Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: lqvtlHvJFUagaUA63LXtOoAtIT8GdeSzdKJ1aYrlxcg=
Subject key identifier: BA:29:CD:CC:95:7D:0F:AC:4A:C5:C6:00:8A:F7:0B:4E:41:A4:B8:39
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 019654CA147D35DB701D5BBEB768908CF74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 0225
Signing time: Sun 20 Apr 2025 20:00:51 +0000
Manifest this update: Sun 20 Apr 2025 20:00:51 +0000
Manifest next update: Mon 21 Apr 2025 20:00:51 +0000
Files and hashes: 1: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: VsglYiIsdwpowGSJ2QcIUuLbp8TEevYXRgo1yq70S+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:ca:14:7d:35:db:70:1d:5b:be:b7:68:90:8c:f7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Apr 20 20:00:51 2025 GMT
Not After : Apr 21 20:00:51 2025 GMT
Subject: CN=ba29cdcc957d0fac4ac5c6008af70b4e41a4b839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:3a:e3:5a:df:7e:43:54:c7:7f:e3:66:d3:
a2:3b:9b:88:d3:93:e7:b7:7e:b3:55:04:78:a2:1e:
76:1a:1c:b3:a3:1c:74:9d:9d:93:01:7a:0e:18:b6:
b5:be:74:2a:fe:60:8b:e5:d4:87:90:5d:3c:39:2d:
50:54:5e:3e:4c:a6:6d:eb:97:e7:09:89:5c:3d:f9:
dc:5f:0c:cb:bf:fe:bc:6b:c6:11:bd:22:54:16:89:
39:4c:60:2d:45:79:fb:eb:66:e5:1c:6e:1f:33:81:
65:4b:8d:61:d1:38:23:52:d7:52:c2:20:83:76:de:
96:18:5c:41:7d:15:fe:31:f9:c3:89:5d:4a:76:97:
8a:ad:15:f0:8c:5c:f3:3b:e1:57:11:e0:dd:92:f6:
b4:b0:09:ab:e1:03:26:b8:e8:63:a4:43:66:9f:76:
a6:20:b3:bb:6c:33:01:af:5f:02:5f:a4:9f:40:5e:
80:8e:d3:48:61:fd:67:19:3e:77:1a:69:ed:e7:7d:
6a:82:ed:d6:78:23:89:93:37:94:37:72:3e:11:66:
6f:85:bd:bd:a0:b8:75:d2:52:a0:9b:06:c5:61:ba:
4b:ee:8f:12:58:e1:e7:6e:76:92:9c:79:bc:86:c6:
03:46:6a:44:89:91:41:8a:7c:2b:b5:49:22:91:95:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:29:CD:CC:95:7D:0F:AC:4A:C5:C6:00:8A:F7:0B:4E:41:A4:B8:39
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:39:45:91:8b:f5:98:c5:20:8b:3e:02:29:f4:bc:4c:e0:91:
6e:ac:65:6d:da:92:ee:8a:5b:94:21:af:6c:44:33:26:0a:76:
f9:dc:dc:cb:47:ac:7d:36:51:ee:7f:45:ac:2f:3f:63:84:7d:
e8:84:ff:02:90:e5:75:86:c3:a5:e0:a3:48:5f:dd:9a:1e:3f:
fa:66:d3:80:b2:e5:e4:94:cc:8a:8e:b7:cb:55:fe:91:fd:24:
7c:6e:57:2d:e9:bc:1c:27:9e:33:a8:fb:10:2f:55:f5:01:f0:
a0:3f:5f:42:d1:26:3e:db:a2:21:68:5e:e6:af:96:53:f2:19:
e2:09:42:8b:25:c6:4e:2b:ec:22:fb:18:ae:09:c0:04:6f:1e:
4d:88:25:7d:fd:15:b1:4d:d8:fd:a0:8a:92:e7:41:04:23:89:
6a:44:22:e1:29:c6:b0:11:b4:4d:56:51:1c:52:eb:86:af:1c:
9f:84:32:19:38:9b:a7:d1:a1:19:7d:fe:0c:2f:d4:65:d2:b1:
a9:b3:bb:2e:22:4d:12:c0:b5:fd:f5:4f:07:69:37:5f:13:15:
e5:c4:b2:de:74:c9:03:e4:17:22:f8:d2:f6:a7:82:75:ce:4d:
29:cf:e0:9d:ec:4a:90:65:85:fa:a2:78:03:e3:98:a9:9b:d5:
1b:cd:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:40:10 2025 by rpki-client