Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
File: KwUe8jBg61G_2MeXlfak2vSKOqA.mft (raw, json)
Hash identifier: siL7QVYOIMTP/J+meYXoLZkKTWJmDpyZBVhXHCov4OM=
Subject key identifier: 39:FC:3E:A1:87:53:A6:45:B7:28:48:F4:A3:7B:9B:2F:3C:E7:EA:79
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 0196482159216EC94DD59EE8711FD9684C98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
Manifest number: 0929
Signing time: Fri 18 Apr 2025 09:01:06 +0000
Manifest this update: Fri 18 Apr 2025 09:01:06 +0000
Manifest next update: Sat 19 Apr 2025 09:01:06 +0000
Files and hashes: 1: 7KfzHRhceMH3Gb7zOEYksplo7xE.roa (hash: iVfBfIuw7lWYjZl+rIhHi1Vj8lrxetMWHxIKh5tV/kE=)
2: KwUe8jBg61G_2MeXlfak2vSKOqA.crl (hash: 9gJUc7I7BATrAB+jotWU3XQyrtnGAGvzGaW2NRWElxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:59:21:6e:c9:4d:d5:9e:e8:71:1f:d9:68:4c:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Apr 18 09:01:06 2025 GMT
Not After : Apr 19 09:01:06 2025 GMT
Subject: CN=39fc3ea18753a645b72848f4a37b9b2f3ce7ea79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:d4:f9:3c:10:16:d7:ee:42:82:56:2f:0a:3c:
29:d9:f5:22:71:f4:c8:e0:ec:34:b7:f5:4c:4b:94:
e9:cd:21:ef:8e:e3:a3:65:df:18:d1:d9:b6:b5:a2:
c4:26:a1:9e:8c:e2:eb:b0:db:d6:02:00:0e:a3:3c:
e8:f1:70:ee:ba:6f:33:ef:a3:d2:75:29:3b:1a:bf:
dc:ab:4e:b8:d1:3d:31:7d:b4:d5:85:34:29:73:20:
28:4f:13:06:46:76:a9:d9:3b:16:d6:60:58:b2:11:
77:c5:d2:6e:93:88:f0:69:56:85:80:15:ba:af:3a:
1b:ef:95:06:54:51:35:af:50:d2:95:8e:dd:56:e1:
a3:0b:b2:46:0c:e7:19:6c:bb:7b:50:7c:50:5a:df:
0a:b4:89:0b:de:0c:c8:17:00:ce:06:c3:cb:9d:a9:
01:40:d5:55:cc:e5:fd:c0:26:3f:7d:0a:0f:1a:47:
e7:b7:0c:c6:dd:e5:54:1e:36:3a:3f:92:7f:c8:d6:
42:37:7f:15:96:30:d4:76:e7:d8:81:c6:f5:f7:d1:
8d:7d:f2:72:e6:03:c7:a7:d9:5e:d3:06:31:02:03:
7e:9e:f8:c7:ff:89:b5:04:df:e2:0e:c3:4b:9a:74:
a4:0b:54:fb:bd:27:f1:73:d9:82:a5:29:20:18:a0:
6c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FC:3E:A1:87:53:A6:45:B7:28:48:F4:A3:7B:9B:2F:3C:E7:EA:79
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:72:2f:ab:a4:ac:0b:c5:e0:c7:a1:12:45:09:8f:2e:31:9c:
a5:b7:a8:10:0d:28:b1:c4:e0:42:7c:44:23:11:db:59:58:5e:
71:12:22:ab:03:60:c6:2e:a4:23:c9:08:68:e7:eb:4d:07:ac:
15:e1:a9:14:34:c8:48:57:2f:6b:2f:aa:cc:79:18:ab:08:a8:
f4:d4:d1:24:27:fa:d0:8a:57:f9:70:79:df:32:4e:f7:ff:3d:
7a:c1:3f:38:66:87:8a:2d:d2:0c:a1:c5:90:4f:b8:a6:e2:b8:
4c:dc:15:53:b0:f3:8e:eb:1c:bd:0d:d6:98:64:4f:07:a7:82:
cd:76:93:e6:ef:39:06:c6:29:10:c4:e9:fa:2f:39:59:63:31:
26:0e:99:47:39:f4:33:bd:60:d1:ca:92:e3:3c:46:4f:75:61:
5c:08:b6:78:77:2c:a3:61:31:9f:7c:63:35:65:50:9a:c3:61:
39:48:49:d9:81:10:13:39:14:7b:e3:01:a9:a0:2b:3d:94:48:
df:1e:98:be:b9:5d:d4:fe:51:27:61:fe:5b:cd:f6:dd:5b:9c:
c1:30:c0:55:07:97:dd:d9:0d:af:52:91:92:b2:bd:39:00:f4:
48:a1:0d:8b:57:fa:a6:34:c6:04:72:f3:21:ed:94:5b:0a:97:
a4:e9:d1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:34:01 2025 by rpki-client