Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: B1YFO3U9hdZcOdku75QWsohF+OFPD3yEXowE6Q3DdVI=
Subject key identifier: 1B:3A:AB:F1:7A:31:19:AB:7D:7C:7B:7D:E7:64:E7:A7:02:85:AE:FB
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 019652DBA071765A400F6FCDA4BE9A806FA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 14FA
Signing time: Sun 20 Apr 2025 11:00:47 +0000
Manifest this update: Sun 20 Apr 2025 11:00:47 +0000
Manifest next update: Mon 21 Apr 2025 11:00:47 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: smSyXg2KqjupJJqpA6lr1d3kUP40qg5+jqBkH/DG7kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:52:db:a0:71:76:5a:40:0f:6f:cd:a4:be:9a:80:6f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: Apr 20 11:00:47 2025 GMT
Not After : Apr 21 11:00:47 2025 GMT
Subject: CN=1b3aabf17a3119ab7d7c7b7de764e7a70285aefb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:5d:81:ca:c4:20:7f:72:6c:45:3e:1a:74:
a2:b4:fb:bc:ad:dd:0b:35:7d:93:b8:fa:82:3b:f5:
b9:c8:51:ff:26:24:6d:d9:1c:e7:38:4c:70:db:03:
5b:96:01:4c:e8:94:5a:01:c7:7a:3d:55:b7:d0:90:
62:1e:9e:59:ab:9b:94:69:54:4a:cf:a1:a7:56:38:
f7:e9:a3:0d:59:21:3f:8a:7e:4f:b4:f0:45:2a:8c:
80:88:b5:9d:47:8f:c4:30:a2:71:ee:8f:84:db:1f:
d5:16:b7:c3:c8:b3:36:21:6f:6d:b4:60:41:46:26:
34:75:03:4c:75:6a:59:94:50:10:44:5a:9f:e0:fc:
af:d4:87:e7:25:a4:7e:7c:cf:d0:35:1c:f8:a5:1a:
f7:10:5b:93:ca:f0:c9:37:d3:99:94:19:bc:64:56:
89:72:22:5e:25:12:c9:ae:00:8e:31:21:e8:aa:bf:
17:1f:43:5c:c6:09:e6:aa:41:c6:48:0b:ef:91:5d:
09:16:d5:fe:0e:7a:a7:44:34:6a:f0:7a:fa:b9:1d:
f2:2e:71:33:1a:07:25:b8:71:18:80:e5:47:ba:61:
9f:05:d3:e8:fa:37:3e:50:9e:76:32:aa:09:01:97:
70:6a:67:d7:97:bc:5b:58:b4:7d:9d:52:8d:32:ed:
31:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3A:AB:F1:7A:31:19:AB:7D:7C:7B:7D:E7:64:E7:A7:02:85:AE:FB
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:03:53:2c:72:60:a4:a0:33:7f:d1:f6:ec:04:9f:ce:c6:7d:
43:73:b3:9a:8d:a2:68:49:59:e3:8c:e6:5d:fb:10:62:9f:23:
70:ed:5c:c8:c7:f8:fa:e5:3c:ff:66:23:3d:94:bb:6e:71:55:
04:68:f1:b7:4c:7e:7b:58:0e:77:f7:62:92:2f:cb:74:14:6c:
5f:c9:9a:e4:56:0c:a6:06:6d:6c:6b:ce:f7:13:15:fc:cd:36:
b4:57:1a:0c:56:2c:8f:f4:86:04:97:9a:f1:e0:a1:4e:53:fa:
52:fc:84:be:5b:c4:88:12:7a:f2:2b:70:54:37:12:74:1c:93:
c7:01:fa:74:71:07:c9:8a:8e:70:1b:d0:18:04:12:41:f1:27:
38:3f:db:56:de:e0:15:ea:d0:4c:6b:38:8c:34:ec:bb:82:31:
ca:bc:0a:2c:d6:dd:12:e6:23:4c:37:98:00:01:34:a3:f3:cd:
91:d5:cb:88:1e:ea:0a:c5:b3:85:e1:fb:7b:8f:44:43:da:2e:
c3:42:a5:ba:00:b7:47:b8:f5:70:86:77:da:0a:f5:65:33:56:
e1:79:fb:e7:3d:65:49:e6:15:87:30:e9:33:1a:d4:1c:f3:f6:
cc:a0:0a:ca:4b:7d:3e:e5:52:d0:15:09:fd:52:8a:41:47:a2:
e3:7b:4d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:18:52 2025 by rpki-client