Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
File: K9LDcoTYRCbwXjJbawR61c8_5PI.mft (raw, json)
Hash identifier: Tyjq6KlXx4kxqb5K4PeJ+4uhCCXUNts5sdZVjkE2Pr8=
Subject key identifier: 83:AB:47:3E:A7:F1:C1:FA:70:76:08:26:0B:07:D2:1B:DC:63:C0:71
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 01964C3512AF900A37DB17044637AFBB8DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
Manifest number: 14F8
Signing time: Sat 19 Apr 2025 04:01:08 +0000
Manifest this update: Sat 19 Apr 2025 04:01:08 +0000
Manifest next update: Sun 20 Apr 2025 04:01:08 +0000
Files and hashes: 1: K9LDcoTYRCbwXjJbawR61c8_5PI.crl (hash: y8RXZK+9KAICYv0HM4ZAT86uvxxop2NNUvALBMHPMF0=)
2: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (hash: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:35:12:af:90:0a:37:db:17:04:46:37:af:bb:8d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Apr 19 04:01:08 2025 GMT
Not After : Apr 20 04:01:08 2025 GMT
Subject: CN=83ab473ea7f1c1fa707608260b07d21bdc63c071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:67:ee:9a:43:f7:02:7e:a7:ef:ae:10:cd:
7e:a8:97:b4:f2:9d:d7:31:af:fc:b5:fe:5b:0a:fd:
47:f7:e5:b7:bd:08:d3:74:18:da:e8:cf:fd:6d:c9:
5e:e2:3e:c3:ad:20:22:44:3e:c6:5c:40:64:0f:66:
3e:07:ef:99:be:d4:ac:b2:43:c6:23:2f:8a:7a:5d:
d8:30:a1:cb:d9:0d:71:34:71:9d:f4:44:46:95:03:
3e:1b:84:b4:fd:03:ec:a6:a1:77:ad:c2:93:1d:10:
3a:85:e3:de:c9:9e:b6:a1:6c:45:a5:64:9a:4a:a1:
1e:c2:dc:ec:87:0c:73:22:2b:bc:a0:63:4c:f1:af:
46:9e:d2:07:54:0f:97:e3:35:ec:1c:1d:9c:17:59:
d8:16:e1:ca:65:c8:22:c3:35:61:71:df:e0:83:0f:
61:d6:4f:90:38:b5:9c:c3:4d:cc:cc:b2:32:fd:dc:
05:1f:1c:6b:a7:bb:40:e3:24:ac:08:15:75:39:a0:
a8:07:b1:5d:0f:aa:00:07:b2:c5:e3:69:c4:ed:19:
7a:17:52:69:8f:86:b7:d1:e6:ca:70:6a:b4:19:e5:
08:ca:10:e3:86:5d:b5:6f:a9:62:19:b6:10:5e:ab:
3d:83:22:8e:e2:48:52:4d:de:0c:be:19:64:88:de:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:AB:47:3E:A7:F1:C1:FA:70:76:08:26:0B:07:D2:1B:DC:63:C0:71
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:04:a2:51:59:bd:12:35:bf:d8:37:ff:a0:dc:cf:e0:cc:b9:
09:05:5a:83:09:14:03:3b:a0:54:0e:5c:39:f3:b4:f6:b0:fe:
72:21:bf:b5:89:c0:32:d5:34:01:04:4c:8d:21:32:c1:fd:20:
d3:08:37:ad:1e:ea:65:79:c5:2b:2a:69:12:57:5b:e0:88:14:
cd:31:c0:c7:1c:22:44:7c:c3:50:20:04:ed:f5:79:53:5f:26:
54:69:fd:79:51:17:b8:9e:89:c0:dd:13:a1:10:79:f5:5f:cf:
c9:b5:31:f4:5b:8e:54:c8:14:0e:3d:fd:d2:b3:75:42:70:89:
67:b2:ce:64:5d:80:04:06:ca:c5:e9:22:e3:bb:93:85:bc:bd:
9e:c0:32:af:70:d1:a2:bf:3e:20:51:ae:1f:49:7f:24:0c:84:
39:fd:54:6e:76:e4:15:aa:36:24:ed:bd:0b:98:8d:a6:30:fc:
da:91:c0:dc:ec:07:ce:4a:6d:aa:33:ba:c8:96:94:90:50:c5:
06:21:13:72:99:14:79:20:9d:2f:1f:0a:f4:bd:0c:a9:aa:48:
c4:3d:88:18:25:ab:08:62:d7:76:c9:5b:c0:86:02:d2:0e:6d:
93:4b:9c:68:18:3e:59:2b:d4:59:eb:fa:3d:3b:1b:25:54:6a:
3d:5b:cf:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 10:15:18 2025 by rpki-client