Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: BVJFUiVJumeLmMZ2Bdwgy+8Im/JVjicynQZsxbYR7iI=
Subject key identifier: 73:37:C5:5B:32:E2:43:3E:54:BC:55:56:C6:AB:9A:88:49:3B:67:A9
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 019649A165BA91425592D3EFB12394ABCE3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0C83
Signing time: Fri 18 Apr 2025 16:00:36 +0000
Manifest this update: Fri 18 Apr 2025 16:00:36 +0000
Manifest next update: Sat 19 Apr 2025 16:00:36 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: 4P6/PVY+NEYeib8rGBzrqUbQlolbpi4j3KjsYGCSCnM=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:a1:65:ba:91:42:55:92:d3:ef:b1:23:94:ab:ce:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Apr 18 16:00:36 2025 GMT
Not After : Apr 19 16:00:36 2025 GMT
Subject: CN=7337c55b32e2433e54bc5556c6ab9a88493b67a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0d:17:a2:e4:bc:2a:61:55:c8:63:3e:95:67:
98:50:6d:11:21:5d:de:37:be:d9:5f:03:ed:da:93:
18:f2:59:b6:2d:f0:52:4c:56:b3:cf:d3:2b:06:30:
86:af:d5:ff:17:98:c9:45:5a:18:64:6b:fe:c3:23:
99:d7:c9:bd:26:94:16:d1:b9:66:dc:cb:18:e5:f3:
b7:ee:c1:0b:9e:67:49:ae:be:96:56:f8:75:35:9c:
ec:cd:e2:6e:04:6d:85:47:a5:cf:0c:58:f2:b8:ac:
7f:b6:77:7f:e0:e2:d2:2e:d4:d2:0e:8f:76:71:a5:
cc:e5:5f:1c:dc:29:d8:b2:34:8b:17:d5:fc:80:0b:
80:b2:2c:8b:27:bb:53:38:5e:68:9a:bb:8d:17:56:
b8:f8:6b:16:71:b9:cc:bc:0d:db:6b:04:50:20:0b:
b7:80:0c:4a:f0:2d:bb:84:2a:3b:ce:0a:82:99:5d:
66:3f:58:3c:5e:ce:2d:15:d0:77:29:39:71:46:4d:
26:56:59:2f:16:97:02:2a:4e:d9:cb:ef:db:eb:80:
66:fd:cc:dd:f6:32:bd:a5:29:b8:24:76:a4:d6:a9:
f4:1f:56:b3:1f:c5:3f:88:1d:f3:00:85:d9:b8:63:
40:86:a5:06:83:cc:15:b9:8b:e6:97:66:fc:c5:97:
59:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:C5:5B:32:E2:43:3E:54:BC:55:56:C6:AB:9A:88:49:3B:67:A9
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bd:0a:45:6f:ab:d9:bd:f7:2a:11:dc:ee:55:2b:30:dd:57:
fd:65:b0:2d:11:60:02:95:10:d1:81:07:9b:f0:ab:51:39:9f:
14:49:bd:1d:83:20:a1:ea:5b:1e:a7:10:4e:48:79:3a:1b:94:
49:6a:a6:ee:53:65:55:72:ac:da:f9:ed:a9:e0:b8:db:70:d9:
97:1c:e3:80:dc:77:77:47:2c:3d:8a:4d:cf:0d:76:a2:a1:3a:
15:74:42:05:50:01:82:8f:ab:a1:4b:a0:f4:86:34:7d:6f:08:
ab:b8:19:43:12:a0:73:6c:60:0b:c3:9e:6d:37:97:1a:b2:a9:
77:a3:ea:94:ef:e0:aa:be:00:ba:24:c7:0a:96:44:c9:cd:90:
27:df:90:48:dc:b9:c7:d8:fb:bc:32:d8:55:90:d2:1c:73:bb:
2f:c4:6c:97:eb:76:c8:c4:b0:b4:ff:ef:49:a3:23:40:66:91:
cf:6a:a9:0e:5e:32:16:0f:a1:3c:13:38:90:d7:72:2c:60:60:
86:e3:2a:fc:6a:cd:d6:1e:af:9d:48:4a:d5:8d:79:de:29:77:
cd:3f:34:78:85:78:b4:ed:25:aa:0c:8b:4b:fb:a8:7a:e2:d9:
d4:c9:6c:05:9f:a3:7a:51:55:5f:b2:8e:c4:ec:93:c7:b0:e4:
38:93:9e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:04:27 2025 by rpki-client