Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: UxAFnNaG2v0D4ZOYaZD9rZi0pm9P+0avzlrVd38sCUY=
Subject key identifier: 03:FD:13:34:5A:25:DE:02:0B:97:2B:A1:14:8A:74:E1:B5:7A:A3:81
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 01964AEB2912656E56320BD7CAA82467088B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 0FF7
Signing time: Fri 18 Apr 2025 22:00:47 +0000
Manifest this update: Fri 18 Apr 2025 22:00:47 +0000
Manifest next update: Sat 19 Apr 2025 22:00:47 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: k6A4X3dhsSmFJmlskBO++4IVuFjPWHyiiYamgUDjbzE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4a:eb:29:12:65:6e:56:32:0b:d7:ca:a8:24:67:08:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: Apr 18 22:00:47 2025 GMT
Not After : Apr 19 22:00:47 2025 GMT
Subject: CN=03fd13345a25de020b972ba1148a74e1b57aa381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b6:93:84:ae:5a:e9:a4:b7:77:91:3c:f3:58:
8d:b4:c3:b2:ee:6b:62:e2:e3:69:f4:23:77:bb:2b:
d8:ae:cc:7c:a1:ef:60:62:58:85:3e:89:dc:46:40:
45:c6:aa:c6:20:84:5a:92:a6:1e:74:23:b8:30:d1:
12:7c:43:51:ec:49:6a:31:5f:d1:62:71:69:3c:c4:
17:11:66:ba:ce:84:1d:f1:65:26:1a:fa:54:42:29:
96:56:3a:b2:e3:e0:ac:04:2d:83:01:83:f2:18:01:
b0:cd:d7:23:62:47:e7:7c:cc:05:e5:ab:02:87:e7:
93:23:5b:92:56:f7:67:c1:e3:e5:58:52:72:4b:21:
87:a2:70:28:fc:a8:97:4c:db:a4:6b:21:b9:e4:14:
19:4f:11:0f:13:92:51:40:f1:36:63:28:66:03:a5:
fd:e5:8c:13:e0:f7:98:82:1c:99:55:b1:ac:00:33:
1d:25:d2:e6:ce:e1:53:9c:92:f4:1b:3e:09:84:eb:
11:f5:71:1e:c6:79:5f:8a:29:d8:d6:49:93:81:ab:
f9:cf:41:93:06:7c:56:64:e4:34:df:ef:62:bf:3f:
71:61:e4:ab:cd:7d:ec:03:46:ea:13:64:ce:58:5d:
63:47:78:bb:62:b3:33:22:63:10:91:98:05:22:64:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FD:13:34:5A:25:DE:02:0B:97:2B:A1:14:8A:74:E1:B5:7A:A3:81
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:40:4c:50:73:63:1b:a5:29:6d:a7:84:0e:81:b7:64:6a:c7:
cc:26:c3:32:03:05:ea:d4:e8:58:5f:4e:58:0a:0d:dd:2e:97:
74:f8:75:57:65:c9:f3:93:52:e1:4f:55:6d:a6:b4:c6:4f:d2:
4f:f3:87:17:2c:bd:9b:e4:35:40:17:07:25:c1:03:5e:d8:24:
79:18:15:8b:ab:86:3a:a1:f6:99:66:b2:20:cf:51:45:0f:dc:
1e:32:2a:a0:9d:be:b2:7d:4d:fc:47:98:d3:7c:3f:b4:ad:72:
cc:28:2e:0f:47:3f:70:5f:42:51:8e:28:30:50:28:4e:e5:58:
4c:55:99:8d:6a:3f:f2:ea:e3:e0:1e:ae:2d:84:d1:7a:60:67:
be:db:92:ff:bc:d8:d6:c9:90:44:52:33:de:d4:46:d9:e6:6f:
3d:39:47:c3:be:18:f4:9d:36:51:ee:f6:fc:46:ba:00:20:ea:
70:b0:c2:b0:64:29:d6:18:1c:67:f6:48:b2:f7:92:2c:5b:80:
47:45:22:41:a1:53:cf:74:c4:39:e0:9f:b7:ae:6b:5b:55:c2:
97:52:5e:5f:d6:d3:ee:d2:56:96:ef:ea:3a:a2:c8:fa:9d:d6:
23:99:0b:3b:e1:e3:5b:fe:a1:cf:d5:5d:9c:94:3c:b3:ff:ae:
08:17:ba:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 03:13:11 2025 by rpki-client