Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
File: K8wc-LjiEGa27GR2l9SUXY-bsFs.mft (raw, json)
Hash identifier: K8zC+3pXUtyCp7CrIXJnjMoCVNurgxYrp2b96ofWKLg=
Subject key identifier: CF:7C:37:00:27:4A:A4:58:88:E4:61:AC:BD:D3:92:2E:03:01:CF:60
Authority key identifier: 2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
Certificate issuer: /CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Certificate serial: 0195F8182E5F85B8A42B4651B03199ECCDBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
Manifest number: 1074
Signing time: Wed 02 Apr 2025 20:01:29 +0000
Manifest this update: Wed 02 Apr 2025 20:01:29 +0000
Manifest next update: Thu 03 Apr 2025 20:01:29 +0000
Files and hashes: 1: 1-RD7DNOHCxhrIr1TSToj6urkCEM.roa (hash: YBfKNkThqc59/HOjNrqRSuRrZh5t6Vr9bzlwHzZcB5M=)
2: K8wc-LjiEGa27GR2l9SUXY-bsFs.crl (hash: ux7YojwxTfoN/tb2hmWWdLUs0zs9VayVv3powNdT67A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Apr 2025 18:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f8:18:2e:5f:85:b8:a4:2b:46:51:b0:31:99:ec:cd:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bcc1cf8b8e21066b6ec647697d4945d8f9bb05b
Validity
Not Before: Apr 2 20:01:29 2025 GMT
Not After : Apr 3 20:01:29 2025 GMT
Subject: CN=cf7c3700274aa45888e461acbdd3922e0301cf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:29:83:a6:4b:79:0b:9f:bf:88:39:d2:12:74:
6b:f6:85:f0:25:9b:db:54:eb:67:a6:c7:70:eb:6a:
20:50:d7:4a:41:8d:0c:ab:5e:da:b5:9a:6a:4c:d4:
cb:e3:5e:32:08:bc:80:84:14:f2:04:a6:a1:6c:2f:
35:e4:0d:67:97:f6:6e:83:36:21:79:b3:66:70:6b:
37:9f:a5:f0:e6:a9:dd:52:36:5f:15:f0:a5:ec:2e:
7f:5d:28:ad:99:b2:41:88:6b:a9:d6:a9:d2:99:67:
f9:77:f9:73:de:1c:a7:f8:25:8c:66:02:1f:13:0e:
0d:89:4e:49:6a:53:42:f3:b2:34:cf:e9:92:12:4a:
e7:16:3e:ea:a3:cc:36:c2:2b:a2:84:2e:7c:d9:59:
33:bc:61:85:b1:20:a8:e5:ba:a5:89:3e:ab:dc:2f:
35:b5:70:98:00:d9:a8:bf:0d:6e:d2:e8:33:69:7b:
5f:a6:fb:23:47:97:74:ea:fb:2f:f8:cf:49:59:d3:
01:1a:e0:9f:8d:c9:e7:6e:0b:17:19:2c:23:85:fd:
cb:34:f2:8f:0d:18:9a:b8:46:72:d3:c6:ab:4f:52:
ef:a1:76:60:7e:34:30:34:dc:89:9a:a2:91:69:c9:
ed:02:40:62:90:cf:3c:0b:06:58:ca:f0:5b:e1:d4:
fa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:7C:37:00:27:4A:A4:58:88:E4:61:AC:BD:D3:92:2E:03:01:CF:60
X509v3 Authority Key Identifier:
keyid:2B:CC:1C:F8:B8:E2:10:66:B6:EC:64:76:97:D4:94:5D:8F:9B:B0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K8wc-LjiEGa27GR2l9SUXY-bsFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/19ac58-c7af-40fd-b2f7-0a7e019899cf/1/K8wc-LjiEGa27GR2l9SUXY-bsFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bc:4b:ff:5d:a3:3b:d1:87:47:3f:e9:c1:fb:05:db:8b:bf:
43:75:91:11:cf:d4:70:3b:c7:00:53:14:d8:55:55:51:e3:6e:
c2:b1:03:c0:25:6b:97:c7:a5:06:73:30:ed:34:8d:58:63:b8:
12:d9:32:ac:7a:fd:35:20:5d:e5:28:f0:12:49:98:26:45:54:
45:59:cb:b0:b8:29:ee:4b:f5:87:25:05:2a:ee:82:63:d0:ea:
74:14:ee:44:5b:ec:b9:2e:04:f9:9b:3d:6d:f5:b5:45:0c:35:
7d:f8:00:28:30:2c:35:30:2a:c5:c5:c1:2c:e0:f0:ce:a2:50:
a4:2f:5a:c7:65:16:55:28:06:fc:00:52:ed:fa:58:77:97:f3:
24:53:c1:e4:05:18:76:d9:97:40:99:14:6d:12:23:9a:d0:72:
69:1e:15:a3:38:9e:9a:d8:a2:cd:3a:d0:ad:d1:da:a0:3f:a9:
9e:87:a1:eb:a3:8a:55:39:30:69:2d:0c:20:ab:11:3f:92:f2:
88:d3:f3:e7:99:76:4e:76:10:e3:ef:4c:6f:0b:c7:37:c7:e9:
cf:de:0d:19:e6:57:b1:f5:a1:c4:e1:d4:d6:ce:26:ce:5d:08:
95:59:46:1e:35:f5:96:f7:9c:d6:b8:ce:de:f1:51:e2:27:9e:
fb:6a:53:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 01:47:23 2025 by rpki-client