Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
File: KFJhMsT89rTN_3QCVWAsz53LBC8.mft (raw, json)
Hash identifier: avCOf7JCviZAcMsZCWfbwLiED95zJkTSXB0NwW6Xwm0=
Subject key identifier: 86:A3:3A:5E:52:25:91:35:96:A4:27:07:E9:50:ED:F3:BB:F2:99:B2
Authority key identifier: 28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
Certificate issuer: /CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Certificate serial: 01965424D73DFFC2D4A5D26FDA9EC8B84B85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
Manifest number: 14FE
Signing time: Sun 20 Apr 2025 17:00:22 +0000
Manifest this update: Sun 20 Apr 2025 17:00:22 +0000
Manifest next update: Mon 21 Apr 2025 17:00:22 +0000
Files and hashes: 1: KFJhMsT89rTN_3QCVWAsz53LBC8.crl (hash: xPf4pjDD32vhwZVCMzk8hZDtQQBiYk1EwNKxna7sLKE=)
2: ZhfTjFWerubW-wXYF5uHcQImBi0.roa (hash: ETJfKBPXF5SBOehYcFURbCVWhceZCDiTMb0cVW0YkTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:24:d7:3d:ff:c2:d4:a5:d2:6f:da:9e:c8:b8:4b:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28526132c4fcf6b4cdff740255602ccf9dcb042f
Validity
Not Before: Apr 20 17:00:22 2025 GMT
Not After : Apr 21 17:00:22 2025 GMT
Subject: CN=86a33a5e5225913596a42707e950edf3bbf299b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:1e:e9:24:3d:ef:01:73:b6:cf:be:ca:7b:
65:cf:6c:45:93:01:2a:77:09:95:98:68:8e:4d:f1:
05:a3:c4:55:9d:8f:ae:71:44:51:24:93:a1:a9:c4:
7b:5e:7d:82:55:82:9e:43:b5:fb:17:46:6d:6f:26:
77:60:2e:b4:5f:6e:e3:42:c2:2b:72:68:67:3f:d3:
13:08:ee:25:20:95:fb:a5:d3:67:dd:93:73:32:b6:
59:c5:c2:e2:b2:56:cf:5b:22:d2:62:f9:b1:96:d8:
85:3a:51:33:b3:03:31:2f:fe:e4:93:d6:8b:07:a6:
b4:ea:01:71:bf:36:46:df:1d:84:29:ef:1f:f4:8e:
f5:43:b7:5c:61:43:25:6e:d8:d3:a3:05:fb:30:a4:
98:b7:7d:e7:73:55:b7:e0:3b:f6:17:98:8f:a4:8d:
88:59:db:6d:a1:9f:26:57:ea:61:41:44:0b:3c:60:
6f:a7:b5:7b:8e:7e:11:94:e3:50:bf:20:c6:e6:b1:
21:9d:ae:68:f8:52:34:b5:20:6b:4c:98:9c:c8:f8:
01:5d:48:b9:36:b8:22:1e:cc:fc:94:aa:7e:71:26:
68:e8:6f:7a:46:0f:c2:03:9f:be:7f:71:f8:00:a9:
4e:bb:76:1f:40:39:74:45:77:0d:69:31:62:28:4f:
2e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A3:3A:5E:52:25:91:35:96:A4:27:07:E9:50:ED:F3:BB:F2:99:B2
X509v3 Authority Key Identifier:
keyid:28:52:61:32:C4:FC:F6:B4:CD:FF:74:02:55:60:2C:CF:9D:CB:04:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFJhMsT89rTN_3QCVWAsz53LBC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/83168b-6b40-4d12-8ed7-1f99317c6c94/1/KFJhMsT89rTN_3QCVWAsz53LBC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:b1:9d:46:5e:d1:64:7b:09:db:61:72:84:90:de:06:0d:b8:
a9:7a:3a:62:90:f1:10:02:69:25:4d:bf:ac:fe:29:44:c2:70:
b7:50:9d:d2:f6:70:04:00:b1:e4:10:73:fb:47:58:da:b4:31:
dd:e2:07:12:0a:65:1e:57:ac:a7:df:88:a7:d8:28:6e:ea:a6:
d0:1e:46:31:4e:33:17:c6:99:00:0f:79:2c:45:7b:34:63:34:
d6:16:6b:60:33:13:96:c5:86:8b:c6:14:8e:ff:c5:ef:a5:d2:
39:ed:07:c5:21:de:81:18:f3:8c:d2:a6:28:25:7e:d0:0c:6f:
31:ef:54:aa:c2:83:ac:aa:d6:39:77:8e:f8:53:d8:5c:de:3e:
ce:7f:db:1a:90:8b:cd:1c:af:8f:79:ae:14:ee:9e:20:9d:9e:
b9:35:90:37:22:78:d4:fd:6e:3c:2e:a0:04:bd:e6:73:69:0d:
23:cb:11:40:9e:93:eb:e1:52:1d:02:b7:d4:e7:f8:47:3d:ec:
77:52:47:52:f1:e9:5e:b7:25:16:c2:19:9a:12:c7:b4:9b:85:
10:1d:4f:13:f2:ad:e1:9c:51:b8:ed:a9:b4:8d:a7:e6:c9:db:
3a:d2:18:26:e4:aa:8f:b4:5e:46:c3:bc:0e:66:07:c6:ba:92:
9f:70:15:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:11:21 2025 by rpki-client