
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: 4/pkiEzwF9fiQvxT00neebrEDFZMiyA0FEfCg/yyF3U=
Subject key identifier: 5D:82:4B:EF:B2:0E:13:B2:79:1A:7B:55:33:C6:FB:F3:DC:9B:74:A1
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 01965236C40983ECA72DA8826BA80A9F8E03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 110D
Signing time: Sun 20 Apr 2025 08:00:42 +0000
Manifest this update: Sun 20 Apr 2025 08:00:42 +0000
Manifest next update: Mon 21 Apr 2025 08:00:42 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: FV2E+sAOmvTFcUqHECIuVtQxYp2DkZ8XaTSF3pvjmkU=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:36:c4:09:83:ec:a7:2d:a8:82:6b:a8:0a:9f:8e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Apr 20 08:00:42 2025 GMT
Not After : Apr 21 08:00:42 2025 GMT
Subject: CN=5d824befb20e13b2791a7b5533c6fbf3dc9b74a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:c4:ba:bd:b0:7e:72:c9:e0:09:34:7c:59:
9a:b0:f5:a4:10:94:15:93:a1:00:21:71:38:e1:77:
e6:4b:26:2d:b4:6f:a7:cd:98:ec:58:bb:9c:15:d8:
98:3f:44:91:c8:87:67:a5:4c:05:bb:54:7d:13:7a:
5d:ad:53:38:de:a7:cf:41:cd:c2:4b:1b:99:40:ca:
5f:90:fd:d3:db:9a:fc:43:e4:c2:5d:ee:a2:7c:68:
4e:fa:58:24:6c:63:54:17:46:a9:78:db:70:03:1a:
77:20:27:eb:67:54:e0:06:99:62:b2:68:3b:29:df:
f7:1e:1b:4b:ae:dc:de:de:86:5d:99:a1:4b:3c:11:
bc:3e:3c:ce:ed:72:11:70:cd:bf:9e:69:11:b0:6a:
ee:53:73:2b:99:2d:c5:e2:40:0a:38:78:a1:7e:8f:
5c:9c:84:8e:bc:c3:d3:67:db:37:8c:c0:62:86:13:
4f:26:ad:52:09:ee:a0:86:0e:e4:78:48:d8:e8:76:
e3:c8:8b:bf:15:a5:4b:b1:a1:59:bb:8d:85:3c:40:
3b:37:47:2e:2d:7d:34:38:bf:81:88:4d:70:be:c7:
71:d4:9b:f1:4e:22:a2:f7:57:22:e9:fc:fe:0e:b2:
90:fc:27:77:b3:81:94:52:60:11:80:88:9b:5e:a1:
cd:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:82:4B:EF:B2:0E:13:B2:79:1A:7B:55:33:C6:FB:F3:DC:9B:74:A1
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:db:9f:35:a4:0e:44:90:4e:b2:8b:af:43:a5:b3:6c:72:3d:
86:05:3c:52:69:99:af:a9:0c:34:95:bc:9b:ef:fe:cf:b5:b2:
5d:6d:8d:2a:0e:c3:f3:b3:98:9a:c1:01:7a:43:fa:a2:7c:f6:
6f:19:7a:1a:da:44:a5:d6:15:58:c2:3f:52:bf:63:e2:08:82:
11:14:d9:08:24:46:49:b3:cd:28:6c:f1:eb:a8:18:cf:50:68:
c6:c9:dd:7e:02:6d:7c:4a:9a:4b:96:f2:fd:12:92:5a:8e:d7:
82:c0:20:55:26:34:51:cb:fd:e0:b2:ee:6f:a0:4f:a7:10:61:
1e:72:22:2a:f6:3d:ae:e7:c5:0c:3c:06:af:d0:be:84:cb:a0:
06:17:ef:42:37:59:4e:57:aa:46:a1:97:3a:0d:b5:fa:b2:7e:
57:3d:0d:f2:a4:c0:4b:97:ac:01:47:35:0e:c4:34:50:62:44:
0e:a8:6f:ef:1b:47:4a:36:62:9a:b9:9a:83:5a:cd:bd:00:2f:
d1:c9:e6:ed:db:68:a5:90:e1:e4:5b:25:c6:4c:b6:a7:4d:35:
c6:b8:6a:28:ac:3d:27:18:d3:6a:7f:1d:9f:d2:3d:b8:ae:b5:
b3:3b:09:af:8f:73:3f:9c:ff:b9:2f:bd:e5:0c:c5:f8:44:ba:
f9:6f:89:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:20:00 2025 by rpki-client