Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
File: KygwYXxDyMvImvPLKnTqXdAP5uo.mft (raw, json)
Hash identifier: FFQmNUdlForpFtX11A+KWqByYQu8kcAefs/jFVKmw4M=
Subject key identifier: 0A:41:00:FC:CD:36:10:69:FE:C3:93:46:41:28:84:71:86:BE:3C:22
Authority key identifier: 2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
Certificate issuer: /CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Certificate serial: 019651C96C3B18B6DF7E046B4F8BF402ED71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
Manifest number: 0E3E
Signing time: Sun 20 Apr 2025 06:01:17 +0000
Manifest this update: Sun 20 Apr 2025 06:01:17 +0000
Manifest next update: Mon 21 Apr 2025 06:01:17 +0000
Files and hashes: 1: KygwYXxDyMvImvPLKnTqXdAP5uo.crl (hash: gPcF0YP2fIAQzReVjAGTV4pf0YNfIhAcLmzS7jyvZXM=)
2: VH29zUdUoDMFkb4I3pkZNKsYstE.roa (hash: 1yNsQGwt5wFqKyahcKf4KUa3JWkLXkh+qcfoDSK2Rlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:6c:3b:18:b6:df:7e:04:6b:4f:8b:f4:02:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2830617c43c8cbc89af3cb2a74ea5dd00fe6ea
Validity
Not Before: Apr 20 06:01:17 2025 GMT
Not After : Apr 21 06:01:17 2025 GMT
Subject: CN=0a4100fccd361069fec393464128847186be3c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:b1:61:a7:1f:78:ac:59:b6:21:ef:a7:39:
1f:63:a3:66:73:ed:1a:ec:06:52:33:30:d1:1e:f5:
bc:23:0a:97:65:82:65:6c:28:9d:4c:85:f5:8a:c1:
34:9c:09:81:76:9b:42:4f:99:bb:fa:18:c5:99:8d:
ce:9a:02:e7:39:49:14:9a:74:b9:ac:c8:84:1f:d8:
ec:18:9d:f9:53:4a:9d:f2:62:de:f0:b3:09:3d:3b:
2f:73:31:09:54:ba:59:7b:ac:0e:b3:ec:82:f9:41:
f7:f1:ce:52:cb:f6:63:06:b9:f3:1a:c3:7b:6f:e9:
7c:cf:00:db:04:42:18:ed:a9:27:bd:1c:dc:00:bf:
3d:8a:0b:dd:df:3c:3a:d3:4f:af:f5:bc:68:cb:f6:
5c:fc:dd:9d:73:51:8b:2c:47:22:21:8c:39:14:36:
01:8e:8f:a4:2a:b3:0a:9f:17:b1:ee:b3:fc:df:ee:
b3:46:3b:09:d7:e0:fe:65:16:44:89:26:bd:e6:c0:
79:db:e9:52:74:df:f5:41:30:af:a0:8b:32:8e:05:
9d:df:42:13:cc:c5:c8:b0:93:67:79:47:a9:1d:f4:
67:98:d7:77:50:ba:3d:cb:9b:53:0a:e7:4a:37:15:
1c:d3:08:c3:8f:a4:79:39:bc:92:30:c2:9e:a8:a1:
a4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:41:00:FC:CD:36:10:69:FE:C3:93:46:41:28:84:71:86:BE:3C:22
X509v3 Authority Key Identifier:
keyid:2B:28:30:61:7C:43:C8:CB:C8:9A:F3:CB:2A:74:EA:5D:D0:0F:E6:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KygwYXxDyMvImvPLKnTqXdAP5uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/c9ee8c-574d-4cf6-a008-11b52c24a112/1/KygwYXxDyMvImvPLKnTqXdAP5uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:2d:bf:3c:80:bb:1e:47:75:62:f9:eb:60:39:a9:eb:8e:fc:
18:34:d0:68:27:87:76:b0:6f:6f:f7:4f:f1:a8:d6:80:cd:76:
09:81:6e:8a:4c:0b:f6:71:af:70:51:51:db:f0:d5:b9:38:ca:
46:9b:d5:b7:9e:fe:ff:f8:27:d3:15:29:29:30:12:67:c5:46:
90:ff:d1:f6:ed:36:52:32:c8:0c:a4:43:9f:2a:8d:91:95:5a:
0f:34:fc:eb:6c:76:81:72:ed:2e:b5:f9:97:b9:20:e0:a6:20:
b1:bf:40:34:ad:7d:38:89:b8:09:0d:e4:e5:2e:7f:77:06:fa:
b9:1b:9e:23:b7:60:d7:33:53:d1:6d:43:04:cf:a8:71:44:55:
8d:ea:73:56:32:66:31:71:ce:0e:b6:9c:24:d5:f0:d5:f9:d7:
a2:72:64:f4:ac:c4:af:f7:4a:7f:a2:3f:25:35:d3:c4:e7:a4:
ff:ff:94:ee:5a:04:f9:c2:72:01:89:98:ee:7d:32:89:9a:47:
8b:a8:5b:08:bd:41:12:d2:e8:32:fa:cd:03:6e:2e:cd:b5:57:
8f:7c:e0:49:f2:cd:52:1c:d1:ad:70:34:b0:51:98:fb:ee:8a:
dd:ff:6f:7e:3a:ed:74:cc:aa:8f:9a:5f:b9:61:56:1f:45:c5:
90:1e:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:10:10 2025 by rpki-client