Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
File: KrmiSem1jILhRV6yM5RVsDHn3d8.mft (raw, json)
Hash identifier: As+MU51kLrPAxJOe+9oyNkClWIHBMkC6t+5053kaHUU=
Subject key identifier: 2E:BC:F9:C3:4C:7A:05:01:2A:98:0D:90:D5:C3:95:E0:D6:EE:45:25
Authority key identifier: 2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF
Certificate issuer: /CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
Certificate serial: 019659821AE635AE2F3C3E176B91379D9AF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
Manifest number: 14FD
Signing time: Mon 21 Apr 2025 18:00:20 +0000
Manifest this update: Mon 21 Apr 2025 18:00:20 +0000
Manifest next update: Tue 22 Apr 2025 18:00:20 +0000
Files and hashes: 1: KrmiSem1jILhRV6yM5RVsDHn3d8.crl (hash: f9Uc/H2AJOLIqCUpKva8rJDvifWo0aZTILBHZ2I2Awg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 18:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:82:1a:e6:35:ae:2f:3c:3e:17:6b:91:37:9d:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab9a249e9b58c82e1455eb2339455b031e7dddf
Validity
Not Before: Apr 21 18:00:20 2025 GMT
Not After : Apr 22 18:00:20 2025 GMT
Subject: CN=2ebcf9c34c7a05012a980d90d5c395e0d6ee4525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:fc:a3:27:5b:38:c4:b3:49:11:a2:5e:30:
4c:d4:2f:a8:58:5b:c0:5f:23:6a:ef:c2:3d:c0:fb:
74:83:33:7c:9d:af:dc:04:1a:a5:52:b7:16:61:ed:
31:74:8c:d5:f9:8d:37:c0:f5:ed:76:bd:08:05:a7:
f8:4d:8b:8b:ce:2d:15:55:3e:bb:f5:e6:e7:aa:3f:
ef:fb:46:1e:8c:a1:4f:85:88:16:52:5b:fd:40:e9:
33:8e:14:db:23:69:5f:ae:7b:c6:55:82:4d:13:18:
cb:b0:b1:b9:f6:40:4f:aa:82:f6:2b:f6:77:91:76:
b3:f8:86:eb:bf:3b:11:13:cb:f3:8b:ca:70:a5:0b:
93:73:24:29:14:8b:90:1b:1e:3f:45:aa:b4:88:8f:
89:83:2c:b5:4a:00:18:a1:56:bf:57:52:97:fd:93:
5e:f4:81:b3:13:23:71:14:a2:ec:4e:79:fe:32:61:
28:f5:b5:51:1d:5a:e7:d1:4b:3e:f0:a8:cf:3d:c7:
58:b2:80:94:73:40:99:bb:36:b7:e9:df:ac:4c:24:
35:a4:b6:7c:a7:39:b7:6a:4f:a2:b9:5b:df:f4:e2:
20:a1:39:b0:66:26:80:02:5a:b0:75:7c:b3:18:18:
c6:80:bb:53:3a:14:4a:9d:00:6e:b8:0c:de:e1:88:
6c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:BC:F9:C3:4C:7A:05:01:2A:98:0D:90:D5:C3:95:E0:D6:EE:45:25
X509v3 Authority Key Identifier:
keyid:2A:B9:A2:49:E9:B5:8C:82:E1:45:5E:B2:33:94:55:B0:31:E7:DD:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrmiSem1jILhRV6yM5RVsDHn3d8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9eab6d-6b35-4a5a-afb1-251f22093d04/1/KrmiSem1jILhRV6yM5RVsDHn3d8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:36:d3:94:fe:80:51:e5:42:a9:84:9b:b3:7c:d3:ef:ee:a0:
87:ca:28:5f:21:62:36:67:2b:9f:fa:6f:1c:47:01:ea:37:4f:
bd:bf:5e:50:af:e2:ec:9c:e3:34:c3:34:3e:e7:e2:07:5b:fb:
8f:9b:2e:a9:d7:12:af:06:c4:c5:7b:1a:fc:4b:b0:60:90:12:
2f:bd:03:58:6c:65:8f:1c:dc:f8:16:e8:69:5e:0c:96:75:de:
80:0a:a2:be:db:9c:15:b4:57:f5:c1:1f:9b:c7:15:48:ec:a7:
fe:d7:e8:03:49:e8:20:ca:68:d7:6c:1e:4d:c7:21:38:ef:e8:
70:41:3d:40:5c:5f:9b:4f:2f:1c:4b:02:35:fc:c9:18:75:4d:
5d:4e:78:98:d0:9f:68:5a:d7:04:c9:25:10:1a:40:35:ff:24:
6d:fe:7e:3c:72:68:61:5f:cf:fa:ba:f2:59:5b:6e:37:2f:cb:
98:ee:2f:61:94:0f:dd:08:09:10:e2:af:88:1f:59:f3:69:61:
10:78:6d:f5:a3:17:37:f3:7b:57:60:35:fc:ec:4f:12:e7:fb:
50:cf:8f:85:95:93:a6:8c:f6:8b:9c:7d:1a:e0:7a:4a:bc:2f:
69:41:b5:cf:2b:b4:41:fd:d9:52:49:09:3b:a4:5f:70:05:de:
85:da:11:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:58:40 2025 by rpki-client