Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
File: KUJPgsfIL8VJlTLlpmUadPYpxao.mft (raw, json)
Hash identifier: 5MRjwYmiCMKJD1J0V8JtHy6YIREhPSn0llg4hnQyFKI=
Subject key identifier: 4F:F8:66:4B:35:41:23:F4:38:2B:D1:53:DF:51:2E:09:E0:46:C3:71
Authority key identifier: 29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
Certificate issuer: /CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Certificate serial: 01964F6CE39294BA591BF24F2C17FB741DEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
Manifest number: 08D4
Signing time: Sat 19 Apr 2025 19:00:58 +0000
Manifest this update: Sat 19 Apr 2025 19:00:58 +0000
Manifest next update: Sun 20 Apr 2025 19:00:58 +0000
Files and hashes: 1: E7pOFVTH8vD5FpCiYaR8AAvSF9c.roa (hash: QknCCRzW2QumFMETOVNE4NTQsXWLabVtKWWfI6cIov4=)
2: KUJPgsfIL8VJlTLlpmUadPYpxao.crl (hash: gs7crF+CPrEsuqvCpX7J8EJLW/iFtRkTQGgAj9uY2GE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:e3:92:94:ba:59:1b:f2:4f:2c:17:fb:74:1d:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29424f82c7c82fc5499532e5a6651a74f629c5aa
Validity
Not Before: Apr 19 19:00:58 2025 GMT
Not After : Apr 20 19:00:58 2025 GMT
Subject: CN=4ff8664b354123f4382bd153df512e09e046c371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:21:2e:9e:38:5a:5c:76:a7:00:f7:b2:e4:65:
12:f7:f8:39:36:b6:aa:1e:6a:22:8a:b0:07:24:a8:
2d:b9:98:19:b0:19:2a:ce:1b:19:87:33:0a:af:f3:
2d:f5:a8:f4:1e:11:40:69:ec:4b:6a:78:a6:ef:05:
80:a9:d4:e2:58:ec:70:91:d1:54:08:02:60:e8:cb:
d0:d3:27:3e:e1:f4:70:6b:18:6c:db:da:fb:07:50:
43:ef:e0:b7:e2:5f:b9:15:e8:88:26:33:79:43:e9:
78:6c:8a:a3:92:26:80:fd:60:99:70:27:0b:8f:02:
5c:f7:76:12:22:34:18:d0:2d:b6:e6:b3:4a:94:c1:
ca:ff:2d:ae:68:e9:dd:18:57:1a:e9:c7:43:9f:21:
af:31:4f:e4:f0:be:f1:7f:60:5c:49:88:28:66:33:
0a:29:94:b7:f8:a2:ac:bc:e9:12:9a:f9:bb:56:46:
8a:49:6c:db:de:0d:68:d2:46:7b:6b:7d:3c:f5:72:
8b:24:b9:7e:40:56:d5:3a:8d:30:8e:5d:f6:24:45:
d0:af:38:2b:12:6d:e4:68:09:0d:99:e7:8b:e8:1b:
34:71:5a:7d:b6:ee:03:86:9a:13:79:f0:51:47:f0:
db:44:f5:6f:bf:f6:9f:0a:0a:70:ae:80:9f:ea:a3:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F8:66:4B:35:41:23:F4:38:2B:D1:53:DF:51:2E:09:E0:46:C3:71
X509v3 Authority Key Identifier:
keyid:29:42:4F:82:C7:C8:2F:C5:49:95:32:E5:A6:65:1A:74:F6:29:C5:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUJPgsfIL8VJlTLlpmUadPYpxao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/2f6652-7466-4a16-83da-c1f1a0e497cc/1/KUJPgsfIL8VJlTLlpmUadPYpxao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:13:4c:6d:08:ac:87:c2:e7:e0:66:1d:a4:28:03:a8:ec:c1:
2c:07:2b:bb:e1:dd:74:9b:09:a7:00:8d:62:eb:14:75:98:6e:
f6:aa:f5:2d:9b:3f:95:7f:59:84:19:cc:6b:2e:2d:2d:8e:2e:
47:4f:5a:e4:fb:af:8c:35:42:49:ea:e0:9e:fd:52:69:37:cf:
97:d8:3e:67:59:52:5e:3c:13:b2:45:5e:b5:67:86:ad:47:e4:
1e:9c:51:06:b3:19:f3:c0:1b:dc:a3:69:03:1d:73:13:52:ea:
77:b1:59:9f:93:ee:16:c1:38:90:e3:0d:08:85:10:53:c7:4e:
60:50:b3:bb:70:fb:4f:b4:8e:99:87:21:86:26:8c:3f:9e:8b:
0b:c4:b5:22:6b:a2:ba:f9:5c:4c:ee:98:71:3c:3c:f6:bc:2b:
c1:20:e8:af:e6:aa:71:45:80:b7:0a:ff:88:a6:10:f9:ff:2b:
52:4a:90:96:38:7d:3e:05:ff:66:84:bf:4e:83:6a:5f:4e:f8:
8b:3a:8e:27:1b:ab:c2:d3:bc:d0:96:18:d3:8c:bc:1e:6f:f2:
ec:4c:ad:36:6d:b0:f5:11:3e:4d:9e:6b:85:f4:76:5e:81:14:
3c:43:18:9b:4d:78:2e:7d:51:e2:9a:77:4e:f2:2f:28:4b:34:
95:7d:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:29:59 2025 by rpki-client