Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: AMNQ6xcyk5UDBIvRm+ZPWzj1nG1cLMl0mFz7LPO1Q5w=
Subject key identifier: 88:CA:BE:05:CA:EF:6D:1B:0A:B2:A1:FF:4A:F2:2A:E5:F5:3A:CB:43
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 0196A1D289B913F9986DF766945302D61EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 04EA
Signing time: Mon 05 May 2025 19:00:51 +0000
Manifest this update: Mon 05 May 2025 19:00:51 +0000
Manifest next update: Tue 06 May 2025 19:00:51 +0000
Files and hashes: 1: Myd15gMrCliz6UcSUIWdQJsW6Z0.roa (hash: KNSAanuPg0NI3AJP/E/C6OAIqMKQEnFg1+ec0Jx1Kuo=)
2: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: ncw3HxY172bFQ4vziniqjLxhdq+ioqr2xYtTvu1xAXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a1:d2:89:b9:13:f9:98:6d:f7:66:94:53:02:d6:1e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: May 5 19:00:51 2025 GMT
Not After : May 6 19:00:51 2025 GMT
Subject: CN=88cabe05caef6d1b0ab2a1ff4af22ae5f53acb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:9b:dd:2e:56:34:92:0a:1f:75:d5:79:06:
04:89:48:9b:3a:ec:0d:59:5e:2c:bd:60:f3:e2:c8:
1c:dc:59:02:64:62:6c:28:77:66:98:c2:ce:e2:b9:
2b:8a:11:a3:a3:de:7d:9f:8c:cc:09:40:88:dd:f6:
88:4b:cf:46:90:66:75:f0:b0:b1:e5:2a:3c:7c:1e:
93:cf:4f:e3:a3:da:90:8c:14:c8:bb:00:d0:5c:87:
ae:c0:9f:29:34:74:67:7c:95:94:6f:94:c3:71:95:
c9:fa:dd:a9:63:80:df:49:70:49:fa:a1:bf:29:b6:
f4:a4:e8:53:11:af:95:e3:04:83:8d:fe:65:84:d1:
fb:32:d2:53:33:b7:66:2d:bb:c8:75:19:af:ca:92:
40:28:f8:71:98:b8:9c:de:7b:bc:51:1c:e0:b5:90:
3e:04:43:8b:ac:6d:31:9f:97:8e:a0:e8:a2:94:22:
e1:d1:18:6b:d1:fd:03:6c:a1:f7:6a:3b:f4:bf:b0:
b7:73:6c:98:b5:ca:d0:80:15:80:1a:d4:38:2c:72:
6c:fb:71:07:c5:22:39:c7:6b:81:7f:2d:d4:fb:25:
e3:66:4e:5c:c1:82:0c:3b:6e:fa:c2:9c:c6:fc:eb:
13:ed:4c:18:18:93:2d:84:d2:cf:30:3d:22:97:25:
cd:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:CA:BE:05:CA:EF:6D:1B:0A:B2:A1:FF:4A:F2:2A:E5:F5:3A:CB:43
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:56:c6:ac:5e:04:17:6b:a4:30:a8:36:ef:76:ee:18:35:80:
dd:86:6c:64:2b:d0:a6:a5:a3:05:82:e8:4d:bc:3f:96:5c:d9:
b7:16:af:3a:86:6a:ac:70:86:a4:9a:ff:a6:32:9d:54:ea:f4:
f9:c4:68:fa:7a:03:e9:a2:c5:f8:eb:a3:bd:02:0e:a6:40:ed:
88:5f:bc:a4:5b:d6:b7:8d:65:7a:54:2f:ed:df:c2:84:14:36:
c6:d8:05:e5:63:c4:46:e7:92:8b:fd:4b:8e:68:60:bd:9c:9d:
e0:ad:94:a3:97:66:d6:c7:04:c8:83:13:9a:e1:24:5a:73:70:
3d:3f:25:26:62:00:e4:fe:2f:66:ae:75:d4:cf:23:ca:5b:a9:
41:f8:bc:8d:56:d0:9a:93:66:a3:b9:26:c6:ac:3b:1a:1e:42:
5c:13:19:b8:19:84:45:d9:46:4e:a0:ab:80:58:7d:13:d2:a6:
8a:6d:82:97:a2:3d:8f:c3:45:6c:4a:ab:23:6c:4d:18:7b:b2:
28:1d:16:f8:b0:27:fe:a1:e0:1f:a7:83:8a:c3:b8:6f:3d:0b:
81:4c:b3:37:d9:98:f5:62:fa:37:f9:e3:61:6a:e3:1c:b0:13:
b0:47:28:e0:d0:df:eb:29:e1:e2:39:41:f0:6e:fa:a4:43:4b:
cf:d5:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 04:43:22 2025 by rpki-client