Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
File: kuwQUNOpMgq58M4rNloJfuQTSyQ.mft (raw, json)
Hash identifier: I7cNL+Y/YYCw5Vu7P/QqSLddvANzbg2y6RXT+NTNSE0=
Subject key identifier: 6F:05:07:23:23:63:E5:75:1C:BB:19:5D:3B:05:6E:9E:2E:18:8A:CF
Authority key identifier: 92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
Certificate issuer: /CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Certificate serial: 01965ACC060A2AE6AAA4283F2391AA34D8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
Manifest number: 1237
Signing time: Tue 22 Apr 2025 00:00:42 +0000
Manifest this update: Tue 22 Apr 2025 00:00:42 +0000
Manifest next update: Wed 23 Apr 2025 00:00:42 +0000
Files and hashes: 1: kuwQUNOpMgq58M4rNloJfuQTSyQ.crl (hash: rILqGzWvBZEfBcb5quCgBhQtJWxOodiFTSAZSN+RkDk=)
2: rcP662t9iU7wmmRm1Yh7D85Kb-4.roa (hash: hNPhEZEICgt5or5b1hN6hdrsIiWH59T8KP+7AQfFMXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:cc:06:0a:2a:e6:aa:a4:28:3f:23:91:aa:34:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec1050d3a9320ab9f0ce2b365a097ee4134b24
Validity
Not Before: Apr 22 00:00:42 2025 GMT
Not After : Apr 23 00:00:42 2025 GMT
Subject: CN=6f0507232363e5751cbb195d3b056e9e2e188acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:01:bd:0d:97:7e:7d:39:42:85:86:a8:f0:70:
1a:6a:f9:80:34:b3:9b:2c:1f:7e:55:29:fc:36:0b:
89:fa:73:20:12:c3:aa:80:b4:ab:ab:9e:4c:34:d5:
9e:d4:a9:65:fd:9c:9a:1f:2f:a5:01:11:85:c5:da:
13:da:a5:3d:24:3a:aa:a7:48:bc:75:37:56:9c:33:
df:47:a5:92:dc:7b:04:e8:3a:dc:5d:bf:17:94:9a:
eb:23:27:53:cb:e6:d0:da:c1:90:20:c8:70:66:c9:
b5:fa:f8:59:fb:cc:dc:db:5c:64:26:4f:4b:2b:a0:
36:ac:75:ef:b7:b3:64:9e:66:45:1d:26:97:5f:c0:
36:c1:47:08:7a:79:49:f4:97:7d:f8:01:42:cd:4e:
e0:34:6e:bc:e6:7c:15:ac:11:4c:11:f1:9a:81:95:
c6:ad:81:83:8f:84:2b:51:a1:77:67:70:a0:1a:9b:
a5:07:82:d9:ab:72:49:32:90:32:9c:1e:04:4c:f6:
92:6f:78:68:39:07:93:de:de:9d:83:0b:e7:fa:c3:
74:4f:eb:6e:30:63:b4:34:66:2e:b4:64:ed:f6:75:
04:6f:76:06:da:96:9d:47:43:26:40:4d:98:3a:3e:
92:1e:67:d1:da:5c:f6:74:61:ba:f7:ea:5e:22:09:
ce:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:05:07:23:23:63:E5:75:1C:BB:19:5D:3B:05:6E:9E:2E:18:8A:CF
X509v3 Authority Key Identifier:
keyid:92:EC:10:50:D3:A9:32:0A:B9:F0:CE:2B:36:5A:09:7E:E4:13:4B:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwQUNOpMgq58M4rNloJfuQTSyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f516f6-d5a0-4086-94f2-abd4c5c9b374/1/kuwQUNOpMgq58M4rNloJfuQTSyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:53:4c:dc:23:c8:57:3f:02:7e:5c:2d:61:4d:8d:2a:d9:90:
3e:88:da:f2:0d:06:4a:ab:a3:f0:70:a7:ee:6c:c7:fe:7c:05:
cd:05:6b:ee:29:41:5a:35:2e:64:6c:63:63:b5:be:e9:ee:e4:
a6:9f:c4:eb:69:99:ff:b5:c8:dc:0d:a2:b2:3b:fe:43:0b:96:
3b:31:b7:ac:bf:9e:bd:8e:ed:06:2e:8e:fa:59:2d:26:04:7a:
a2:8b:43:a2:37:f8:06:d4:d0:8f:39:41:9d:4b:98:be:5f:a2:
fc:bb:8e:e5:ba:be:4b:be:5f:75:7f:7a:88:f8:6e:b6:d4:69:
b0:76:29:93:82:af:e3:03:43:ca:c1:a9:d5:15:21:9b:db:2c:
b7:5e:51:ba:21:45:7d:03:2c:ae:d8:65:3a:3c:08:4f:54:30:
3b:d6:fc:23:50:0c:93:18:2e:91:c5:d7:5f:62:48:5d:8b:64:
b4:76:56:f2:bb:2f:58:e2:4d:2e:37:7b:28:1e:e6:fe:ec:a4:
b6:20:d9:b5:0b:f0:ca:2e:43:aa:3c:05:21:b0:44:56:62:92:
cb:57:4a:49:07:9f:c7:75:b7:1d:7d:91:f4:10:1e:e6:0f:73:
e1:27:0c:ed:99:a8:6b:35:62:0f:ea:62:65:cc:71:c6:fe:f4:
cb:72:3c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:09:43 2025 by rpki-client