Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: xEaNZr3sUHpSfk9J2/+a557NXjKhRso+Coy6ApKFfeY=
Subject key identifier: D4:F2:33:B7:A3:61:2C:CF:D1:0D:4E:57:1A:16:55:64:40:09:D2:08
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 01958F2A7CB5D73B796CD24102AEF2EC013C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 10A8
Signing time: Thu 13 Mar 2025 11:01:20 +0000
Manifest this update: Thu 13 Mar 2025 11:01:20 +0000
Manifest next update: Fri 14 Mar 2025 11:01:20 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: AjwMY9eXQ6vViumABzHj4iEo3U8LRN8nSbzH3cKqN2c=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 11:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8f:2a:7c:b5:d7:3b:79:6c:d2:41:02:ae:f2:ec:01:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: Mar 13 11:01:20 2025 GMT
Not After : Mar 14 11:01:20 2025 GMT
Subject: CN=d4f233b7a3612ccfd10d4e571a1655644009d208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c5:16:7f:c4:8f:ea:60:da:40:0c:46:ba:85:
0e:5b:21:91:85:47:67:0e:c3:fd:e4:77:91:c1:79:
18:3c:61:25:e0:f3:a1:85:b3:ff:d5:b0:f2:d5:0e:
e2:03:96:2f:4a:0f:ec:00:9d:6d:c5:84:ea:10:9c:
7f:16:a6:c4:12:94:9a:63:78:d9:4b:82:3d:1e:39:
b6:2f:30:16:68:28:4f:42:1c:97:f6:ab:3f:87:2e:
e6:f4:4c:69:c0:63:9c:03:ed:c1:ca:77:35:78:cf:
bf:ad:1e:03:84:2c:98:35:71:ba:7c:1b:12:58:7c:
d0:ee:27:96:d2:46:21:e6:cf:0f:68:ff:33:02:e1:
1b:fe:a0:fa:16:c4:f3:e2:83:75:ee:5d:be:b8:37:
41:26:e8:d0:bd:7b:e3:d9:25:17:2b:11:6a:fa:06:
c7:e6:cf:d5:09:b2:c1:d2:c1:1d:c6:2a:7c:39:fe:
34:18:f3:a5:98:9b:13:50:d1:b0:2f:43:7b:37:25:
59:0e:a7:62:39:14:64:bc:1b:1d:32:5c:bf:1c:ad:
cc:3b:e9:2f:f6:ba:a5:27:e2:7c:ed:7a:fd:61:55:
fe:b8:f1:8a:61:51:53:1e:5f:6c:80:fb:68:ae:ec:
50:36:ab:0f:cc:4f:ea:aa:79:db:a8:a2:6c:f5:ad:
e9:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F2:33:B7:A3:61:2C:CF:D1:0D:4E:57:1A:16:55:64:40:09:D2:08
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:23:f9:e7:db:28:b0:72:c9:2e:ed:a2:33:35:53:fe:56:6e:
ad:87:c4:e3:86:ef:b4:e3:67:e6:c7:39:f6:28:ed:6d:bd:50:
70:12:68:93:f1:a4:1c:86:f9:c9:2a:58:7e:19:39:4f:26:97:
d7:59:04:54:b2:10:9c:94:bc:d4:3f:91:dd:de:93:98:06:1b:
93:c0:cb:74:3a:17:3e:30:b3:13:95:b1:63:44:d5:b5:df:fc:
c4:81:19:bd:66:1b:93:84:6c:bb:46:9b:57:8a:82:e7:1f:58:
4d:3f:d8:8b:54:e2:41:0b:53:82:ba:2d:27:09:48:cd:11:92:
0c:5f:ff:2c:ce:35:73:55:55:7d:4c:67:5c:e8:ba:79:0c:a0:
ff:f0:e1:1a:f3:a3:3d:c3:cf:f9:5b:11:b2:8a:b8:c8:28:75:
27:c7:40:9e:c4:2d:46:d8:39:6e:d8:61:ea:93:a0:0d:aa:c0:
e7:d3:bb:b6:3d:77:14:4c:81:b2:4b:be:c7:6c:59:d9:e6:58:
89:a2:21:8f:70:88:10:06:34:3a:be:96:39:76:9b:de:e1:6e:
b1:13:2c:49:4f:44:46:75:05:19:30:f0:bd:07:c5:41:38:5f:
ca:46:fa:ea:c0:60:cb:97:4b:30:cd:f0:b2:7e:9d:a1:9b:e7:
e8:e2:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:37:09 2025 by rpki-client