Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
File: K328XveedAIoXs2gg3ukvyGHYdw.mft (raw, json)
Hash identifier: N3HVSVDUblLL7djUKCdTNXjsMCYbkNDWhAqaTLBcuT8=
Subject key identifier: 48:08:CF:94:C5:12:CF:7C:94:0F:C4:0B:25:C0:58:43:92:26:98:53
Authority key identifier: 2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
Certificate issuer: /CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Certificate serial: 019652A47D9E82BAA6D65E5620F6F70A3E77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
Manifest number: 0D12
Signing time: Sun 20 Apr 2025 10:00:33 +0000
Manifest this update: Sun 20 Apr 2025 10:00:33 +0000
Manifest next update: Mon 21 Apr 2025 10:00:33 +0000
Files and hashes: 1: K328XveedAIoXs2gg3ukvyGHYdw.crl (hash: 2MoMNVgLOnTrV7g61n1LZkTANRh1lj3g0j0Q69Uk8NE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:a4:7d:9e:82:ba:a6:d6:5e:56:20:f6:f7:0a:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b7dbc5ef79e7402285ecda0837ba4bf218761dc
Validity
Not Before: Apr 20 10:00:33 2025 GMT
Not After : Apr 21 10:00:33 2025 GMT
Subject: CN=4808cf94c512cf7c940fc40b25c0584392269853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:c0:44:45:d8:2a:e2:4a:e1:1a:e8:2c:43:
f5:f8:08:10:4b:46:da:a4:4a:cb:76:e3:33:23:0b:
8a:98:02:b4:00:50:1e:e2:15:05:41:1d:f5:e7:d8:
43:fa:31:dc:12:27:50:6d:6d:e7:7b:d1:5c:31:60:
bb:db:cb:5d:88:7f:cc:88:b0:14:fa:33:a3:8b:6d:
be:d9:fa:aa:b0:4e:6d:a1:44:72:2c:03:a9:82:18:
ec:9b:80:57:5d:79:cd:86:89:11:db:55:57:dc:f6:
29:ca:cd:bc:4d:63:d9:4b:45:05:24:54:cc:9f:2b:
cc:59:ab:eb:12:32:29:15:56:92:76:a4:44:cd:58:
0d:5a:d0:53:d7:eb:be:46:fe:59:aa:31:55:78:3a:
4f:7d:d1:4e:9e:38:23:14:24:ea:c8:ec:bf:1e:97:
b6:c7:33:a7:f0:9d:27:71:a7:6e:a6:1f:79:04:b6:
d6:18:f6:b2:06:4a:54:82:4c:bd:81:ba:fe:74:d9:
86:74:ff:8e:be:78:c6:bb:d1:11:f1:bc:38:5a:6e:
3e:13:91:85:42:e4:81:15:4a:9b:3d:70:3a:ab:cb:
d0:da:db:8f:88:f3:ed:0a:9d:ce:e0:d9:ba:c2:4a:
6c:72:84:d2:16:61:ef:dd:19:7b:1c:f3:92:93:fc:
e3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:08:CF:94:C5:12:CF:7C:94:0F:C4:0B:25:C0:58:43:92:26:98:53
X509v3 Authority Key Identifier:
keyid:2B:7D:BC:5E:F7:9E:74:02:28:5E:CD:A0:83:7B:A4:BF:21:87:61:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K328XveedAIoXs2gg3ukvyGHYdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/d10d4d-a2c0-4d20-8a21-24d0e62f79c0/1/K328XveedAIoXs2gg3ukvyGHYdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:18:91:3c:cc:c6:11:7b:72:5f:72:58:27:e9:fd:bf:28:
e8:18:b6:03:0a:d5:57:8f:4a:38:a6:3d:0d:aa:0a:97:c9:75:
d8:b5:94:04:ac:02:97:2a:a3:e8:03:7f:80:ad:17:9d:c1:ff:
3b:21:fd:4f:75:d6:92:7b:bd:f8:0a:ae:e6:0e:29:ed:d3:2d:
aa:3e:4c:7f:e2:80:9c:93:70:8b:cf:dd:ae:4b:36:c4:0c:6d:
cf:26:94:78:0f:40:37:fb:96:e4:81:3a:54:0d:cb:70:8b:f3:
d5:99:22:77:0e:b2:1e:91:b8:68:80:75:02:ed:1b:a7:50:37:
93:6d:be:f3:2a:68:7e:53:e6:06:4a:20:a2:f8:45:94:d5:ed:
4e:36:af:d2:64:85:2b:23:34:6f:50:4d:1a:10:c5:fb:75:2e:
fc:a4:be:0c:11:10:6b:9b:b5:f6:dc:a1:c4:31:5b:ad:3b:e1:
4b:bf:0c:8a:6e:07:af:22:07:3d:2f:b4:f2:24:6a:85:b5:61:
dc:3c:a7:e2:c0:be:fa:ed:70:21:2d:95:05:1a:8d:61:8d:e4:
9c:a7:0e:ec:68:56:42:aa:14:64:fa:84:ef:43:9e:aa:d2:ef:
95:65:14:60:ec:0d:a5:15:9e:42:a8:2a:03:ee:2d:6b:6f:9a:
5e:14:76:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:46 2025 by rpki-client