Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
File: ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft (raw, json)
Hash identifier: iwKV09ZO99Mtppim17dprRmhV1In5Cq5hvOWdWUgvgo=
Subject key identifier: 97:49:C8:D5:DC:33:A1:D1:63:DE:7E:52:36:E4:E7:D9:E1:3B:59:A4
Authority key identifier: 92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
Certificate issuer: /CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Certificate serial: 01958C607342844B7A5584778EABC9C3CA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
Manifest number: 1496
Signing time: Wed 12 Mar 2025 22:01:25 +0000
Manifest this update: Wed 12 Mar 2025 22:01:25 +0000
Manifest next update: Thu 13 Mar 2025 22:01:25 +0000
Files and hashes: 1: ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl (hash: 5K9ZK9mSRceq9R+mH297GqBZR7EM20A1DBBZmk0zkHU=)
2: vIUD6qLiZhlDA8IvWgGD4RFZTgQ.roa (hash: 8f4c2O05sapdQ4wcaKqtNByBFKGfiB5rQ1o7fR58j44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:73:42:84:4b:7a:55:84:77:8e:ab:c9:c3:ca:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92eff6162502ea3b52fd8ca3ae108d13d6bff652
Validity
Not Before: Mar 12 22:01:25 2025 GMT
Not After : Mar 13 22:01:25 2025 GMT
Subject: CN=9749c8d5dc33a1d163de7e5236e4e7d9e13b59a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:65:a7:41:be:4a:b1:9b:97:fa:0b:66:47:90:
e6:25:9e:1a:09:23:52:4e:19:81:96:73:6f:49:fa:
c2:1c:64:71:57:1d:75:0b:c1:3d:58:64:de:51:f7:
9c:c7:39:12:40:fc:ef:50:5b:d7:08:60:99:e5:72:
55:0d:d8:6b:6b:79:6f:5a:eb:aa:a3:82:f0:50:6d:
e0:30:d4:b3:e3:13:dc:4e:d4:b2:cd:2b:80:29:9b:
1f:05:e4:3a:c1:55:e6:8d:e2:e7:01:5e:e7:cf:9e:
4a:14:1d:a3:54:c2:46:18:0b:f2:1a:6f:8f:63:02:
c6:ae:4d:50:55:f6:8e:a3:b1:46:4d:45:47:57:88:
df:ce:1c:da:04:92:e1:93:3b:02:71:89:e9:f2:93:
6b:a6:4c:dc:c7:76:07:ca:a7:dd:99:eb:df:54:5b:
0d:19:39:93:e4:b3:2e:69:10:c5:9d:d2:6a:9f:e4:
8a:31:e0:5f:24:cd:64:e4:41:85:fb:8d:36:53:6b:
ea:81:4c:ea:34:1e:8e:67:f0:68:30:b6:92:4a:b0:
b9:17:9a:d2:38:eb:37:fa:73:84:57:b7:2e:f8:54:
73:89:a3:14:00:b2:8b:60:90:54:af:41:9b:50:bc:
8f:4b:2e:b4:df:6d:54:71:0b:6b:95:3e:83:c1:ba:
c9:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:49:C8:D5:DC:33:A1:D1:63:DE:7E:52:36:E4:E7:D9:E1:3B:59:A4
X509v3 Authority Key Identifier:
keyid:92:EF:F6:16:25:02:EA:3B:52:FD:8C:A3:AE:10:8D:13:D6:BF:F6:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ku_2FiUC6jtS_YyjrhCNE9a_9lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7943a0-ccab-4260-bd51-afe89aacc492/1/ku_2FiUC6jtS_YyjrhCNE9a_9lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:d6:23:c7:38:eb:44:67:c4:cb:2e:5a:5b:4b:d6:5a:99:2e:
64:1f:69:5b:d1:8a:c2:59:f5:5d:ab:b1:05:59:0f:9a:e9:9e:
6f:29:5d:b5:90:8d:12:38:cd:e0:26:43:c0:ac:ef:50:8a:b3:
38:9f:1a:6a:c5:94:f4:1f:fa:8a:aa:20:c3:c5:06:68:e7:2b:
b7:bf:21:03:c0:a7:af:95:40:c8:c6:6b:2b:1d:94:00:48:c8:
81:04:12:2c:22:51:b4:10:f1:35:bd:e8:29:29:3b:8d:68:13:
72:9f:e5:95:97:53:51:d4:c2:63:90:a8:94:c2:c3:a4:b2:72:
78:41:6a:be:95:6e:ad:fa:c8:8a:67:08:95:24:b3:73:e7:41:
6f:b2:79:f6:37:fc:ab:65:16:60:85:64:d3:f5:43:35:96:87:
fc:a7:07:b9:f6:e5:3b:14:1f:ec:a8:d8:77:01:7b:9e:81:17:
f3:7b:f1:86:5b:f1:79:d4:41:ac:ae:3a:80:ff:d2:1e:3d:ad:
fc:16:80:e5:e4:82:bf:97:4c:17:36:86:c7:d9:bc:5d:cd:f4:
dc:77:99:27:cf:54:1b:6d:86:9d:8f:55:96:cb:97:6e:51:b4:
13:dc:2f:8c:46:d2:62:6c:0b:01:ca:58:02:90:44:0c:68:b3:
1e:a3:26:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:38:08 2025 by rpki-client