Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
File: KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft (raw, json)
Hash identifier: 5jewszfYBlifGKsR2tm7KoWTi57fa8fcYAnUmdoSA4I=
Subject key identifier: 6B:6A:9B:BE:29:75:05:73:30:B6:8A:16:06:3C:2E:34:5B:1E:DB:38
Authority key identifier: 28:11:7D:FA:B3:E5:4D:38:B5:53:32:59:3C:C6:C9:71:48:D5:95:5C
Certificate issuer: /CN=28117dfab3e54d38b55332593cc6c97148d5955c
Certificate serial: 019654250D0B0955617CC54FFE3F1329114C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBF9-rPlTTi1UzJZPMbJcUjVlVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
Manifest number: 0A
Signing time: Sun 20 Apr 2025 17:00:36 +0000
Manifest this update: Sun 20 Apr 2025 17:00:36 +0000
Manifest next update: Mon 21 Apr 2025 17:00:36 +0000
Files and hashes: 1: KBF9-rPlTTi1UzJZPMbJcUjVlVw.crl (hash: PgLWeWVi/eAhQWVG9HCdDbXbPCJzZILO+56g6KiLGM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBF9-rPlTTi1UzJZPMbJcUjVlVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:0d:0b:09:55:61:7c:c5:4f:fe:3f:13:29:11:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28117dfab3e54d38b55332593cc6c97148d5955c
Validity
Not Before: Apr 20 17:00:36 2025 GMT
Not After : Apr 21 17:00:36 2025 GMT
Subject: CN=6b6a9bbe2975057330b68a16063c2e345b1edb38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:02:c5:ab:34:64:f0:c8:6f:61:a9:f7:93:61:
fb:69:15:72:71:10:8a:f0:7f:fb:ff:03:85:28:55:
e4:ea:b7:27:cf:7f:b6:88:16:5f:61:46:12:05:19:
6d:c4:c7:37:a7:dd:d2:3d:8e:31:c3:8b:5a:b7:60:
8a:81:ba:20:60:f1:11:2a:4e:77:7d:de:1d:f7:83:
44:a1:f1:2f:ee:58:24:61:a8:bd:d2:a7:7b:a7:a3:
b6:85:74:4d:22:2e:83:bb:cc:65:72:e3:e2:8e:61:
e0:71:a6:94:ae:d3:69:c8:ba:52:63:85:17:75:78:
85:22:d2:c0:7c:6c:a2:4d:8d:6d:59:6b:ce:a3:4b:
99:7a:08:a0:47:e9:e6:07:90:4a:1e:34:4e:8e:6e:
e9:dc:95:ae:0e:58:70:42:ff:5f:6d:31:21:ea:e4:
2d:55:ea:1b:7a:fb:9d:24:54:8c:f9:81:2a:a7:16:
16:79:28:65:be:f0:c4:41:68:1d:2c:b7:de:1e:1b:
75:c1:f6:37:9e:9f:ab:cc:64:ad:fb:f0:3f:fa:47:
98:84:8f:6d:09:a9:1b:8c:30:38:79:bf:2a:f7:a1:
b7:20:96:80:f9:dd:b9:25:16:fa:eb:39:d9:fd:94:
54:9d:09:9f:0e:04:b9:b7:bd:ed:1e:d6:95:21:2a:
0f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6A:9B:BE:29:75:05:73:30:B6:8A:16:06:3C:2E:34:5B:1E:DB:38
X509v3 Authority Key Identifier:
keyid:28:11:7D:FA:B3:E5:4D:38:B5:53:32:59:3C:C6:C9:71:48:D5:95:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBF9-rPlTTi1UzJZPMbJcUjVlVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/a826e1-2bfa-43a7-950b-8e23cae5aab8/1/KBF9-rPlTTi1UzJZPMbJcUjVlVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:16:22:c4:ea:c3:14:aa:85:c6:c3:fe:31:b6:af:a8:b9:21:
de:8d:8b:4c:73:cd:aa:10:11:5d:1d:7e:3b:2b:1b:c7:87:a7:
14:c3:59:e0:ef:21:a2:5e:dd:47:d6:5e:df:9e:8f:d9:94:b4:
5b:6c:38:b7:c6:08:29:ac:fc:f7:13:64:7b:6c:63:9d:9a:b1:
05:d0:b7:f1:38:ba:a0:b3:bd:92:36:06:fc:dc:89:61:aa:1d:
44:a3:db:63:ce:ae:94:0e:a1:cc:3d:ab:f3:9e:81:6e:d3:80:
2f:be:36:06:d4:96:3f:5d:c1:08:69:d8:ef:65:d8:92:81:f2:
b9:6a:34:9d:c3:d5:eb:ca:64:1b:58:d4:71:7a:28:df:ce:40:
a6:1d:70:5e:9d:2c:ea:40:7a:55:34:d1:9e:b3:2a:49:d5:63:
40:cb:25:95:64:a3:f7:8e:3c:21:73:b9:49:b3:75:93:c2:cb:
df:3b:3e:49:23:12:ea:24:d5:b9:f4:ee:1d:2a:2d:8c:56:d4:
47:a0:c3:ee:82:fa:d1:b7:85:c9:1f:37:36:67:19:7a:39:28:
63:fe:fb:84:69:9c:d1:7a:a6:45:8f:ee:5f:14:9a:87:8c:59:
82:00:fa:90:4c:97:27:58:e7:80:0e:fd:47:51:07:e0:d6:1b:
45:b2:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:26:13 2025 by rpki-client