54:20:95:a9:
3e:eb:47:ed:de:ca:39:f5:96:d2:9a:9d:da:a1:be:00:0f:37:
39:c0:61:04:a7:47:82:83:c7:25:2a:d9:06:2c:b1:43:a0:03:
20:a9:e0:ac:df:db:3e:1c:cc:59:49:a7:09:eb:48:af:c0:a8:
3c:13:36:86:db:79:ad:88:5a:10:83:c9:21:16:25:65:7f:03:
11:e5:0e:a5:d2:8b:be:12:5b:b8:c6:24:95:77:25:9f:c7:38:
00:7c:7c:f9:7a:97:f9:2b:f1:1f:b4:dc:be:e9:98:7c:a2:35:
3f:d5:9c:24:46:5c:e2:6d:06:2a:f9:e8:7f:da:02:17:79:60:
01:7e:03:54:b8:5d:0e:89:80:ca:3a:5b:00:c9:fd:70:83:4d:
4e:8c:46:db:95:3d:d2:1a:d8:7f:72:ce:f5:29:f8:5f:16:ba:
72:58:fb:c7:6a:1a:44:b4:30:4e:f5:0d:4b:5f:53:bb:0b:b5:
48:40:57:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:39:31 2025 by rpki-client