Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: pBsLiiDw4Ziv065LBr6YVBxwzd8BM5oDltIkNrJV8RU=
Subject key identifier: CC:4F:0A:68:6C:C6:07:70:90:5A:30:C7:5F:B7:4E:95:F9:3F:E5:BD
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 01965F1656300957EE0510E9045965FECAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 01CF
Signing time: Tue 22 Apr 2025 20:00:21 +0000
Manifest this update: Tue 22 Apr 2025 20:00:21 +0000
Manifest next update: Wed 23 Apr 2025 20:00:21 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: Uhw8eNIrwtlkRlizS+3CGiPy/uWjGCveunNl3k32qtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 14:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:16:56:30:09:57:ee:05:10:e9:04:59:65:fe:ca:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Apr 22 20:00:21 2025 GMT
Not After : Apr 23 20:00:21 2025 GMT
Subject: CN=cc4f0a686cc60770905a30c75fb74e95f93fe5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:aa:6b:bc:d1:88:73:c6:12:97:0b:2b:91:3a:
ac:73:77:19:3b:36:48:7f:77:f8:b4:10:1a:4c:73:
fd:a1:7d:68:32:86:cc:49:5f:c5:42:e3:9f:2f:cd:
cb:c6:8c:7f:cf:27:d6:d8:68:ab:be:55:2b:11:d1:
20:18:9a:61:1f:88:2c:ef:78:d5:8d:06:29:66:09:
6f:eb:d1:82:be:b5:6d:8f:97:d4:95:f9:c2:98:3e:
4e:1f:44:59:ef:84:ca:cb:64:52:8f:f1:b6:0f:bd:
2a:29:ac:80:ca:77:58:ff:b2:6f:56:f9:cd:2d:e6:
ca:ff:99:18:e6:07:fb:3e:f9:5c:ff:90:a3:f2:bd:
dc:2e:4a:69:34:7f:09:27:92:ed:55:5c:cc:a5:cc:
0f:79:57:2c:e5:0a:e1:2b:7e:08:0d:32:60:da:11:
aa:67:86:86:d8:fb:39:87:10:67:67:12:b6:99:ec:
a6:9b:d1:6c:e2:a5:cc:11:2f:8d:38:94:77:db:bc:
5c:24:83:f0:9c:72:25:35:51:a0:d4:1a:8b:78:9b:
5e:e5:5f:84:ec:aa:38:fb:58:de:eb:4b:16:1f:39:
81:11:b9:52:86:cd:ac:08:6d:1f:51:72:d9:98:e6:
de:55:49:b6:03:b2:0c:31:d6:0e:a9:6d:0b:fb:25:
3f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4F:0A:68:6C:C6:07:70:90:5A:30:C7:5F:B7:4E:95:F9:3F:E5:BD
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:48:52:66:f3:19:2d:6c:e8:e5:ca:79:2c:40:4c:8e:05:26:
9d:89:a9:51:cf:39:41:4a:c5:e4:87:a0:15:fa:a7:98:16:79:
41:43:f4:5d:7c:eb:5f:4a:d8:da:43:f4:b8:f0:16:92:bf:8e:
d9:4d:b2:ad:c9:33:35:de:ed:40:0b:07:1e:e0:7d:d0:b1:65:
54:a7:33:f2:d4:05:d8:c0:1b:da:0c:19:21:35:4e:0d:1e:bf:
b2:6b:10:fb:b8:a5:0a:31:ea:9d:e2:31:ff:58:c1:c6:db:ac:
c8:5d:b8:7e:92:ab:a5:34:f4:44:b1:f9:fc:6c:db:17:19:58:
ee:27:79:23:c4:37:8c:6c:f0:8a:33:2c:0f:6c:e5:36:c9:a5:
2a:0d:8d:11:4f:6c:50:a3:13:cd:ad:ac:04:5b:e6:78:56:60:
86:c0:5a:a3:46:b6:c8:5a:cd:78:ab:e1:a6:8c:a3:1e:59:d9:
f0:82:18:52:3d:26:a0:04:66:f4:8f:f7:32:50:fc:cb:50:9c:
ec:67:99:dd:e8:13:05:5b:01:92:d6:5b:11:ed:4f:0a:74:37:
14:72:1c:74:9b:95:11:4e:52:90:5e:4e:dd:14:a8:71:6c:a1:
aa:92:f4:f6:40:77:1a:1f:3d:e9:aa:0c:1d:88:cb:7a:f7:48:
8b:8e:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:28:44 2025 by rpki-client