Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: 8FwBh9Isq2iSvgQQ/fIr4faZ9fc2sSGNFBFFKCPOteM=
Subject key identifier: 2C:5B:C8:8E:74:41:F9:C6:71:A1:A8:2E:F5:B2:2F:C9:4D:C6:05:A1
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 0196138FEE687EE2148FF405A879477999C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 146E
Signing time: Tue 08 Apr 2025 04:02:01 +0000
Manifest this update: Tue 08 Apr 2025 04:02:01 +0000
Manifest next update: Wed 09 Apr 2025 04:02:01 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: bxcwdBezxOlCXkT7XpNUEWX6uZTS+i29TW2vxNJt6t8=)
2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:13:8f:ee:68:7e:e2:14:8f:f4:05:a8:79:47:79:99:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: Apr 8 04:02:01 2025 GMT
Not After : Apr 9 04:02:01 2025 GMT
Subject: CN=2c5bc88e7441f9c671a1a82ef5b22fc94dc605a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:86:75:30:0a:01:4a:14:b9:6c:8d:d0:fc:
89:82:48:b8:e1:94:13:ad:54:ed:1d:da:e3:8c:23:
8f:1f:67:4b:c2:de:34:bb:b6:5f:4e:61:0f:81:04:
df:e4:6a:ed:9b:ef:ae:64:8c:3d:bf:c3:73:11:48:
d3:cd:81:a4:de:ba:99:ed:a4:1e:3d:eb:9d:e6:8d:
23:60:c4:05:6d:62:49:7b:93:48:21:12:05:a8:dc:
a1:fe:4e:d6:77:ee:90:0a:39:d7:f8:46:5f:08:3f:
9a:8b:3b:9e:04:d8:db:33:b1:9e:c4:f6:fd:e0:62:
67:8c:9b:47:c3:29:93:f0:83:11:aa:1e:f7:19:c5:
e8:31:71:f2:25:ab:6a:6d:c2:14:b8:aa:7e:ac:16:
fc:93:a9:94:b4:26:73:3b:24:a2:ef:0c:23:2f:8a:
da:ef:7b:08:a1:21:b9:1c:6d:51:f2:90:70:62:17:
78:b9:87:4f:4f:51:ed:9b:d0:82:99:51:83:b0:42:
5b:60:85:98:1b:ad:5d:a2:8d:0c:71:06:96:67:d9:
68:c3:87:75:ad:29:51:5b:bc:7b:87:64:a1:3d:8b:
67:d3:81:7f:23:78:93:0b:8a:aa:53:63:78:78:1e:
a2:b5:75:a6:d5:32:de:32:98:65:09:a1:60:3d:05:
f9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5B:C8:8E:74:41:F9:C6:71:A1:A8:2E:F5:B2:2F:C9:4D:C6:05:A1
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:fe:8c:64:3d:51:c4:34:1e:04:db:c8:67:67:41:4f:74:4f:
4c:1d:3b:bd:3c:ca:04:bf:0d:f8:9d:4f:b0:3c:85:11:56:82:
e3:05:1f:b1:2a:9e:1f:0d:b2:79:99:7b:d3:a9:5b:c5:6c:37:
1d:18:1c:48:9f:03:2a:84:ef:f9:a3:9a:70:2f:4d:3b:08:a5:
19:ba:4c:2c:7f:a1:9a:64:76:b5:82:0d:62:98:b2:d4:3c:5b:
77:a6:76:41:91:b8:5f:29:27:44:91:66:aa:ec:ef:0b:1e:27:
95:92:d9:f9:80:6b:16:fa:ce:c3:73:c1:44:78:ae:5a:1c:d6:
0d:ea:8f:9f:68:f7:65:03:70:49:67:d6:84:08:ef:e1:95:23:
3f:b1:4a:6d:d3:ba:30:7e:9a:e5:e0:bc:79:92:2a:c4:ab:c2:
e9:45:fa:a8:85:ae:9e:6c:41:03:be:34:a5:bb:fb:9c:fa:15:
ef:6d:a5:b6:32:ee:d7:43:28:17:d6:c0:0f:1c:f5:34:9a:c6:
12:63:93:7c:11:31:0b:67:22:c2:3c:3f:73:47:e4:62:c1:74:
67:76:67:9f:15:ad:f7:25:6b:d3:8b:1e:ee:02:2c:03:ae:1a:
a3:19:d7:33:ea:a2:24:75:f0:69:c7:59:32:83:eb:13:37:ad:
6b:dd:78:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:24:41 2025 by rpki-client