Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json)
Hash identifier: pfX5tRt3lSBuI+PyAnZN2L/W3QAtbb/bn7p7ASV3Jas=
Subject key identifier: 9C:DA:15:F9:09:08:8D:62:9A:E2:AD:9C:98:3C:FD:EE:03:B7:79:EC
Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Certificate serial: 01958F9857963687A763B0AF74C7C8200A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
Manifest number: 0F6D
Signing time: Thu 13 Mar 2025 13:01:20 +0000
Manifest this update: Thu 13 Mar 2025 13:01:20 +0000
Manifest next update: Fri 14 Mar 2025 13:01:20 +0000
Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: cN+5S9qwu47bhbpQFk2EvqrJGEgamAYXEmoVtOghAW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:98:57:96:36:87:a7:63:b0:af:74:c7:c8:20:0a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Validity
Not Before: Mar 13 13:01:20 2025 GMT
Not After : Mar 14 13:01:20 2025 GMT
Subject: CN=9cda15f909088d629ae2ad9c983cfdee03b779ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a1:17:a4:40:72:3a:1e:8d:72:f5:20:07:cd:
3b:ae:5b:81:77:75:1b:84:49:c7:9d:30:bf:59:a9:
0f:a8:8e:93:51:18:b3:53:1a:2a:4d:69:83:c0:cb:
81:74:67:7c:3e:cc:1b:d9:cb:bf:9f:77:e6:50:52:
2d:e9:d7:63:d2:43:ba:72:04:d4:eb:9e:e8:15:7b:
aa:17:9f:9f:2c:39:78:df:80:f6:41:33:58:fb:4c:
c8:d2:82:18:87:81:fb:7e:8b:3c:85:36:4d:3a:62:
76:6e:de:f0:b2:a7:be:85:69:92:58:c5:26:11:a4:
6f:40:ba:2a:6b:bd:c4:a4:5d:31:db:28:f6:75:93:
14:0b:f8:37:e6:f0:f5:ef:d1:ed:70:46:5c:60:39:
7d:02:86:9e:06:e8:51:96:f2:39:d8:7a:ac:95:1d:
1e:d5:cf:ba:96:7d:65:6b:02:66:18:4c:30:6f:a4:
23:ef:bf:3f:c8:24:9e:ba:f4:cf:e3:7d:a7:f0:f7:
44:a5:f1:2c:f1:70:79:75:11:8b:59:04:05:59:ab:
15:69:22:7e:d0:f1:49:aa:36:f5:c8:8c:2f:c4:31:
ef:3b:eb:16:a5:28:53:c5:67:81:36:a8:3d:31:98:
3c:73:76:a3:fb:87:51:6e:76:dc:60:9b:ac:71:e3:
76:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:15:F9:09:08:8D:62:9A:E2:AD:9C:98:3C:FD:EE:03:B7:79:EC
X509v3 Authority Key Identifier:
keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:92:c5:12:a7:7f:5a:fe:92:5e:c8:5d:43:fa:a2:5e:c8:d8:
f1:2a:c5:ed:44:60:85:4f:9a:b1:1c:6c:a6:13:f1:f6:0c:84:
cb:61:b5:09:2b:df:75:18:8c:aa:8e:fb:53:fa:92:f1:7e:f9:
e5:2e:41:3d:89:44:41:99:cf:ed:4f:e2:5d:bd:dd:83:8f:4e:
1b:42:bf:d5:14:53:18:29:5c:50:21:76:71:52:e3:96:68:68:
51:32:29:99:c3:29:d7:0b:5b:a9:18:f1:63:92:42:9a:82:aa:
9b:93:2a:3b:2f:f1:d7:4f:42:7d:d1:8e:ca:62:ce:95:6c:53:
8c:3f:8c:b4:fa:c4:b5:c8:72:fe:ef:8d:0d:a7:7c:ac:bb:67:
1c:99:b4:a0:05:ec:cc:c7:c8:93:27:26:af:1b:a6:82:13:85:
a4:83:b6:fc:e8:64:d2:50:c5:6b:20:d7:ed:ba:a4:2e:99:de:
8f:0a:c6:a8:d6:2e:85:1c:4f:10:d7:2e:a8:90:76:75:3c:48:
6e:13:44:4d:82:0c:5c:a2:dd:b1:ec:9a:bb:c2:32:d3:0b:bf:
02:55:bd:9e:59:d0:43:2e:22:94:39:f8:e6:fe:f1:c5:bd:d2:
83:f1:8c:bd:09:12:73:6d:c9:88:d7:30:e6:1c:b9:96:63:ed:
84:ee:3f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:45 2025 by rpki-client