Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
File: KJkuu4Pri3Oioh5bAz296x308j0.mft (raw, json)
Hash identifier: bbdppFTU6dyVbH9lIcJT6XDm4VigjWPkWaCRy68d+KA=
Subject key identifier: 62:47:7A:16:48:8D:37:E3:BB:2D:56:4E:09:D4:06:A3:B1:B8:3B:D7
Authority key identifier: 28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
Certificate issuer: /CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Certificate serial: 019652A4A0A051BB844BC8F4111FCF0A0707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
Manifest number: 08DC
Signing time: Sun 20 Apr 2025 10:00:42 +0000
Manifest this update: Sun 20 Apr 2025 10:00:42 +0000
Manifest next update: Mon 21 Apr 2025 10:00:42 +0000
Files and hashes: 1: KJkuu4Pri3Oioh5bAz296x308j0.crl (hash: PanRgcQlJ4/DZhK0vHf7N1Ae7D/OMsQROEo0sHOpArQ=)
2: MdutrPnIA4jtsUw7J4Yelrok5X0.roa (hash: r2kS0LoTxgu8taO5YAtvMzxTwqT6ILx9UD2HUGC3ccI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:a0:a0:51:bb:84:4b:c8:f4:11:1f:cf:0a:07:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28992ebb83eb8b73a2a21e5b033dbdeb1df4f23d
Validity
Not Before: Apr 20 10:00:42 2025 GMT
Not After : Apr 21 10:00:42 2025 GMT
Subject: CN=62477a16488d37e3bb2d564e09d406a3b1b83bd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7c:d0:98:26:59:8f:f9:bc:69:f9:4b:d7:10:
95:49:3e:41:bb:c8:f0:df:cf:5d:c7:d6:c4:d7:1a:
92:76:fc:cf:6f:58:3b:92:f6:d0:39:4c:92:b5:da:
57:08:28:2a:43:77:60:f4:4f:9b:fb:87:12:2a:eb:
1d:b0:30:60:cb:5d:35:4a:70:84:79:8b:ab:da:c0:
57:05:64:56:c2:85:4b:9a:74:9f:50:58:cb:00:65:
28:3e:47:62:28:6b:8e:46:b2:e7:05:3a:0f:d3:96:
75:df:67:9b:d3:d9:21:6f:90:2b:76:52:67:e8:04:
3d:7f:09:99:50:32:db:fa:e7:b6:58:f3:06:4c:69:
7f:bb:90:17:03:b3:1d:d4:12:86:ed:34:78:bb:00:
8a:15:cc:b5:db:ab:6b:7e:1c:d8:2f:f4:f1:33:52:
10:66:7e:76:49:94:2b:cb:41:3e:a1:5a:4e:4e:fa:
20:20:c0:8d:fb:1f:02:75:0e:65:05:64:94:17:e0:
b9:9c:64:a3:c9:45:66:d4:d9:26:4b:8a:4a:38:30:
a2:d8:40:b1:f2:c2:00:57:68:02:27:88:19:1a:60:
7e:1b:44:1d:ec:66:e1:19:56:3e:a9:b2:27:df:01:
5e:28:14:5c:49:34:39:6c:db:fa:9b:b8:20:64:0e:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:47:7A:16:48:8D:37:E3:BB:2D:56:4E:09:D4:06:A3:B1:B8:3B:D7
X509v3 Authority Key Identifier:
keyid:28:99:2E:BB:83:EB:8B:73:A2:A2:1E:5B:03:3D:BD:EB:1D:F4:F2:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJkuu4Pri3Oioh5bAz296x308j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/f98dce-992d-4f64-bc38-b36b8e892c6c/1/KJkuu4Pri3Oioh5bAz296x308j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6b:7c:de:3b:d3:43:ab:89:a5:61:78:9b:f9:e5:22:e8:d0:
06:37:a9:e9:a9:c4:5c:c4:d5:0e:b4:61:0a:89:07:1a:fd:9b:
63:ed:2b:86:8c:c6:12:09:ba:b0:a3:e1:3c:40:72:bf:1e:6d:
5e:4d:bb:a0:7f:07:da:2a:3c:44:27:cd:86:7d:b1:df:74:d5:
3e:7b:32:79:7f:37:62:3c:93:1e:cd:9c:04:79:ab:29:01:89:
f1:6c:88:34:08:b2:db:ef:d0:16:0f:f0:c4:fa:3e:f2:c2:6f:
c2:91:26:83:fa:ec:88:47:62:1d:9f:ae:67:4e:9c:e9:a9:dd:
de:b7:76:e1:58:63:9a:45:ed:85:06:3a:e8:49:ee:28:f2:3c:
ca:a5:0e:91:5d:0d:1a:92:68:05:f4:ef:80:4f:71:d0:4c:c4:
bd:43:75:db:62:f2:c7:6b:19:cf:c9:0f:98:bf:6f:60:94:f3:
80:ac:41:6c:37:62:79:0f:21:d2:d8:b7:6d:3f:60:98:73:88:
cf:fb:a6:c5:21:d5:7d:f0:e4:3d:df:e1:7f:01:3c:31:62:d0:
69:88:eb:2c:17:3a:67:2b:5f:cd:bc:55:40:74:c3:38:69:7d:
21:bd:db:ba:3a:41:22:d3:5d:9b:64:84:01:92:f5:6e:5b:c9:
11:bd:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:35 2025 by rpki-client