Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
File: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft (raw, json)
Hash identifier: ADqJ3MXGDLGBWnqpS0HTB6+3R2A6eSwDEj+VrQJ0wZs=
Subject key identifier: FA:66:FC:F6:38:D3:68:39:5C:21:8D:28:93:C5:F1:CE:00:AD:99:DC
Authority key identifier: 29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
Certificate issuer: /CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Certificate serial: 0196A6C1DF2A59CA7F99F6FEC4638CDB1A6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
Manifest number: FA
Signing time: Tue 06 May 2025 18:00:45 +0000
Manifest this update: Tue 06 May 2025 18:00:45 +0000
Manifest next update: Wed 07 May 2025 18:00:45 +0000
Files and hashes: 1: HCnZ4QlNrjo4-1ShjXI6eoqgF7Q.roa (hash: RVcqorqVBH1UK65HrDodp8HEtA0dkfr8CZIvgxvJk/w=)
2: KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl (hash: oe4yo4O22fUfy8ZiV1MX3bOrXRN+Dnb20yh28M84H20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:df:2a:59:ca:7f:99:f6:fe:c4:63:8c:db:1a:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2996cd68531847e3b0be0d93c65cc1fb64ecd21a
Validity
Not Before: May 6 18:00:45 2025 GMT
Not After : May 7 18:00:45 2025 GMT
Subject: CN=fa66fcf638d368395c218d2893c5f1ce00ad99dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9a:6c:02:2b:76:15:84:b4:93:3b:27:f4:51:
cd:3f:14:fb:8c:7a:59:d3:9e:ca:6d:c2:99:8b:d7:
68:9e:67:78:0a:cf:a7:19:04:9d:4b:50:8f:8a:b7:
04:e5:c6:52:f6:18:76:22:dc:69:ca:45:9f:69:b2:
45:42:d8:17:f2:ec:f3:44:90:a6:cd:aa:b9:e4:cc:
2f:4c:09:fb:03:70:4c:71:ff:17:ac:21:64:ec:27:
4f:fc:e0:a2:1e:82:be:8b:86:7d:bc:ce:d1:3e:10:
99:58:77:f7:cf:00:07:cb:c4:b0:ba:01:3a:56:c0:
0c:67:6b:37:c4:e4:e2:31:36:95:ba:f1:75:72:e4:
84:74:e5:e8:61:aa:d0:63:f4:aa:c1:96:9d:8b:fa:
ee:ef:c1:e4:c3:d3:b0:b2:4c:12:41:f8:52:b3:8c:
0f:31:ee:92:8e:87:a2:99:19:d7:c3:12:e3:29:16:
69:1a:ca:5c:6e:20:f5:5f:dd:27:67:e3:c3:ed:d4:
21:77:42:af:01:07:2b:97:92:cc:4c:18:de:f7:82:
eb:c6:43:fc:38:22:de:af:df:c2:a6:45:10:ca:d6:
41:e3:ab:56:8b:3b:12:66:b2:be:e9:ae:67:58:6b:
25:54:5a:d0:d8:c2:c0:66:d5:ed:ed:d2:8f:31:1b:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:66:FC:F6:38:D3:68:39:5C:21:8D:28:93:C5:F1:CE:00:AD:99:DC
X509v3 Authority Key Identifier:
keyid:29:96:CD:68:53:18:47:E3:B0:BE:0D:93:C6:5C:C1:FB:64:EC:D2:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/83cd41-7256-4d66-942f-72ecba131af8/1/KZbNaFMYR-Owvg2TxlzB-2Ts0ho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ac:b7:61:65:47:4c:93:ba:70:f1:5a:7c:7a:65:68:92:c6:
d5:26:5a:88:13:c7:bf:d7:ae:86:c8:dd:f0:32:27:12:da:04:
e0:ea:4d:74:a3:44:4a:af:b5:72:9a:a2:a4:c9:2f:11:34:76:
6c:a8:46:cf:c4:34:25:ad:68:55:5b:00:a4:10:11:46:48:a3:
22:37:6d:d9:06:19:44:b4:cf:4e:76:12:ab:23:f3:4b:8b:b0:
79:49:b9:8c:d3:22:63:64:62:c8:af:49:2c:7b:d5:de:69:61:
f7:6d:b6:cd:a9:47:85:7b:bc:46:09:97:ac:fb:a7:d3:b7:43:
2e:c7:fa:2b:81:63:7e:b7:0a:b5:0d:8c:0e:0d:fa:a2:99:fc:
7d:a1:61:d8:c1:67:9c:a3:08:1c:5d:e4:c9:22:d2:e9:f4:1d:
ce:ed:2c:55:8b:dd:dd:7d:58:ee:28:85:91:38:fe:83:28:92:
42:a5:6e:f5:c8:69:73:33:21:b3:bd:72:a7:3c:a9:ee:b3:be:
60:dc:f1:ed:8e:50:bb:4a:9e:08:a7:ed:56:91:60:d4:4f:97:
5b:5f:0c:ab:78:c1:2a:52:1b:e2:ad:40:d8:db:db:7a:06:d6:
35:1c:ee:21:64:c3:c9:1f:9c:d5:19:e1:bc:18:5e:8c:eb:02:
72:13:e1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:32:21 2025 by rpki-client