Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: wxPa6Tm7wnezdaLkwOpZElDc9IACcaegvf88w2XAzik=
Subject key identifier: 0C:B8:07:24:6D:54:8F:77:D9:30:44:87:AF:E8:E7:2E:E9:C7:12:65
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 01964AEAD4DEF11E390392E03B0A663C53AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 122E
Signing time: Fri 18 Apr 2025 22:00:25 +0000
Manifest this update: Fri 18 Apr 2025 22:00:25 +0000
Manifest next update: Sat 19 Apr 2025 22:00:25 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: p0g6LNTxolNkq4ZYJU+HiiDWATvd0mwUUMuC7ajKGl4=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:ea:d4:de:f1:1e:39:03:92:e0:3b:0a:66:3c:53:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: Apr 18 22:00:25 2025 GMT
Not After : Apr 19 22:00:25 2025 GMT
Subject: CN=0cb807246d548f77d9304487afe8e72ee9c71265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:65:e7:6a:bc:d6:12:74:2f:36:21:5d:b7:bc:
0f:7e:76:b9:1a:a9:5b:65:24:e6:66:1d:f4:1e:62:
7c:86:20:6b:a9:3c:08:b2:05:98:e4:19:1d:45:74:
53:79:eb:4c:83:7f:8a:9e:c6:eb:30:7b:f9:74:e6:
91:9a:e9:c7:cc:dc:91:70:34:49:9f:28:29:fb:e7:
1e:c8:45:76:96:7b:df:39:98:35:18:8d:75:04:a7:
36:63:5f:ec:3c:02:87:3d:b3:46:fb:fc:86:34:cd:
3f:13:2d:c5:25:53:0b:5f:40:4b:28:33:0a:b4:b3:
17:6f:10:b7:58:4d:29:d8:94:06:11:2d:3b:17:80:
e6:81:c5:75:20:6f:d4:3d:c0:dd:ae:55:1a:8f:91:
94:70:42:82:2d:f5:67:bf:a4:d3:57:47:3a:44:7d:
48:a4:3c:96:70:3d:9c:e6:42:2a:84:d2:97:9f:0e:
b2:84:28:57:4d:27:2b:d5:ef:a3:d4:a9:be:2c:85:
20:37:a7:30:42:05:f2:1f:dc:42:5b:1d:88:1b:2d:
ac:9c:3f:1e:10:d3:93:b8:e8:d6:8d:96:1a:ac:c3:
fa:a9:59:11:ce:73:0c:d4:c4:c6:f1:ac:2f:6f:51:
e4:f5:19:ee:7a:1b:04:80:18:78:ce:f8:6e:ea:0a:
29:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:B8:07:24:6D:54:8F:77:D9:30:44:87:AF:E8:E7:2E:E9:C7:12:65
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:41:e1:e6:a3:d2:f4:dd:d7:cc:77:86:94:2d:25:3b:81:82:
29:89:15:29:82:3e:ed:24:ff:13:74:3b:1d:bc:50:b7:47:e4:
d9:72:78:99:10:91:60:7f:4b:14:04:4e:55:ed:4a:ce:4d:49:
5f:d5:12:67:fe:1d:9d:5e:6f:ab:9f:48:ce:5a:6f:06:97:a8:
d8:97:f3:22:19:b6:5c:6a:2f:5d:f2:13:e2:8a:02:fb:b5:10:
19:5a:6c:a0:2c:f6:4b:3d:1d:81:18:d4:a5:60:10:97:98:c1:
67:bb:a9:80:bf:21:40:e4:be:f2:a5:f4:6c:fe:04:5e:8a:d1:
b0:10:32:30:c2:6a:18:90:32:b3:7f:c5:45:17:44:d5:01:7a:
f5:0d:59:be:26:58:89:9b:25:5f:62:69:8c:0a:41:6e:6c:d2:
65:d3:ab:dc:9d:0a:c6:d0:db:32:37:5e:63:ad:72:b0:fc:44:
1f:a4:a9:6e:47:8d:82:de:9f:40:64:3f:36:e3:e4:ff:3d:60:
7e:6d:67:ee:7e:c8:5d:42:fa:2b:57:9b:01:c9:d4:9d:13:95:
c9:90:2a:e7:02:b9:00:26:eb:47:55:c0:6b:41:cc:35:d8:84:
67:d6:6c:0f:67:28:47:f7:28:92:97:ba:5c:93:16:0c:16:6e:
8d:46:c1:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:34:56 2025 by rpki-client