Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
File: KYNUhhlzcozivlBfcnCkNk2U5pE.mft (raw, json)
Hash identifier: c2VsbFcrEVHKVj6/iC1WvPgBcKWKNbYKN7aJ3exDDwk=
Subject key identifier: 77:AC:64:4D:07:C3:D8:D0:33:D0:5E:56:39:F1:3A:87:05:3C:D4:94
Authority key identifier: 29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
Certificate issuer: /CN=298354861973728ce2be505f7270a4364d94e691
Certificate serial: 019646A077875F553AA18C8DF038ED12B98D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 02:00:43 +0000
Manifest this update: Fri 18 Apr 2025 02:00:43 +0000
Manifest next update: Sat 19 Apr 2025 02:00:43 +0000
Files and hashes: 1: KYNUhhlzcozivlBfcnCkNk2U5pE.crl (hash: 86KubVHIN59mkIhRHp+omPoiHDcqjvJGQDAoLTjK1cA=)
2: eoUI00v5kHG-99ELxP-BBcjXoAc.roa (hash: wGk7AZgmxRmrZlb/Q0cgAj09IR2rbdkkeiUHejBRKws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:77:87:5f:55:3a:a1:8c:8d:f0:38:ed:12:b9:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298354861973728ce2be505f7270a4364d94e691
Validity
Not Before: Apr 18 02:00:43 2025 GMT
Not After : Apr 19 02:00:43 2025 GMT
Subject: CN=77ac644d07c3d8d033d05e5639f13a87053cd494
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:1f:b6:d7:3d:1a:c4:9a:d2:7b:38:3e:92:be:
9e:6d:24:8d:bc:f4:b6:17:d7:91:b2:f2:e8:f1:24:
6c:3c:c0:fb:ce:0b:d1:fa:cb:69:3a:d6:48:b6:ae:
20:6b:3d:40:71:42:2c:79:55:92:de:e5:4a:dc:02:
54:8f:08:20:80:b6:59:60:f6:04:d5:98:0c:a4:96:
98:02:59:a4:a7:50:1d:42:2a:a4:f5:55:86:98:95:
d9:07:90:aa:c8:fb:03:2c:ab:64:dc:6a:6a:1b:ae:
f1:09:94:b7:bd:c3:42:c6:1f:8b:3e:a0:c6:1c:cf:
5e:a3:21:06:f4:47:e1:2e:fe:4a:ce:de:93:fe:f0:
6b:72:cc:98:c5:d8:65:f6:f2:74:d2:41:59:8f:f2:
1d:25:7e:14:8c:d0:ec:5b:37:e9:68:7e:9b:e1:bb:
59:2d:b2:aa:dc:1b:27:bc:75:ba:ca:9d:40:e0:5a:
4e:96:56:28:af:bb:7f:ae:09:08:d3:42:d3:db:09:
d1:f3:b2:79:9a:a7:72:ff:8b:ce:e1:65:90:16:9f:
b7:98:0d:f4:34:a0:ab:d0:e6:ea:ea:40:af:33:da:
e3:ba:6b:62:06:57:b2:a0:23:fe:0b:96:4e:28:25:
0d:cf:58:ac:99:b8:d2:0a:b4:db:86:42:c1:3a:3a:
c7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:AC:64:4D:07:C3:D8:D0:33:D0:5E:56:39:F1:3A:87:05:3C:D4:94
X509v3 Authority Key Identifier:
keyid:29:83:54:86:19:73:72:8C:E2:BE:50:5F:72:70:A4:36:4D:94:E6:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYNUhhlzcozivlBfcnCkNk2U5pE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a6dcf1-97f4-45af-bb48-3db6f0570d48/1/KYNUhhlzcozivlBfcnCkNk2U5pE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:4b:83:8e:cd:a7:78:57:37:0a:91:08:9f:f7:64:61:20:d5:
af:80:05:f5:93:3b:d3:66:22:9b:d9:ab:95:1b:58:96:6d:b0:
bb:f6:b5:17:21:0e:13:36:d4:d6:7e:1c:24:27:0a:9b:f0:26:
8e:81:df:39:50:99:ea:9c:1b:7a:7c:39:64:db:ec:41:94:09:
22:a7:c7:22:f4:2a:5d:8d:8b:4f:53:a7:d0:96:a6:3e:7e:82:
dd:1e:68:16:68:46:4d:54:d9:a7:3e:d7:c2:18:62:6c:84:b7:
a5:44:69:58:96:99:71:50:08:2f:19:ec:41:a7:d9:4a:85:44:
55:f7:b7:d9:52:96:0c:77:cc:b6:74:be:22:65:41:48:24:f5:
55:97:c0:1c:eb:56:2a:0a:a9:3d:5f:13:3e:72:30:bc:92:57:
a4:4d:cf:b7:6d:68:6a:60:a3:c3:24:66:48:e7:55:35:0d:9c:
5a:92:f0:e6:98:f7:26:96:5c:90:78:82:c2:16:a3:a1:32:3e:
82:22:86:8e:a9:37:c7:d4:66:40:64:08:51:dc:ff:eb:36:a2:
c5:a8:d5:17:bc:5b:1b:71:c6:9f:25:62:6e:f0:ac:1e:21:21:
cd:64:46:26:0e:b7:c3:52:11:e9:10:71:c3:77:ac:7b:78:2b:
36:9b:0a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:46:22 2025 by rpki-client