Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: yrh/CGiFg5Lgjpzl1PG90LNo48BanTmdoaQwWIOTZm4=
Subject key identifier: 91:49:CE:0C:88:BC:6A:EF:E0:B4:B1:F0:E6:0A:3C:83:8D:6B:61:6F
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 01964EFEBBB329EB716C10A6DF1C31369C9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 17:00:39 +0000
Manifest this update: Sat 19 Apr 2025 17:00:39 +0000
Manifest next update: Sun 20 Apr 2025 17:00:39 +0000
Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: 6NIRxqj+0NSC4rjjAyMJr2ZRTK0/wt6e0gnTZi7/0oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 17:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:fe:bb:b3:29:eb:71:6c:10:a6:df:1c:31:36:9c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: Apr 19 17:00:39 2025 GMT
Not After : Apr 20 17:00:39 2025 GMT
Subject: CN=9149ce0c88bc6aefe0b4b1f0e60a3c838d6b616f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:02:f3:c5:2e:c3:0b:f1:f5:b0:bf:ae:9f:
d8:1f:86:23:12:4b:62:b2:ad:3d:95:62:38:39:dd:
34:d5:ad:20:10:ce:5d:e7:0b:f8:27:e7:b9:aa:49:
6f:93:50:a1:d7:09:fd:09:ca:f6:2b:c9:13:ae:61:
15:be:e9:f2:47:e7:28:cd:a4:b7:5a:81:81:6f:8a:
7f:3a:11:d3:96:c5:af:79:4a:f4:c4:ae:94:16:ce:
99:cd:e8:0c:10:3e:d4:9f:a8:c8:85:18:b3:30:a7:
54:2d:66:4b:0f:08:1c:5e:f9:e2:31:66:e4:09:69:
78:47:c9:e9:c2:50:65:9c:78:80:c6:e6:74:26:7a:
a4:62:4d:bc:34:f4:17:bd:4b:a5:b3:85:ca:e0:10:
16:a6:80:94:39:34:df:87:a8:96:22:d5:fe:7e:1e:
fe:3b:12:66:cc:30:6a:b9:c1:16:89:73:9b:6f:0e:
52:03:f5:74:ca:3c:73:da:ab:31:48:78:b2:fc:d9:
b7:0e:b9:c5:75:c5:44:3a:6b:f0:bd:10:e7:7d:5e:
73:2d:00:a2:af:1d:a5:26:80:2f:cb:3d:1f:e9:98:
26:6d:f2:44:80:80:aa:e4:cd:d0:97:1b:5c:25:1d:
b3:19:b4:5f:40:04:a5:91:49:9a:a3:59:73:bf:5c:
2c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:49:CE:0C:88:BC:6A:EF:E0:B4:B1:F0:E6:0A:3C:83:8D:6B:61:6F
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:50:95:be:26:ab:5f:a0:01:f8:40:b1:c2:c6:74:8a:7a:91:
c0:45:b7:97:5c:dd:b9:a8:f4:e5:88:fc:54:67:c9:59:99:2f:
a9:5f:ea:fb:d1:dc:20:2b:b2:ca:83:66:29:53:be:15:ea:5c:
d4:1b:83:4d:3b:50:2d:6e:cf:f1:1a:40:99:dd:b1:02:9f:1f:
bd:ef:99:d6:50:52:e1:eb:39:94:50:0a:a0:4d:1a:31:c8:a3:
dc:db:d9:eb:3f:1d:c8:02:b4:50:57:93:81:5f:31:be:d7:dc:
65:ed:1d:f4:e3:1f:43:b6:58:d1:e5:0d:ce:f6:20:ee:2e:38:
ce:35:67:26:e3:82:0e:f9:a9:7b:39:8e:3e:c7:1e:16:71:45:
8e:3b:0e:5b:c1:4e:a3:2a:2f:ff:81:ab:cf:cd:d6:bd:5a:8e:
4d:77:25:bc:16:3c:40:c7:e9:fe:98:d0:9d:eb:19:89:82:fa:
6e:97:3e:f4:ef:e7:85:02:2a:6c:58:9d:52:06:40:8b:bf:27:
73:e1:83:3d:ac:df:12:c6:eb:ce:5d:03:3c:cb:7a:43:bf:77:
6b:2e:a0:44:01:6b:b1:79:3c:aa:05:95:e2:68:10:07:ab:29:
c5:49:cb:13:df:70:77:70:8f:d5:87:b6:35:63:81:f4:52:c3:
c3:75:cd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:25:47 2025 by rpki-client