Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: +T1TlULg602ftXF2k8D/1ayY6Xy0xpEjGvJYmZXL+Yk=
Subject key identifier: A7:BF:DD:01:FB:90:75:B0:F1:77:4A:20:62:76:05:C5:D1:88:E7:20
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 01964BFDCF680450DCD7287A09A72E52AD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 03:00:46 +0000
Manifest this update: Sat 19 Apr 2025 03:00:46 +0000
Manifest next update: Sun 20 Apr 2025 03:00:46 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: CdduwaNkZDlZTKan0z8EWCQ6sstFaT7dV1U7lbPfagU=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 03:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:fd:cf:68:04:50:dc:d7:28:7a:09:a7:2e:52:ad:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: Apr 19 03:00:46 2025 GMT
Not After : Apr 20 03:00:46 2025 GMT
Subject: CN=a7bfdd01fb9075b0f1774a20627605c5d188e720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:59:3a:8c:a3:73:86:b4:9b:f7:e1:28:d2:
aa:81:ce:ef:ab:23:9c:13:c0:7b:7d:71:6e:a1:89:
cf:f2:a3:e6:c4:3f:a9:55:0c:41:5e:76:25:50:65:
8c:48:0f:25:6e:6c:70:34:b7:85:7d:9f:26:01:1c:
65:6a:ef:d3:7a:08:ae:fd:45:fc:9f:98:58:0b:4f:
48:73:3b:ed:65:c9:4b:5b:51:da:ec:05:04:d7:af:
b5:01:d1:12:c2:5f:36:ed:13:a6:85:36:b8:4a:08:
18:80:bc:1f:33:e7:56:e0:44:8a:42:76:45:1f:36:
bb:68:76:63:d0:6f:4a:1a:8e:86:6d:ea:21:72:9e:
24:4e:92:99:49:86:e9:ae:0b:fe:02:b1:2a:40:7b:
92:9b:08:99:3b:b3:a7:9e:ec:ca:77:a0:7f:18:3e:
b2:6e:20:76:92:08:e9:38:ea:4e:cb:8b:34:b6:5e:
ac:80:19:b7:86:a1:7c:ac:72:c0:d4:61:53:ca:4e:
66:6f:c2:f4:7f:d7:c4:e8:ec:b0:85:8d:14:14:77:
67:95:95:21:e0:86:f2:db:27:fe:35:6c:e9:e9:73:
3f:43:d0:2a:08:a0:77:33:e5:6e:35:25:03:2a:da:
64:08:98:9a:1f:27:97:3e:2c:2e:30:2c:79:38:71:
0d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:DD:01:FB:90:75:B0:F1:77:4A:20:62:76:05:C5:D1:88:E7:20
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:88:97:5f:bf:31:f1:83:2c:38:7f:36:1f:1d:05:6c:a8:42:
d5:fd:d2:55:9e:09:79:4c:d2:43:74:26:59:d7:fb:9b:45:54:
82:32:30:37:63:63:d6:e6:92:45:6d:b1:43:8a:c3:9c:bc:f4:
4d:be:a1:7e:3a:31:7b:5b:12:63:b2:fc:95:c5:0d:08:2e:ad:
91:0f:6d:23:58:58:a0:fd:30:92:55:87:01:63:85:7c:e2:34:
c8:b2:a4:98:90:0a:1d:e0:e5:65:68:14:54:b2:ea:cd:55:e0:
ce:f2:b3:26:d9:2f:7e:cc:58:55:3e:6b:91:6e:dc:a4:c9:7d:
44:e5:66:e6:2d:ff:a2:4d:bf:0a:c1:eb:51:9f:04:70:83:09:
3d:f0:98:ca:45:df:b0:c7:38:93:95:49:69:16:d0:39:46:a4:
95:09:a4:25:32:a5:1f:d5:4d:3f:58:6c:c2:24:c5:c2:58:ab:
8c:30:81:d0:33:3f:20:81:49:b2:30:e7:86:47:62:c3:54:da:
80:81:bf:26:10:f0:91:6d:9c:ba:0a:ef:a2:10:24:31:7b:28:
9a:b8:3f:25:ef:29:61:70:0b:52:e1:94:8f:dd:9f:c4:71:df:
59:a7:af:7e:56:f5:c9:2f:68:85:6d:e3:18:c5:a0:8a:e4:86:
6c:6e:b7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:17:56 2025 by rpki-client