Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: UK7KRt7lF0gmpeZHfgSk/8vThVszTYmf88VxBfffeEY=
Subject key identifier: 1E:F1:49:F0:FF:15:58:78:4D:30:03:4E:A6:91:8D:56:2B:B3:54:B1
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 01962ABC9479983495C11A60C909276573C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 14E5
Signing time: Sat 12 Apr 2025 16:02:03 +0000
Manifest this update: Sat 12 Apr 2025 16:02:03 +0000
Manifest next update: Sun 13 Apr 2025 16:02:03 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: o0MmdSsf/79GrQvRGhllKirE3LnUZdytmCzRhw5CabU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2a:bc:94:79:98:34:95:c1:1a:60:c9:09:27:65:73:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: Apr 12 16:02:03 2025 GMT
Not After : Apr 13 16:02:03 2025 GMT
Subject: CN=1ef149f0ff1558784d30034ea6918d562bb354b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:58:f6:ce:80:0a:6c:f8:28:fd:3e:09:f1:
9c:15:5b:a3:6c:e6:1d:a0:8c:55:26:0b:11:3b:d2:
72:5a:36:bf:46:f7:8a:cb:3d:be:4f:6b:c3:00:ae:
3b:fa:53:47:47:59:91:0d:f4:b7:6e:21:65:98:d6:
fa:db:ed:02:a9:ec:a5:fc:0a:6a:10:bb:77:88:15:
39:48:02:69:7b:cf:3e:6a:4f:ce:0b:41:ba:8a:36:
dc:9d:c9:5a:5f:ce:55:62:76:0e:26:7b:63:17:72:
88:0b:fb:af:c1:06:95:1f:39:9f:b1:4e:cb:fb:5d:
0b:c8:c4:ee:d1:44:75:79:9f:40:cf:70:8a:67:4f:
d0:88:fd:7a:69:7a:cd:24:fd:20:34:89:5b:b2:b0:
bf:f6:f5:31:a9:c3:e8:99:15:64:69:bb:29:f6:9c:
20:f2:10:9c:1a:c8:63:a9:40:d6:39:20:81:84:fa:
5f:8d:c7:fc:4c:e8:ca:73:29:4e:a7:0d:82:cd:50:
0e:08:b5:15:c7:f8:08:f5:77:23:3f:09:a2:61:e3:
c5:15:1d:01:b8:64:ac:a8:13:c3:3c:ef:45:87:0c:
55:42:b9:6c:d1:ed:c2:05:27:d7:8a:c3:e7:e4:f2:
70:a8:78:7e:17:e6:0b:5e:cd:37:41:ab:b4:91:af:
fb:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F1:49:F0:FF:15:58:78:4D:30:03:4E:A6:91:8D:56:2B:B3:54:B1
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:3f:9e:40:a6:00:dc:bd:1b:af:bb:71:e3:6c:9a:ee:ce:7f:
a2:1c:dd:8f:79:7b:09:17:fd:3f:3a:4b:55:ed:ac:c7:41:81:
79:b1:34:98:cb:57:6e:4f:47:c0:82:ce:08:53:65:bd:23:1f:
fc:2b:0a:9f:96:7b:4b:34:6e:f4:4f:83:b4:6f:f3:38:17:93:
a4:0d:35:76:84:bf:90:cf:40:ed:63:8e:c6:3c:69:c0:b4:c7:
dc:fb:5d:87:2e:db:d6:d7:46:4c:b8:f2:98:94:ad:0e:7d:9c:
02:b2:fb:57:c7:76:79:06:63:4a:b2:e9:43:01:07:49:d2:46:
e9:34:2d:8e:ce:05:92:0e:fb:5f:8e:54:49:3a:cd:00:32:48:
58:b7:bf:5f:9a:1e:f9:e4:db:cc:a0:9f:46:28:23:f3:7c:7f:
64:5e:33:fe:c6:0e:a6:0b:ef:69:dd:9b:71:69:6c:27:2f:8d:
61:2e:aa:e7:e6:d8:47:66:f1:8b:c3:59:97:19:33:da:12:e9:
e8:59:f0:3f:b0:c4:61:9b:ae:7e:0f:ad:74:30:f8:67:5b:0a:
d4:e9:2a:ca:ac:80:9d:9c:a3:54:1f:01:6a:07:14:f3:e8:15:
30:8e:b0:71:83:16:10:53:47:af:9e:be:bc:ba:14:9d:53:2b:
82:c4:a7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 20:28:55 2025 by rpki-client