Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: iItAVC5RmzZBVXy+QkQQfPayZ8fbtJUF9lbBVWRmPDo=
Subject key identifier: FC:FB:EC:79:01:D5:9B:5B:B1:33:90:7F:2C:8F:30:F8:07:5F:C9:71
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 019646A01BB859FE89BAFAD6C5F55F4F6352
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 14F3
Signing time: Fri 18 Apr 2025 02:00:19 +0000
Manifest this update: Fri 18 Apr 2025 02:00:19 +0000
Manifest next update: Sat 19 Apr 2025 02:00:19 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: 8sK5BBuXicHERl1Csnz0eCt3eTRxzSi4ks+B3bqbJME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:a0:1b:b8:59:fe:89:ba:fa:d6:c5:f5:5f:4f:63:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: Apr 18 02:00:19 2025 GMT
Not After : Apr 19 02:00:19 2025 GMT
Subject: CN=fcfbec7901d59b5bb133907f2c8f30f8075fc971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:b2:86:82:d4:e0:98:82:57:05:1e:7b:78:
9f:91:3b:3f:8b:7d:2c:85:0c:8d:36:cd:74:ee:58:
c7:b9:e0:6a:d8:2e:6f:56:f4:8e:b4:c7:8e:9a:2e:
74:8d:8c:e6:72:0a:65:27:7c:ac:69:c8:84:fa:3b:
41:d4:b7:76:e9:c0:dc:e8:c3:00:85:57:e4:bf:16:
f8:29:63:16:1c:44:ce:42:79:0a:71:29:7f:4a:7e:
e9:c0:f8:25:53:d0:a8:47:b8:12:72:2e:22:3f:6c:
59:9e:c1:da:4f:d7:dd:35:1d:e5:14:29:29:cd:9c:
4e:2c:8a:e3:1a:a6:fb:f7:1c:f7:12:d5:88:ba:8c:
ec:29:f8:10:89:75:a2:3e:3c:42:03:8c:f1:65:83:
86:93:91:ea:71:03:71:71:8f:7d:04:59:f4:7c:d7:
9c:8e:a6:da:77:48:e7:cd:0c:0d:3a:f3:71:09:5a:
45:6c:b2:23:fe:5d:03:ce:a6:e2:0a:04:6e:cf:1c:
eb:02:b8:4f:b9:4a:c8:10:e7:28:6d:ff:09:d9:ef:
02:c3:2d:ca:28:f4:d9:52:7c:77:e7:fc:89:12:40:
35:b8:46:33:c0:cf:34:bc:a5:61:d0:7e:1c:24:8f:
22:c4:82:8a:ff:39:ac:b4:f0:d1:0c:3d:82:1d:fc:
c4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:EC:79:01:D5:9B:5B:B1:33:90:7F:2C:8F:30:F8:07:5F:C9:71
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:48:0a:fe:d0:4f:18:07:6d:7b:7c:05:19:40:cd:f4:b0:6f:
9b:1a:f0:63:9b:25:c2:cc:ba:8f:96:2b:a8:9a:e7:af:15:56:
2d:ce:3f:ff:43:6e:7f:1a:c6:ad:4f:cf:f2:af:55:24:76:1f:
10:3d:26:e2:45:c4:d2:5b:70:38:a6:b9:e8:8f:ac:f2:f1:c4:
d5:4f:b8:df:e9:aa:f8:9b:95:ad:f4:ca:cb:09:62:5f:d6:3c:
8e:80:82:c4:00:07:b5:ba:ae:c7:ce:47:c2:0f:ec:30:7e:85:
d6:e7:53:1a:95:10:c0:6d:23:4b:04:1c:14:24:22:09:72:6d:
5b:26:38:9d:41:db:b7:4f:6b:17:b1:de:9e:3a:80:d1:da:1e:
df:d0:54:9e:4e:31:56:13:14:32:48:68:04:04:8a:d5:c4:3e:
b0:4f:18:2b:f6:39:15:81:f2:36:84:69:a7:f7:14:ad:c9:4b:
da:c6:92:77:0f:3f:e0:bb:e9:75:25:a5:93:7f:45:38:14:08:
1f:72:37:5b:fc:3a:4d:58:bd:14:ca:3e:98:85:d5:ee:00:a5:
ba:56:66:1f:1a:77:95:00:d1:80:3a:2a:27:cd:10:bc:fc:b9:
31:c3:7c:33:64:00:3d:e7:d8:76:26:50:50:ba:72:d9:43:eb:
e8:91:0d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:33:53 2025 by rpki-client