Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier: ptume7hkWpcBi1gUYD861tb/zt71HbB5qSGKizpCN6s=
Subject key identifier: EC:91:36:23:76:4F:C1:08:8D:52:A4:4E:7C:E8:54:4D:FD:E8:14:73
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 01958EBC645847DC706B1F29CDADAA973760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number: 0A32
Signing time: Thu 13 Mar 2025 09:01:05 +0000
Manifest this update: Thu 13 Mar 2025 09:01:05 +0000
Manifest next update: Fri 14 Mar 2025 09:01:05 +0000
Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: SnRqlRPIJ+69jNpx+mVpKXAyLJZPnYXZ3eeYEI7kLaA=)
2: WW00EN3MrsTzqtLNcacZPoJnrh0.roa (hash: j+ELBwy24bd0McE+tNDFFzjcwNY6uxzFX9utCzZ+kV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bc:64:58:47:dc:70:6b:1f:29:cd:ad:aa:97:37:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Mar 13 09:01:05 2025 GMT
Not After : Mar 14 09:01:05 2025 GMT
Subject: CN=ec913623764fc1088d52a44e7ce8544dfde81473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:18:4a:b3:63:31:5f:b9:fe:03:2e:77:c2:
ea:12:f8:15:6a:3b:ff:6d:72:af:3a:d6:6c:9d:06:
1e:f0:04:4c:4a:e4:f2:97:c2:39:cf:06:ed:64:29:
70:5f:4b:5a:4c:d1:8a:97:12:4f:3a:9d:b3:18:7a:
ce:22:f3:b4:e9:34:b1:b4:9d:a8:ae:fc:56:5e:1c:
21:24:30:36:21:e6:ae:d7:1e:03:72:62:91:f9:06:
ba:86:6e:4b:ae:10:61:57:fe:11:9a:e1:58:6c:39:
64:5c:a0:c4:7a:ec:50:96:ac:31:05:e7:60:6c:03:
7e:bf:f9:fc:cd:6d:5e:83:f9:eb:dd:e7:1f:e7:9a:
ed:0e:80:71:4c:a3:87:e3:86:94:35:4f:f8:39:6b:
c1:8e:a8:cd:b2:93:dd:43:8c:b5:f8:5f:a9:c4:7d:
46:62:ef:ef:5d:f4:39:57:fc:5f:e5:40:9e:d9:4e:
a2:72:3e:5c:ea:95:5b:19:10:27:b5:19:44:a5:21:
7c:74:b0:1e:b4:57:75:05:28:a5:0f:92:db:ca:a9:
dc:4f:4d:a4:28:e4:2a:c0:52:aa:46:3d:1c:85:87:
70:90:a2:9a:6c:6c:8e:ea:ec:85:1e:2d:79:02:8c:
d9:18:e3:e9:79:c1:53:86:31:f9:49:72:cb:16:ab:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:91:36:23:76:4F:C1:08:8D:52:A4:4E:7C:E8:54:4D:FD:E8:14:73
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ad:ba:d1:bd:bc:3e:0a:f2:25:8a:fd:f6:24:fa:77:3d:bf:
70:8b:eb:16:12:a7:c4:a4:14:bb:bc:1b:a0:d8:46:ef:bd:27:
34:3a:c2:b3:aa:26:af:51:a5:38:3e:18:6a:e8:2e:96:a3:f3:
a6:12:ac:88:84:71:ff:da:16:55:c2:a6:eb:7a:98:d4:b6:c5:
4f:f7:16:20:ed:9a:93:11:9b:de:4e:59:36:ad:ff:99:8e:f7:
1a:14:5d:82:0b:1a:13:a2:93:09:c3:a2:8f:d6:a0:3a:ee:95:
65:85:58:67:2e:55:f6:8c:c1:81:ef:42:8e:23:ef:42:c1:b3:
35:ba:c7:87:5f:9d:8b:2c:57:47:d5:07:71:ad:91:11:bc:68:
ea:ba:d0:5a:01:01:11:5d:87:d0:c9:56:37:a8:1c:95:2c:f3:
2f:b5:20:0d:1f:99:61:2c:65:c0:2d:22:e2:5c:f0:65:dd:9c:
1a:e6:59:8d:1f:7b:7f:2b:16:4c:ca:33:00:7e:08:c0:0d:b1:
20:55:98:bd:cf:42:9e:92:ab:34:b5:c5:af:9b:8f:0d:d7:0f:
b8:cc:ed:bd:08:40:42:c9:15:e1:b2:6b:b8:75:96:dc:35:95:
7e:c9:01:88:3c:80:15:4a:fc:d3:78:59:5d:d5:50:3d:60:a6:
c6:96:f5:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:02:55 2025 by rpki-client