Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
File: KVYK0P3bQyabfm1bSEMopHbw6mg.mft (raw, json)
Hash identifier: lnaORGG+Cc4aLGcWH5VtXHAHFqrvKYOIC3CsjP08b1U=
Subject key identifier: 54:1E:BE:6E:91:3C:2B:A2:42:F5:DE:FA:F4:28:D1:B6:C6:D4:41:40
Authority key identifier: 29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
Certificate issuer: /CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Certificate serial: 01958FCF1F078841FD0066C081D69C2E7737
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
Manifest number: 01BF
Signing time: Thu 13 Mar 2025 14:01:10 +0000
Manifest this update: Thu 13 Mar 2025 14:01:10 +0000
Manifest next update: Fri 14 Mar 2025 14:01:10 +0000
Files and hashes: 1: KVYK0P3bQyabfm1bSEMopHbw6mg.crl (hash: 7QyPTznVAhG0gLAJnA4PUF4fhIMaFDUan4/vT52PHts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:cf:1f:07:88:41:fd:00:66:c0:81:d6:9c:2e:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29560ad0fddb43269b7e6d5b484328a476f0ea68
Validity
Not Before: Mar 13 14:01:10 2025 GMT
Not After : Mar 14 14:01:10 2025 GMT
Subject: CN=541ebe6e913c2ba242f5defaf428d1b6c6d44140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:13:ca:e9:45:90:ca:67:ca:f4:2e:3f:20:81:
14:67:7c:fd:2a:7c:8d:4d:4b:12:1f:0d:c7:bd:56:
97:a7:ce:fd:16:05:11:b9:d4:9a:dd:5f:03:ba:2e:
f8:4b:57:60:fa:e8:45:b6:ea:15:4d:bb:63:f8:7b:
be:96:67:61:79:57:6a:ad:ff:92:b5:53:5f:e7:ad:
93:53:b0:db:bd:3b:8a:c9:96:71:90:ad:2f:bb:39:
55:1e:16:f0:a3:49:40:c4:d4:82:29:53:1e:63:fe:
eb:44:4d:1c:64:46:1c:fb:c5:27:3e:5a:f1:79:35:
1c:ee:4d:80:ce:ce:a5:c3:0e:01:95:e6:84:a8:b3:
92:0a:3d:0d:af:d1:31:ce:a3:62:5e:9b:dc:dd:ea:
23:5a:f9:7c:9c:a1:d9:a9:af:a4:97:f6:4b:9c:20:
8a:47:2f:5a:ab:31:62:f7:3c:82:f3:b8:33:91:91:
1a:00:a1:47:ae:3a:f8:54:f2:d6:c1:08:73:4d:10:
fd:77:5d:2e:4a:56:b4:40:ad:51:63:74:8e:bd:e1:
2d:c9:c3:9c:23:37:4a:16:34:93:d6:76:d3:94:e5:
60:88:4e:82:f3:9a:f5:fc:cc:29:7d:ba:32:ad:b9:
aa:ae:85:a9:63:2d:62:98:66:be:ac:4d:89:4b:43:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1E:BE:6E:91:3C:2B:A2:42:F5:DE:FA:F4:28:D1:B6:C6:D4:41:40
X509v3 Authority Key Identifier:
keyid:29:56:0A:D0:FD:DB:43:26:9B:7E:6D:5B:48:43:28:A4:76:F0:EA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVYK0P3bQyabfm1bSEMopHbw6mg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/9a7113-869e-46c0-9a38-8a2efe2fb08b/1/KVYK0P3bQyabfm1bSEMopHbw6mg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:8b:de:e5:af:23:19:84:33:a7:e6:9d:3d:99:eb:b7:f4:76:
9f:4a:fd:ea:6d:11:0d:52:ab:d4:00:06:88:07:a0:09:a7:92:
5d:e6:50:72:5b:54:be:30:aa:22:27:f5:ce:34:02:5e:5e:40:
2d:6f:bc:e5:5f:d0:47:7f:58:3e:a6:91:96:12:09:53:cd:a7:
d2:9e:eb:a1:8b:bc:15:fe:30:93:18:59:6f:2f:93:ef:39:25:
6e:09:b6:9d:0b:af:69:d4:23:12:f7:49:fb:cd:f8:22:a9:77:
d6:e5:ce:13:9e:a5:bb:48:98:03:36:a7:dc:c2:e5:8b:a7:45:
0d:62:3f:e4:d7:f5:0d:49:0e:48:db:46:2d:dd:f4:a4:53:b2:
fd:ae:12:1e:91:8c:54:79:b8:4f:80:e6:37:ae:d2:6e:9e:69:
66:e8:3b:15:f9:ab:1e:de:96:79:de:c9:17:ee:8a:a8:ad:5a:
90:c5:a1:34:82:7d:1f:b1:4e:1e:de:e3:9b:a2:18:ad:9f:4f:
f2:38:83:96:3d:ac:fb:8a:cb:ad:43:fc:b6:87:ea:4a:f1:fc:
96:4b:c6:29:e6:e2:88:6a:2f:c0:4a:7e:a7:47:9f:a3:6b:75:
6b:12:0a:3d:0a:08:9a:cf:ef:ee:02:2c:67:32:30:a0:30:df:
ea:d5:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:51:10 2025 by rpki-client