Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
File: KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft (raw, json)
Hash identifier: sShucqZVZmpihGUogwuFcr8OnUpf+ujjf1S8glph3no=
Subject key identifier: 8A:1F:81:E1:35:1C:89:FD:6B:91:6C:94:74:55:4D:19:66:AF:FD:45
Authority key identifier: 28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
Certificate issuer: /CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Certificate serial: 01961810D7961DE0EBEF0DE45CD39C140D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
Manifest number: 02BA
Signing time: Wed 09 Apr 2025 01:01:18 +0000
Manifest this update: Wed 09 Apr 2025 01:01:18 +0000
Manifest next update: Thu 10 Apr 2025 01:01:18 +0000
Files and hashes: 1: KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl (hash: iuf5cQchoCh4Q9MnGqustz9lWqqDU6RGZynXWgJVgGg=)
2: o05sdzj6m4fQO6_WrgnQWVEGn8s.roa (hash: 4PZyqJElCUrsee8Vele9Jxa/SXWOHXm1LP7RgEQB9SY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 22:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:18:10:d7:96:1d:e0:eb:ef:0d:e4:5c:d3:9c:14:0d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28954e28f6e01ca5c7353bc372f369a5f51d9bb4
Validity
Not Before: Apr 9 01:01:18 2025 GMT
Not After : Apr 10 01:01:18 2025 GMT
Subject: CN=8a1f81e1351c89fd6b916c9474554d1966affd45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:cc:d0:a1:15:62:9f:2a:e6:73:a5:94:40:
19:ad:b0:59:57:b5:9f:d5:91:7f:e3:29:d0:34:43:
ad:04:d7:2a:f2:35:49:74:fe:ff:22:07:48:e3:52:
d2:f5:10:e2:9d:b8:1e:e2:f1:2c:af:44:cd:ae:8e:
2a:4d:52:76:2c:02:9b:4f:87:6c:c9:26:cc:d0:3d:
94:96:c1:f0:96:6f:f6:40:b5:68:79:d0:c0:07:42:
45:40:3a:96:6d:0b:9b:ff:4d:40:e1:90:1a:ad:43:
46:d7:5c:82:b9:b4:f5:9c:49:b7:03:33:c1:79:50:
1f:b4:e3:64:2e:d4:e9:8a:d5:3e:86:73:21:58:da:
81:98:6a:aa:b3:19:1b:49:ef:ab:d8:c0:c7:f7:5f:
4d:3a:d6:fa:71:da:e7:96:04:5c:64:97:50:5e:1d:
fe:3b:93:df:9f:12:f0:70:bc:09:c8:f7:3e:f3:66:
2a:b4:c3:f4:31:20:08:b0:29:56:15:98:5c:93:0c:
53:37:c1:39:61:09:0c:d9:82:4a:d2:b8:a9:8d:a8:
96:33:72:f7:69:fe:49:0f:c0:c8:02:36:9f:74:ff:
f8:dc:ed:0a:69:84:b7:76:5e:2f:ec:2b:e6:46:91:
98:34:e7:0a:62:47:e6:05:51:28:ce:79:82:91:dd:
af:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:1F:81:E1:35:1C:89:FD:6B:91:6C:94:74:55:4D:19:66:AF:FD:45
X509v3 Authority Key Identifier:
keyid:28:95:4E:28:F6:E0:1C:A5:C7:35:3B:C3:72:F3:69:A5:F5:1D:9B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJVOKPbgHKXHNTvDcvNppfUdm7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f37027-afc4-444f-8008-95ce2c755d47/1/KJVOKPbgHKXHNTvDcvNppfUdm7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:41:99:ab:86:36:c0:a2:12:ba:53:1c:8f:12:fc:a6:c2:c4:
33:ed:b3:1c:ab:ef:2d:75:ad:f5:5f:53:79:7c:c3:9b:32:66:
cf:ac:d0:0c:c1:89:34:58:68:31:34:c3:4b:0a:c1:27:75:e2:
a2:39:13:69:0e:2f:00:dd:40:03:68:81:4c:6b:bf:3e:39:8a:
6a:1e:26:aa:c9:e6:21:98:24:ad:fc:c4:52:15:60:69:45:ba:
e6:6f:2d:2d:20:d1:08:05:e0:31:3d:a9:2b:d5:13:d6:e6:af:
6d:eb:69:75:e0:67:1e:f4:03:46:6e:06:de:4d:e4:d9:24:aa:
2e:0c:2f:1d:b6:bb:bd:e3:37:83:2e:4a:56:43:9a:38:02:1f:
92:44:fb:26:e1:9a:71:57:81:e5:b7:94:bf:b5:d9:c7:b0:e6:
da:af:3e:ce:ce:89:09:dc:d2:69:2e:89:16:ae:89:53:c6:39:
a7:18:79:23:bb:0a:91:97:6b:9c:e6:01:bd:d6:97:e8:3e:9d:
9c:e2:5f:e5:67:11:c1:89:35:05:98:e7:7e:96:cb:6e:ea:40:
46:5f:75:c3:18:e1:46:67:0e:7a:d0:29:fa:9c:6f:00:6e:df:
6e:3c:01:73:5d:ed:eb:58:67:97:58:5c:d9:0a:fd:45:c8:d3:
c8:b8:d7:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:16:59 2025 by rpki-client