Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: YRuOTpdEPosaopHErSNzstQe61qRiRwVno2phgzwovc=
Subject key identifier: 70:C7:4F:37:95:2B:20:6F:8D:B8:75:C3:DD:72:AB:44:12:49:09:08
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 0196BA11CF9AE4DE52A2EBA5362D28AD4BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 0A54
Signing time: Sat 10 May 2025 12:00:51 +0000
Manifest this update: Sat 10 May 2025 12:00:51 +0000
Manifest next update: Sun 11 May 2025 12:00:51 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: HhxrsTD/6Kr/LvK7SO99pNvjDwqjhjNMPZFYSRq2Jq8=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:11:cf:9a:e4:de:52:a2:eb:a5:36:2d:28:ad:4b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: May 10 12:00:51 2025 GMT
Not After : May 11 12:00:51 2025 GMT
Subject: CN=70c74f37952b206f8db875c3dd72ab4412490908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:96:61:d4:ab:60:8e:7b:9b:84:77:a6:f3:9c:
cf:87:d3:35:14:e0:b5:30:8f:16:26:51:14:6b:ab:
34:2a:70:69:a5:d2:af:48:82:3d:cc:c5:2a:a2:75:
b0:e8:71:af:eb:eb:bd:01:d1:bd:a3:98:d1:e7:39:
45:96:e3:ab:60:5b:40:05:55:93:cb:00:5a:5c:31:
4e:d7:55:b4:18:77:98:77:ce:79:f5:6f:a6:a8:91:
bf:85:53:f0:75:9e:82:82:a9:8b:42:8e:f0:46:69:
d4:6d:09:42:c7:97:20:dd:0f:7c:d9:fa:c0:70:16:
bb:0b:ad:9e:18:b8:c1:c8:aa:6a:3a:67:3c:03:38:
7c:dc:81:f6:f9:22:7b:0c:72:10:1a:5e:bf:89:15:
8e:e6:f0:82:99:cc:8d:ef:89:a5:58:aa:17:c1:10:
6e:54:f9:a7:52:4e:a8:d7:f3:41:b1:65:19:6d:d7:
57:0f:4b:16:9c:7b:71:28:b0:f5:0c:4c:b0:be:fe:
7f:f9:db:1a:22:fd:ce:3f:40:f7:70:9f:9f:02:22:
89:b5:78:c2:c3:ae:49:9f:ae:52:7b:50:42:14:8d:
87:4f:f3:b6:f5:54:56:05:11:d0:70:09:41:a3:da:
57:10:17:b6:dd:38:ec:a0:a5:0e:ff:d0:70:62:31:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C7:4F:37:95:2B:20:6F:8D:B8:75:C3:DD:72:AB:44:12:49:09:08
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:d1:8c:7c:9d:d3:a6:89:bf:9d:2a:ed:a2:12:0b:d9:d5:9c:
39:cc:57:fb:f4:c5:cc:5a:4d:e2:2a:34:46:9c:ee:96:07:de:
11:c0:fa:10:90:48:21:c5:98:78:dd:70:99:26:f9:e7:cb:89:
40:ff:68:7f:b3:f8:df:82:fd:80:9f:f4:96:39:cf:dc:7d:ce:
00:2e:ea:4d:47:33:58:2c:bb:4d:af:d0:66:bf:aa:dd:9e:af:
80:3d:ec:96:2c:a6:1a:b2:ce:9d:63:56:20:da:24:96:1e:29:
c2:af:64:a7:46:3e:48:07:c8:3c:71:bc:ca:3d:ba:77:84:f9:
c5:3e:c6:5f:dd:0e:46:fa:36:7d:78:92:c4:be:25:38:46:b4:
d3:a4:5e:b0:3b:b6:c7:85:e9:74:0b:53:bb:23:bb:41:b5:ce:
77:f1:cc:5c:d2:35:76:99:35:91:fb:d7:dc:45:bc:12:03:8b:
02:c7:64:40:9d:96:58:9d:e7:0b:42:f9:c8:c7:90:39:05:6b:
7d:77:b7:00:bb:1e:aa:4e:96:ec:03:93:8b:14:34:c8:dc:51:
d3:70:83:40:4f:7d:d1:df:93:14:66:c4:7e:79:5b:10:de:7e:
84:40:02:60:bf:fd:bd:02:d3:c3:58:46:8c:dc:25:e9:00:7a:
1b:47:ec:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 18:57:50 2025 by rpki-client