Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: Tp/BOKh87AN1LQKGDSOyTCruTmJjRlkH3aieYLmuNdg=
Subject key identifier: 90:14:0D:AF:19:B2:A1:71:98:2F:1C:CE:A5:42:DD:5D:67:64:3C:23
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 01964821594F0D3F5D475E78A00CB9CA029E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0BB4
Signing time: Fri 18 Apr 2025 09:01:07 +0000
Manifest this update: Fri 18 Apr 2025 09:01:07 +0000
Manifest next update: Sat 19 Apr 2025 09:01:07 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: 4BoOfOVpek4kqe9BnYJuGuCrRNKM7Jz8EZN9ePmhM/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:48:21:59:4f:0d:3f:5d:47:5e:78:a0:0c:b9:ca:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Apr 18 09:01:07 2025 GMT
Not After : Apr 19 09:01:07 2025 GMT
Subject: CN=90140daf19b2a171982f1ccea542dd5d67643c23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fa:1a:e2:f3:91:58:e1:94:b8:9a:bc:e5:a7:
4a:bb:8c:f3:0e:04:46:94:ab:74:32:ae:66:1e:fa:
47:2a:3b:ab:fb:af:fc:61:5a:51:86:0a:e7:51:95:
7d:6e:c6:5c:a4:6f:67:d7:cb:30:35:30:b0:46:a9:
38:0b:ef:30:d1:b2:de:f5:1e:e4:06:4d:af:f3:6b:
bb:33:12:ed:21:d1:f3:9a:cb:2b:fc:6e:75:78:5f:
a6:da:d6:f0:11:6d:a4:ad:87:ac:10:ce:d3:41:8b:
3e:1b:ab:59:62:95:4f:af:8f:b7:91:ec:83:58:65:
18:44:59:f7:c5:3b:c0:3c:3e:3b:ba:73:5b:33:b3:
74:06:52:3b:96:32:85:b7:a8:29:d2:81:6c:32:ad:
3a:ce:2e:91:8e:43:b6:dd:13:49:e8:00:98:cf:51:
b1:8b:a9:08:91:44:0e:79:b5:2c:8b:35:24:ba:70:
e5:75:16:69:b3:bb:be:68:a3:62:57:42:5e:53:18:
49:90:ed:b7:71:60:3c:f5:8d:f0:36:90:6d:00:ab:
4d:a3:7c:40:b3:be:16:d9:48:d3:5d:40:49:b1:d0:
c6:97:f8:43:48:8c:75:cf:40:5a:f7:68:3b:43:cd:
69:2a:2a:cf:9a:38:25:50:02:2c:4d:34:35:af:5e:
8b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:14:0D:AF:19:B2:A1:71:98:2F:1C:CE:A5:42:DD:5D:67:64:3C:23
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e0:94:c7:15:42:e2:5a:a4:72:e9:39:63:39:d2:93:24:b4:
b5:c3:4b:cc:69:83:7f:86:2d:f2:f2:11:1e:2e:2f:f0:f6:ad:
5b:d2:f1:fe:5d:cf:21:fb:24:2d:d3:0c:a2:8b:07:13:e6:7c:
40:b7:e8:94:74:ca:74:f2:bb:d2:e2:04:c1:26:63:14:75:e5:
c4:66:71:fb:b3:a2:7c:29:26:2b:dc:55:50:0c:e8:40:5e:28:
2b:07:22:79:95:08:b6:8c:15:7c:35:91:85:91:88:d7:16:cf:
95:90:67:fc:bd:a6:4d:c7:2c:f3:a5:b3:98:0a:bc:07:f8:c0:
7c:14:cc:fb:40:22:90:e3:bb:f9:6f:50:8d:88:cd:1d:6e:1c:
84:27:91:98:ce:82:aa:bd:d7:c9:c8:5b:f3:a5:cd:d9:3d:6f:
37:11:ba:91:2f:41:d5:66:fb:81:54:41:94:96:41:6d:20:67:
0a:83:29:be:f5:61:ac:96:ea:d9:ad:a1:81:04:62:28:06:c6:
81:9b:93:a7:a0:f8:9c:d8:4a:a1:15:29:9e:c5:57:5b:2c:38:
e5:12:3b:cd:9f:9c:0d:88:14:43:cc:f5:33:e2:bd:c8:76:63:
7d:b5:0a:3f:db:e0:bb:13:fb:86:bb:df:b8:1f:44:cb:a0:57:
cb:ac:c1:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:19:32 2025 by rpki-client