Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: sGJc5Ad8Q4Q2PJJWE1TUhC0JDAloTNsIhiJftv0PChY=
Subject key identifier: 30:CF:D0:03:41:A4:6B:72:ED:4A:C7:4C:D8:AA:98:B8:8D:DE:6B:89
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 01964B903971345EE37BEDAD60F9D24EF73C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 11C5
Signing time: Sat 19 Apr 2025 01:01:05 +0000
Manifest this update: Sat 19 Apr 2025 01:01:05 +0000
Manifest next update: Sun 20 Apr 2025 01:01:05 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: E4MGnp6wBkLmxE+Y/IwXWv3MAMLfrmxfi2mfZxPvBps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 01:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:90:39:71:34:5e:e3:7b:ed:ad:60:f9:d2:4e:f7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Apr 19 01:01:05 2025 GMT
Not After : Apr 20 01:01:05 2025 GMT
Subject: CN=30cfd00341a46b72ed4ac74cd8aa98b88dde6b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1e:15:38:b6:c5:a9:9f:74:2b:b8:cb:6f:68:
af:5f:68:8b:2e:11:92:c9:25:54:5c:c9:aa:db:88:
f0:e9:5e:20:ec:a6:89:52:a2:a7:61:15:52:27:79:
10:bb:40:85:01:bd:b5:78:dc:05:7d:f6:30:d1:7c:
f5:d4:ac:e6:aa:83:a4:e5:0d:bf:70:87:98:3c:10:
fe:48:cc:c0:79:15:af:69:5d:ae:81:43:4e:12:e5:
4b:b0:42:93:54:40:ed:43:3d:4a:86:01:bd:c8:98:
91:99:86:99:60:ff:fc:3b:0c:2a:6e:1d:93:c0:91:
9b:8c:a6:91:55:f5:1c:b7:fc:0f:4b:4f:2a:bf:5e:
f6:8a:d9:64:a7:c1:db:28:83:69:5c:cf:c2:9f:65:
73:30:9e:1f:c3:aa:88:d7:97:c1:92:e9:6e:2c:d4:
cf:a4:4a:7f:a9:81:45:72:00:30:5a:c8:ba:81:d2:
23:0c:c3:b2:74:6b:d1:64:d5:6d:d4:e1:55:1f:da:
96:7b:56:84:6c:b7:97:eb:e8:f8:8d:cf:4a:44:60:
cd:2e:1b:5b:c9:e5:eb:02:2d:9c:ca:6d:93:ae:f8:
4b:7f:45:f1:c6:02:59:13:02:67:49:b5:5c:a2:2d:
7a:40:03:2a:a5:4e:b9:81:52:06:83:b7:fb:14:c1:
1f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:CF:D0:03:41:A4:6B:72:ED:4A:C7:4C:D8:AA:98:B8:8D:DE:6B:89
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cb:96:22:8a:70:fe:5b:03:15:a6:ef:5d:c3:69:79:08:24:
d4:21:5d:e3:48:6e:e1:ff:1b:3a:5f:c2:2f:0f:07:41:44:87:
a4:93:ef:39:a2:d2:af:8c:00:e6:b6:33:42:32:aa:fb:25:c0:
4d:62:a4:fa:74:0e:88:f5:ab:33:55:44:f1:66:fc:4a:ff:53:
33:9f:7f:00:78:c1:fa:c9:31:a9:c1:4c:d9:b2:92:be:f6:0c:
6a:31:df:aa:69:33:47:78:75:30:d4:f5:a5:6e:0e:9a:a4:be:
3f:48:1c:99:72:5d:33:8b:c1:85:b2:aa:80:ac:f0:81:d8:7f:
2d:f2:76:18:9d:0c:99:6a:4d:04:34:91:48:b4:65:e4:80:16:
bd:1b:10:c9:4e:87:86:c7:d7:7b:b6:34:da:1c:64:a9:ed:94:
6d:50:b2:28:da:f0:f7:09:56:1b:3a:75:db:99:9e:fa:39:5c:
4c:ba:24:cb:5e:be:5a:97:6c:3b:81:09:dc:6c:a4:86:06:a9:
2d:4b:f0:24:05:cc:44:fb:df:36:86:0a:41:d9:82:66:eb:22:
f1:61:ce:37:86:60:9f:64:9e:84:3f:5d:72:4e:41:7a:9e:5f:
0e:61:10:06:aa:21:40:14:52:c6:a7:1d:e9:55:c4:d6:8d:4f:
60:31:e8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 11:30:30 2025 by rpki-client