Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier: emes0LtC0H3+4osUtsn9JJT9h98+gYzhlqGIIl9YoPQ=
Subject key identifier: CF:C1:4F:71:37:1D:24:C3:23:09:A3:50:9E:27:E4:6E:9C:1B:DD:89
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 01964DEC94C731B71B318F46C62AB82CB2C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number: 0A95
Signing time: Sat 19 Apr 2025 12:01:12 +0000
Manifest this update: Sat 19 Apr 2025 12:01:12 +0000
Manifest next update: Sun 20 Apr 2025 12:01:12 +0000
Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: 7J3pwnp1o0eXBkpOEP0mD6Z/raFrhogUaGfgUyMONQ4=)
2: WW00EN3MrsTzqtLNcacZPoJnrh0.roa (hash: j+ELBwy24bd0McE+tNDFFzjcwNY6uxzFX9utCzZ+kV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:ec:94:c7:31:b7:1b:31:8f:46:c6:2a:b8:2c:b2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Apr 19 12:01:12 2025 GMT
Not After : Apr 20 12:01:12 2025 GMT
Subject: CN=cfc14f71371d24c32309a3509e27e46e9c1bdd89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:65:cb:1a:fc:fd:54:ab:66:83:5b:50:98:
72:7e:cb:25:6b:2a:c8:7c:0e:e0:e0:23:9c:38:95:
32:99:cf:26:2d:7d:12:db:a4:96:cf:25:cf:d6:98:
3a:8f:97:9c:3b:69:83:8e:ff:22:ae:bc:24:a2:96:
f7:e9:26:b1:76:ad:f2:86:3c:d4:a1:a5:5a:1a:5f:
af:61:f5:e7:72:03:dc:ff:42:01:2a:d3:ff:80:6f:
dc:0c:77:eb:5c:bd:63:be:18:aa:01:29:85:98:4a:
a0:20:c7:68:41:72:5f:14:91:e9:c1:63:52:0f:03:
c1:ad:92:8a:c9:99:5c:ff:84:d0:cd:ed:27:10:c7:
c4:05:dd:c2:7f:6b:ff:30:18:d0:31:50:ea:95:0a:
b6:a7:a6:51:d9:c0:14:4a:c8:bb:c5:01:3c:89:12:
37:af:38:fe:d9:38:01:dc:d2:44:c5:aa:01:29:ff:
ba:38:2a:e1:51:ed:55:38:43:44:27:32:dd:d2:da:
37:9f:6f:81:24:7b:ec:ef:b7:6f:3e:f3:66:5f:d1:
49:3f:4b:4c:aa:79:8f:f2:19:9c:bf:9a:51:59:6b:
1d:c2:dd:cf:1d:a8:20:9f:88:d5:66:86:50:14:54:
5c:83:95:e2:38:f8:56:17:b6:92:a9:fa:bb:4a:14:
4a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:4F:71:37:1D:24:C3:23:09:A3:50:9E:27:E4:6E:9C:1B:DD:89
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:16:fb:06:e0:79:49:27:22:c1:94:f8:f1:d6:0c:46:eb:ce:
24:9b:0f:86:eb:53:8a:b1:d9:f9:a4:30:1d:00:70:5b:30:ea:
0e:ce:99:35:c8:6a:86:c1:94:11:be:54:10:0d:33:3f:35:a7:
9e:30:20:e0:1d:a3:2f:8c:84:32:13:0e:a0:17:33:59:e9:bf:
96:50:4b:fd:8f:8a:bb:ef:82:43:1b:28:3a:95:6b:4d:50:3f:
7d:29:ad:c6:1c:c5:b3:01:dd:dd:cf:5f:63:7e:15:c9:08:ff:
1f:3a:7a:14:bf:0f:9b:b3:b3:da:98:92:d0:b3:8a:21:e1:f4:
51:69:c6:03:92:c7:6f:6f:ca:33:52:5f:71:ef:7c:f3:d9:e4:
bf:8e:87:90:56:91:ae:26:91:a9:a5:1c:01:17:99:4f:94:ea:
40:d0:f3:51:5f:59:5f:df:cc:0c:f2:c8:65:d0:03:04:df:de:
95:c8:02:b3:44:ec:c2:15:61:ac:88:9d:1c:fe:42:52:12:2d:
74:b4:c4:12:e9:7d:b6:11:f5:9b:d2:5a:fb:3f:4f:5a:0c:a3:
b0:15:27:44:9b:f4:ca:bf:b9:5a:13:83:db:5f:40:a4:98:6c:
67:b0:c0:fe:80:74:30:f3:0d:02:1e:3d:e7:fe:03:8a:8a:2a:
e2:30:92:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:31:07 2025 by rpki-client