Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: Ktn+Lrl0Ti7XyfgIShgzM8co8sueCdWYFyx8Mp+YAP8=
Subject key identifier: E0:3D:89:05:0F:72:D5:10:A8:41:B8:01:67:D1:58:5F:28:05:66:6E
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 0196534A5B945B4A78F9ED6CF146A5C765B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 13D6
Signing time: Sun 20 Apr 2025 13:01:44 +0000
Manifest this update: Sun 20 Apr 2025 13:01:44 +0000
Manifest next update: Mon 21 Apr 2025 13:01:44 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: ZPRAyqfLXwGXlpBTQgtA1k0N+lKf0jUdbnxLwM6B6s4=)
2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:4a:5b:94:5b:4a:78:f9:ed:6c:f1:46:a5:c7:65:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Apr 20 13:01:44 2025 GMT
Not After : Apr 21 13:01:44 2025 GMT
Subject: CN=e03d89050f72d510a841b80167d1585f2805666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:c0:f7:6c:1b:c0:22:74:91:dd:30:3a:84:
da:b0:e4:7a:24:b2:83:65:9d:35:f4:8d:af:28:17:
9f:f9:38:07:26:b6:87:11:34:f0:91:28:c8:ca:ea:
3c:70:cb:db:b0:61:93:9e:77:6d:a9:da:49:d8:7e:
07:b9:d5:6b:bc:5c:3b:a4:92:c8:ff:e5:73:98:a3:
b1:1d:8a:9e:91:bf:38:bf:78:5c:13:63:f1:9e:7f:
70:a3:df:5b:d1:31:55:52:75:a1:84:7c:e4:bb:c0:
a4:34:6f:a6:33:90:1c:40:14:0a:9c:23:53:3c:96:
75:b7:bb:86:71:46:73:d1:8e:05:a4:ca:fc:27:0e:
05:57:91:6a:56:4d:b7:97:97:e3:44:be:6f:55:78:
55:6c:d5:53:2c:40:e9:36:73:42:c3:13:4c:ad:ac:
45:ba:ec:1d:f3:44:44:b1:c3:fa:53:f7:a1:6c:a6:
a6:bc:ee:1f:fd:1f:ea:1d:75:65:17:51:b4:d6:88:
07:2d:0d:3f:f3:e3:49:4b:62:ca:8a:bd:3d:83:06:
90:f2:6d:e3:f9:ed:53:0e:f4:54:15:41:e8:8c:f4:
2c:a4:0a:b2:50:ad:eb:30:bc:77:8f:e4:64:6e:31:
f3:c7:1e:be:17:a0:5e:a6:f9:a2:92:40:9e:e8:0c:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:3D:89:05:0F:72:D5:10:A8:41:B8:01:67:D1:58:5F:28:05:66:6E
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:19:32:98:46:ff:3c:32:5e:77:55:7e:95:86:83:7e:90:52:
3d:3a:91:c9:a1:8c:4d:35:3d:0a:6f:c0:98:37:62:44:4d:68:
ca:3f:cc:8f:5b:f0:ad:18:bf:16:e2:85:5b:4f:04:14:17:d1:
1a:5e:15:19:de:c5:43:7c:e7:77:2d:ce:48:f4:6c:e0:5c:ec:
48:e6:03:7b:ec:66:a0:fa:b7:56:b5:60:1e:34:7d:72:ee:e1:
c1:dc:3a:6e:42:c9:a6:ee:40:f0:c9:57:e4:5e:53:ea:a7:d7:
13:be:ad:e6:62:2b:94:3c:d5:8d:59:f8:21:71:38:79:8d:2e:
32:2e:2f:b5:30:f1:ff:cd:f7:d1:45:a6:9b:d1:3c:16:35:4d:
f5:00:86:0c:fa:16:db:be:a0:56:eb:a1:34:63:d5:c5:ce:35:
94:72:dd:0e:6d:0c:f7:e0:ac:a9:71:c0:90:99:18:45:05:bb:
f1:29:07:8a:35:cc:34:3b:1b:bc:48:e2:d3:57:99:d3:8e:da:
bc:ba:d3:64:8b:cb:5b:46:1f:fc:1e:9b:61:b2:cc:57:f9:d5:
13:42:76:51:04:1d:1f:98:50:c3:75:c3:ab:ec:ee:62:42:26:
ff:b1:e9:df:b3:cd:c5:0e:ea:01:79:f8:67:9c:80:79:9b:e8:
52:59:d3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:10:30 2025 by rpki-client