Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: S1Vd/BkJunXOBIzYiiBFqQM5aoezwLWaR27Q9dC/r8M=
Subject key identifier: 50:7B:FA:9A:F1:9D:16:DE:44:08:16:EF:4B:F8:F8:BA:57:F2:9B:95
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 01963E422114D3BC2EF7028EA28E3A31A7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 1483
Signing time: Wed 16 Apr 2025 11:00:43 +0000
Manifest this update: Wed 16 Apr 2025 11:00:43 +0000
Manifest next update: Thu 17 Apr 2025 11:00:43 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: ZjRsqaz5SLTPLC02H+sPYsI51ttmkmwnhISDf+UIeJ4=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:42:21:14:d3:bc:2e:f7:02:8e:a2:8e:3a:31:a7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Apr 16 11:00:43 2025 GMT
Not After : Apr 17 11:00:43 2025 GMT
Subject: CN=507bfa9af19d16de440816ef4bf8f8ba57f29b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:09:43:8a:1d:d0:89:0c:13:d1:bc:5d:dd:
06:66:97:eb:1c:6d:1e:8e:45:8f:45:8c:a8:3f:d5:
e9:8b:32:94:18:4c:9f:e7:a8:59:59:10:e0:6c:8f:
ab:ae:fb:0d:63:39:c8:2e:29:cc:08:c4:3e:bc:a7:
77:bc:ef:59:ce:1d:db:45:94:e5:13:ad:a0:59:a5:
7d:38:c3:7b:b3:c9:b7:74:6a:9b:63:af:e6:70:9b:
cc:c7:72:25:01:6c:77:88:7d:42:17:7a:d9:6f:7d:
ea:0e:f9:29:26:13:6b:f0:c2:a0:f8:13:16:7f:f9:
36:61:cf:08:9a:73:fa:9c:03:e8:57:c8:07:8f:2e:
a8:75:05:d0:fe:97:d8:15:11:73:2a:e0:58:6b:e0:
ec:75:dc:53:52:01:68:64:34:ed:29:ba:a0:00:e7:
e5:df:ac:b2:40:4d:21:71:96:21:bb:d4:14:f5:a3:
b8:19:f8:2d:4c:25:75:fb:64:87:b7:b2:d6:b2:46:
c9:62:60:a2:20:67:7a:5b:97:48:59:bf:1d:54:d9:
41:70:c4:bb:3d:8d:f7:16:18:3a:7b:07:9c:a8:89:
12:ad:0a:07:07:6e:f7:9d:b4:0a:f5:08:15:a4:78:
d0:ad:4f:1d:6c:56:23:df:e5:a9:1f:6c:90:3e:54:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:7B:FA:9A:F1:9D:16:DE:44:08:16:EF:4B:F8:F8:BA:57:F2:9B:95
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:e6:fe:8e:1d:50:e4:59:2c:19:4c:6c:c8:41:16:9b:0c:43:
9d:5a:b3:eb:99:00:ff:52:a3:c8:d9:7c:ce:3c:ec:17:37:84:
6d:4d:d7:5c:5a:13:19:06:b7:e2:57:05:96:33:a3:4a:11:33:
fd:70:8e:d2:a5:0a:46:50:5c:e9:91:b1:cb:6f:ec:9e:d6:a9:
d3:3c:69:8f:13:60:8f:e7:c4:9a:90:2a:a4:de:18:43:36:b2:
16:fb:46:62:79:f6:7d:e1:71:6c:1e:96:91:9e:9a:3f:e5:00:
12:79:39:90:40:62:1a:94:21:e4:f1:30:23:b0:8d:a1:f6:8e:
c9:9f:d1:6c:8d:7d:29:1d:bf:95:ea:10:54:50:03:4b:16:a5:
df:d4:9a:33:ff:e0:b6:77:f7:da:61:8f:c7:1b:b0:4e:60:b4:
ce:53:c8:46:ad:67:19:cb:1b:68:2e:d2:5a:a1:6d:98:97:5a:
3d:72:7a:f4:f2:43:14:62:00:5e:8f:21:d1:5a:00:49:c4:3e:
f8:69:da:45:b3:2c:8a:24:1b:33:ee:99:97:58:45:50:98:5b:
53:f8:7c:13:56:ce:39:ce:e2:06:95:2b:c4:04:a5:46:03:9c:
3e:53:a9:32:b5:10:ab:57:98:62:a0:a7:64:00:4f:00:fe:5a:
46:9e:cc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:15:47 2025 by rpki-client