Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: lG/MBZmloiyuzRcqoroE0KDkw4oQhZW6rGRGlOhTFv4=
Subject key identifier: F4:0E:7E:FD:B4:9D:4C:00:B6:83:0B:45:EC:78:AF:F7:03:7E:B7:F6
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 01964D10029723C492C0DD71FF2372D7C598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0D8D
Signing time: Sat 19 Apr 2025 08:00:16 +0000
Manifest this update: Sat 19 Apr 2025 08:00:16 +0000
Manifest next update: Sun 20 Apr 2025 08:00:16 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: KyEpjB9gynGrkSufOIh8YlFGZ7QX5rsxh8NVsiin07E=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:10:02:97:23:c4:92:c0:dd:71:ff:23:72:d7:c5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Apr 19 08:00:16 2025 GMT
Not After : Apr 20 08:00:16 2025 GMT
Subject: CN=f40e7efdb49d4c00b6830b45ec78aff7037eb7f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bc:ef:ae:c9:74:5c:7a:83:66:73:7d:5d:9d:
cb:bb:0c:b5:fa:cb:ea:c4:fd:7e:ad:12:24:93:78:
43:2d:d8:fd:96:fd:25:97:ad:df:a2:72:b4:e9:e4:
d2:e2:0c:69:ab:2d:12:68:9a:53:04:f4:30:9d:2a:
3a:82:c3:e3:58:89:6a:56:0b:f3:04:d6:33:bd:39:
35:53:96:15:e9:21:70:a8:1a:46:e8:54:78:35:b3:
b9:29:0b:39:96:a6:31:37:81:48:09:24:d7:6b:f4:
2c:d8:83:4d:39:c6:a6:ab:f6:f7:32:21:1a:d8:db:
73:49:04:ae:d4:e1:1e:21:3e:9d:f1:94:6c:fd:16:
11:53:4a:73:07:cc:c5:16:d9:37:25:61:b7:e0:e1:
b8:41:bb:e3:5d:98:78:4a:00:f1:4b:e5:f5:24:5b:
20:4c:b4:09:83:9c:7f:c5:b5:7d:f6:62:af:5c:35:
eb:d7:b8:e1:a8:9a:a6:9e:36:47:ef:5e:6b:8d:e5:
60:a3:20:29:aa:d2:8e:a5:f3:bb:c1:51:5c:16:f1:
e5:6f:f4:10:d7:88:c8:59:48:e1:cd:92:f0:a8:ac:
c6:8f:da:77:81:09:03:a9:1e:1e:8e:f9:46:f5:d6:
c9:7d:bf:cc:29:85:c7:c2:01:4f:3c:46:72:18:47:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0E:7E:FD:B4:9D:4C:00:B6:83:0B:45:EC:78:AF:F7:03:7E:B7:F6
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:85:c3:7a:62:a4:22:42:3c:61:8c:43:0e:21:ac:21:72:7e:
b8:c9:84:1b:6d:39:1c:07:4a:48:18:0a:78:c9:aa:25:ca:6d:
2f:c1:67:01:0a:2f:45:cb:6d:ee:47:f4:da:de:cb:90:93:3b:
d0:93:77:54:c9:96:49:52:c5:3e:96:61:45:49:22:45:39:da:
6d:2d:4f:87:36:24:01:6c:90:fa:e7:96:c9:ca:f4:be:b4:5d:
4b:04:a5:14:61:04:0e:f8:2c:73:95:de:76:a6:10:c3:88:be:
5d:37:dc:f5:4b:01:6b:62:a4:56:1e:99:7f:68:47:5f:d3:42:
bb:5f:b6:d1:d9:0f:3a:05:2b:3b:f8:2f:83:44:a0:5c:71:23:
d1:e8:93:c6:48:44:27:24:fc:46:69:d4:7e:9c:29:0c:7b:b7:
44:94:c5:c8:28:6c:85:be:97:b0:d6:2e:ad:7c:d2:0a:2b:9c:
33:e2:3f:50:74:d1:b8:e1:ab:4e:cc:48:01:ca:cf:44:b8:9c:
d8:42:3a:98:17:5f:04:c7:2b:2e:b2:33:84:e4:e5:a1:f9:eb:
e8:43:88:95:c1:31:ec:cf:29:1f:67:47:53:7a:bf:d8:e1:0c:
a8:31:08:78:87:bd:41:e0:4d:17:d2:96:2a:9c:08:45:98:14:
02:86:10:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 13:57:18 2025 by rpki-client