Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
File: KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft (raw, json)
Hash identifier: GipCi85gFtF6qGOpOXSe1hRdJ0V6VNdXsP1h5jaWRjg=
Subject key identifier: 10:93:2F:1D:0A:D9:7D:5F:3B:82:FC:6B:82:68:9F:F8:80:6E:A1:08
Authority key identifier: 29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
Certificate issuer: /CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Certificate serial: 0196451FA37B4663C3B24717753710A7BBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
Manifest number: 0FCB
Signing time: Thu 17 Apr 2025 19:00:23 +0000
Manifest this update: Thu 17 Apr 2025 19:00:23 +0000
Manifest next update: Fri 18 Apr 2025 19:00:23 +0000
Files and hashes: 1: KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl (hash: a7fX4H8q0ndQuV03Cf65oYtNVbxlPgRKp6ULkyAqWb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:45:1f:a3:7b:46:63:c3:b2:47:17:75:37:10:a7:bb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d457b1025e4a6a45c6c4b45d6e234aa518c8b1
Validity
Not Before: Apr 17 19:00:23 2025 GMT
Not After : Apr 18 19:00:23 2025 GMT
Subject: CN=10932f1d0ad97d5f3b82fc6b82689ff8806ea108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3c:2f:1c:88:f1:64:82:77:cd:e2:23:c3:5c:
09:0d:82:7e:d1:a5:51:12:3e:7e:c8:0d:1a:c2:31:
84:25:22:ce:e6:fc:1e:80:d5:b7:d5:89:23:ab:b1:
44:19:09:af:de:69:8e:40:3c:33:33:07:6e:14:4f:
2c:ad:58:7c:52:92:e5:dd:60:b1:75:21:d9:63:1d:
1b:db:55:93:e8:2a:7a:9a:d9:45:35:5f:9a:d4:4f:
d8:28:6c:2c:40:39:34:bf:6d:d9:e9:46:ad:62:1e:
6e:79:8b:82:d7:2a:4b:96:1a:12:f3:97:53:b8:f9:
48:46:a5:76:24:a0:7a:0e:c2:d4:d5:94:fa:ca:b9:
63:92:bd:45:dd:d3:1f:00:90:e8:c6:0b:19:d4:32:
c2:d2:c6:6f:9a:74:04:97:73:cd:de:9d:c4:57:d0:
41:f1:23:18:e7:e2:e7:d0:6f:fc:4b:34:79:b2:df:
69:27:d6:1c:ea:0f:a3:c0:7a:f6:f5:45:37:6b:1c:
cb:e0:ea:6f:cd:5e:b2:6a:f2:a7:1c:76:cf:26:7f:
62:67:9e:5c:76:4b:81:6e:5b:c5:0b:0b:96:26:25:
16:d2:60:88:6d:ec:11:c9:a8:47:94:6a:1b:32:2c:
8d:47:fc:8d:8b:ad:58:c2:c8:93:42:8e:cd:93:d9:
2a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:2F:1D:0A:D9:7D:5F:3B:82:FC:6B:82:68:9F:F8:80:6E:A1:08
X509v3 Authority Key Identifier:
keyid:29:D4:57:B1:02:5E:4A:6A:45:C6:C4:B4:5D:6E:23:4A:A5:18:C8:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdRXsQJeSmpFxsS0XW4jSqUYyLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8e87fe-c9d6-4424-bd98-7a0619faaf7d/1/KdRXsQJeSmpFxsS0XW4jSqUYyLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:75:af:57:fe:29:56:31:b0:3c:39:bd:c5:4e:2f:22:0f:
81:9a:2d:4a:48:ab:e0:b5:04:47:f4:ca:3d:8f:40:57:dc:fa:
b4:2d:fc:e3:69:50:17:fe:60:00:49:26:04:34:03:95:d1:38:
f9:8a:ab:b9:90:77:01:9e:a2:3a:a3:88:bc:bc:f7:81:42:05:
ca:e3:17:a6:3d:c3:a8:da:af:b7:c2:1e:55:74:a5:ed:22:19:
30:87:1c:d3:88:44:ff:71:a7:6e:dd:cd:10:e7:ed:94:07:ea:
76:f8:e0:17:38:55:96:ef:90:27:f7:38:72:bb:85:47:53:db:
6c:dc:bd:dd:b1:d0:85:ee:77:36:3e:60:af:37:0d:97:c8:b1:
27:1e:e2:12:1a:d7:3d:f1:dd:a8:df:73:67:16:17:3a:c1:31:
37:4a:83:de:ff:3d:d0:c9:72:f2:f1:a9:70:af:4b:e3:e2:63:
d3:7b:51:51:32:21:70:0a:2a:bf:fc:f1:67:5a:99:a9:57:ed:
c5:69:8a:31:c5:7f:29:db:9a:35:88:e3:30:1a:27:10:e1:f7:
ab:a6:be:0c:c3:da:30:d6:01:9f:cb:77:5c:b9:cb:22:48:cb:
17:f8:93:d9:cd:0c:96:b8:34:fe:dd:18:06:43:05:4b:e8:15:
8f:4e:d6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:21:35 2025 by rpki-client