Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
File: kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft (raw, json)
Hash identifier: TmexT47J0VxQ2PpOSBFI65U53OT/bbIIRogIaEdFabU=
Subject key identifier: 79:93:D1:88:08:04:4B:83:AE:8A:B7:3A:F7:52:E5:CA:DE:6F:09:37
Authority key identifier: 92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
Certificate issuer: /CN=9202036a43dad06b6c2cc64bde767870676f87b3
Certificate serial: 0196C984678BED2AE9C9FB0AB2C8338022BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
Manifest number: 0DD7
Signing time: Tue 13 May 2025 12:00:19 +0000
Manifest this update: Tue 13 May 2025 12:00:19 +0000
Manifest next update: Wed 14 May 2025 12:00:19 +0000
Files and hashes: 1: 9Bw4s7L1PZyJ0cmK8dHggvZkyc8.roa (hash: k8G5zSf+pp8Di/1i1Rk8bBBXkqYoG95ba1/+ZDXAe1E=)
2: kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl (hash: 0EO/Ic9ouEP2ewuJyWN41q9Ar2eO6gbLc39mf7EB+v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:67:8b:ed:2a:e9:c9:fb:0a:b2:c8:33:80:22:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9202036a43dad06b6c2cc64bde767870676f87b3
Validity
Not Before: May 13 12:00:19 2025 GMT
Not After : May 14 12:00:19 2025 GMT
Subject: CN=7993d18808044b83ae8ab73af752e5cade6f0937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:93:2d:af:74:23:75:71:c5:71:da:15:56:d5:
cb:09:b0:3a:8e:db:1b:e6:3b:76:24:56:90:80:c8:
f3:d2:28:54:30:e8:49:1a:af:a8:08:4c:8e:12:1b:
80:8f:b6:e7:6c:ae:f0:12:fd:8b:90:d4:bd:75:c9:
5b:b8:a2:b7:b9:03:fc:3b:bf:ae:a6:0a:16:d3:b6:
d6:dd:6f:42:c2:ea:0a:a5:27:45:c2:da:c4:29:79:
cf:da:87:67:a0:ee:fc:ae:cb:51:dc:5b:73:35:c8:
47:62:8b:f8:33:ee:e8:73:43:00:bf:38:e6:fc:bb:
4b:26:6d:24:1b:a4:2c:c4:7c:78:eb:d9:66:fb:b9:
69:fc:d7:a1:06:90:a9:db:f6:69:1a:2f:62:00:3d:
45:84:63:d5:b3:fb:fa:5a:66:98:76:a4:43:09:58:
0c:80:73:9e:31:39:35:da:0a:36:8f:f1:76:4b:30:
ad:95:c6:a4:e1:7a:6b:17:6c:92:aa:f0:95:63:04:
a2:d0:d8:0e:ee:ef:94:e2:ef:86:ef:1d:3b:58:90:
de:ba:6f:e9:4b:fe:b2:13:82:7a:44:d0:5c:3d:22:
99:b5:c1:8b:a2:2a:d4:12:91:0c:62:3e:4e:38:9c:
60:54:c1:d5:60:29:6d:99:05:8f:5b:7e:10:b6:35:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:D1:88:08:04:4B:83:AE:8A:B7:3A:F7:52:E5:CA:DE:6F:09:37
X509v3 Authority Key Identifier:
keyid:92:02:03:6A:43:DA:D0:6B:6C:2C:C6:4B:DE:76:78:70:67:6F:87:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kgIDakPa0GtsLMZL3nZ4cGdvh7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/027688-d39c-484a-a450-73dced39707f/1/kgIDakPa0GtsLMZL3nZ4cGdvh7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:a6:35:02:4d:cb:22:f0:8f:09:98:18:ca:c1:37:2a:09:c4:
00:ed:4e:c7:c4:2c:71:90:a0:34:6c:b6:01:d1:b4:b7:ae:67:
0d:f2:65:aa:77:6e:36:65:a9:fe:dc:ad:69:08:c1:39:58:3c:
dc:0f:aa:04:2f:8d:c7:11:65:32:d8:5c:e4:d4:be:af:aa:ba:
21:95:13:55:4a:54:55:3a:07:1f:38:ec:ea:cc:87:16:13:57:
1a:e9:3a:7f:dd:fb:30:8f:e8:89:31:1a:e2:e4:c9:33:2a:84:
d9:52:82:89:3f:42:a6:82:94:b1:62:cd:47:28:d2:ea:27:74:
7c:7c:54:31:33:af:57:39:19:58:03:e5:76:96:aa:df:bc:bc:
37:ac:ee:ae:1c:28:13:56:54:6c:86:6d:b1:1a:5f:ad:c8:f7:
c0:7f:cd:00:d6:06:e2:f6:bf:34:d0:f7:62:d8:d2:66:88:39:
10:d3:db:1d:09:ef:9b:a9:db:c0:ce:1a:8c:f4:51:84:7b:ef:
a0:1d:92:2d:93:6c:dd:24:1b:4f:da:ea:ec:5e:de:57:5a:50:
80:0c:39:cf:ab:ed:fa:ac:d7:66:35:d4:36:e3:79:72:58:ea:
f9:f1:85:0c:77:41:0f:90:f6:83:64:f3:4a:99:e8:fe:21:71:
78:ff:83:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:42:50 2025 by rpki-client