Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
File: kg6KqqAOJVZRVcWbjMO42BuhSSA.mft (raw, json)
Hash identifier: +muBjWgGidkw6xAGxZ7TOl4yKJo/pQ8bf1l8dfmytiw=
Subject key identifier: 0C:94:94:92:33:AA:5A:D5:ED:4A:08:FA:DF:E4:6B:CC:FE:1B:58:FA
Authority key identifier: 92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
Certificate issuer: /CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Certificate serial: 01965BA78E2FD87EA527A6569A415A6FB0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
Manifest number: 03C6
Signing time: Tue 22 Apr 2025 04:00:29 +0000
Manifest this update: Tue 22 Apr 2025 04:00:29 +0000
Manifest next update: Wed 23 Apr 2025 04:00:29 +0000
Files and hashes: 1: kg6KqqAOJVZRVcWbjMO42BuhSSA.crl (hash: C8+/lkz/K2+SNmn79OcwLjntkBb3+4yT0Wk+UVjl0zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:8e:2f:d8:7e:a5:27:a6:56:9a:41:5a:6f:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=920e8aaaa00e25565155c59b8cc3b8d81ba14920
Validity
Not Before: Apr 22 04:00:29 2025 GMT
Not After : Apr 23 04:00:29 2025 GMT
Subject: CN=0c94949233aa5ad5ed4a08fadfe46bccfe1b58fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dd:9b:3c:9c:13:b7:68:43:a0:b0:d4:ad:01:
e9:fa:20:9e:48:e2:a4:5b:75:72:d3:7b:e8:3b:14:
aa:ce:82:2d:c5:60:6d:6c:c1:81:6c:c0:f5:bd:dd:
6d:ba:ba:5e:95:c8:7d:7d:1d:ed:5c:e4:90:30:f2:
46:91:f6:01:c7:06:c9:30:a8:98:a8:aa:22:89:02:
c1:9b:35:5b:ca:58:33:cf:b0:7e:0f:35:d2:c4:11:
ca:e6:c2:c5:3b:d2:6d:cc:df:45:7d:79:06:14:7f:
2d:ba:df:f7:b9:62:96:46:9b:87:82:46:73:4c:5c:
03:83:89:fe:b5:ee:2e:1f:7f:00:51:b2:21:7a:01:
49:61:c3:63:50:b1:35:a0:fb:f5:8e:d8:bb:ed:d1:
b3:45:67:95:b5:e5:02:c7:af:eb:f5:31:e5:7b:ca:
b5:15:04:8b:fc:72:11:d9:5d:31:48:63:b8:fe:3f:
4b:76:36:4c:78:59:95:ee:5c:a9:66:07:83:b9:c2:
57:1b:6a:ed:49:b3:ac:44:63:f4:f5:3c:dc:fa:4a:
b7:dd:d8:77:64:ea:9f:a5:c3:72:48:8a:6b:e7:1b:
d3:98:76:d4:1e:ef:56:0d:49:85:68:e6:6c:4a:4b:
1b:31:c1:12:5c:8e:10:dc:03:32:30:0b:04:79:96:
88:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:94:92:33:AA:5A:D5:ED:4A:08:FA:DF:E4:6B:CC:FE:1B:58:FA
X509v3 Authority Key Identifier:
keyid:92:0E:8A:AA:A0:0E:25:56:51:55:C5:9B:8C:C3:B8:D8:1B:A1:49:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kg6KqqAOJVZRVcWbjMO42BuhSSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1fc264-885f-49e4-8451-81acfe175df7/1/kg6KqqAOJVZRVcWbjMO42BuhSSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:14:e5:1d:5f:25:ca:a7:e6:bf:4d:07:33:08:fd:c8:95:be:
2a:0e:1f:60:c8:96:3e:33:00:08:98:87:12:bd:cb:8a:50:9c:
b0:21:e0:8d:f1:11:49:e9:92:38:1d:30:83:28:0e:2a:9d:f8:
3b:87:8e:55:1a:04:c3:f5:ce:12:79:ca:98:df:b0:c3:4f:ce:
1a:2f:4a:e6:36:54:bc:10:e4:58:21:a2:67:f1:a6:a7:4a:d6:
5f:88:19:c3:d6:a4:19:a6:94:a2:ae:ac:49:25:4e:c4:54:3f:
a1:ba:d0:da:26:a0:3d:98:13:c3:58:32:8f:a1:b3:5c:e9:76:
a4:09:25:20:ff:65:5d:8c:e5:fa:c3:e6:5f:c6:60:cd:19:30:
81:17:d6:84:d0:76:01:f1:1d:f7:c0:8a:44:0e:98:46:b6:71:
32:2f:8c:f3:54:d6:36:71:5a:a2:fb:13:6c:da:a0:af:4b:d5:
5f:64:3e:be:00:3b:6a:7d:d2:37:eb:7c:da:4e:65:7e:e5:fd:
25:c8:55:40:fe:a2:da:1c:b1:80:71:e0:6a:bc:2c:92:b8:7e:
82:8e:c1:79:92:66:cc:d1:88:54:a7:8c:04:3e:d8:70:74:c3:
62:cc:c8:b0:f0:c7:1e:a2:37:92:b0:e6:0c:5a:0d:0e:b3:64:
c3:5e:f2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:19:35 2025 by rpki-client