Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: +V/ltaowN99DaCSf9eIVKA6jq6Mvlg753Cu3vzQ5Dx4=
Subject key identifier: 45:D8:8F:C4:0B:CB:E6:99:5A:3E:57:B9:AB:23:9C:C6:DA:EA:3A:73
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 01964C6B5EB276E46A36AF548AF33FCD96B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 14FC
Signing time: Sat 19 Apr 2025 05:00:27 +0000
Manifest this update: Sat 19 Apr 2025 05:00:27 +0000
Manifest next update: Sun 20 Apr 2025 05:00:27 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: ETZThiObc6mjmkz/0xTxZ89QFmn/+rRv/4dZ+1rsUkA=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:6b:5e:b2:76:e4:6a:36:af:54:8a:f3:3f:cd:96:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: Apr 19 05:00:27 2025 GMT
Not After : Apr 20 05:00:27 2025 GMT
Subject: CN=45d88fc40bcbe6995a3e57b9ab239cc6daea3a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:6f:5c:5b:ce:79:05:2b:6a:66:c2:48:12:
34:44:f5:ef:02:4f:37:14:c5:41:94:f5:61:12:57:
83:a6:9f:00:54:7f:6d:23:a7:39:98:7b:ae:93:8d:
77:2e:83:99:ec:43:93:44:08:24:9c:13:1c:59:f6:
74:92:56:3a:2f:bf:91:be:1d:ee:43:21:35:0c:61:
5b:ea:f2:82:6d:98:5b:39:c5:a5:ea:6c:d1:28:77:
42:e6:4e:57:ff:9d:33:e7:dc:80:fc:19:cc:d7:25:
99:e3:24:d3:f9:c3:34:36:36:81:1c:63:31:74:7f:
7a:03:ea:70:60:56:f9:f4:ff:82:02:3a:30:57:e5:
5f:76:a8:6f:f6:41:6d:ae:cb:a5:4b:d0:07:1f:dd:
22:c8:81:9a:03:72:79:0a:46:35:19:77:9b:35:5f:
9d:f4:e1:5c:67:1f:d4:c3:4e:ef:07:93:14:81:2e:
18:18:3e:01:3d:3b:26:48:b2:9e:5a:28:b3:e2:ef:
9e:ac:99:84:ab:97:52:8c:b2:ff:f1:e9:f9:f4:99:
25:88:d9:02:b0:1f:ec:6c:36:fb:cb:f3:03:01:25:
14:41:3f:49:bf:29:75:61:cd:d7:65:07:b4:86:ee:
e6:f8:6f:64:88:9e:59:d4:64:e4:89:d1:fd:6c:d5:
30:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:D8:8F:C4:0B:CB:E6:99:5A:3E:57:B9:AB:23:9C:C6:DA:EA:3A:73
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:30:1f:56:58:45:02:86:8c:b2:cd:81:78:50:41:af:a0:74:
d1:de:47:f3:75:93:0b:38:b6:e8:8d:29:2a:a0:ec:27:ea:37:
e1:05:1d:6b:05:5e:76:00:00:61:04:a4:0d:0f:f0:a0:fe:bd:
cc:f5:74:36:81:4a:50:bf:09:34:41:53:51:95:3d:b9:5d:61:
cc:89:7b:ac:e0:69:02:ff:fc:03:71:e6:df:d1:2e:32:bc:db:
7c:b0:85:63:dc:9b:39:45:66:6f:8f:39:46:98:ee:af:fb:11:
93:82:b7:2b:20:1e:a6:d0:d6:cb:27:3e:8f:93:8d:0e:55:de:
b2:c3:40:02:76:64:c2:b4:19:b1:dc:b5:f0:e7:37:40:8d:cd:
86:fe:1a:5c:c6:0c:30:e2:f8:4e:f9:aa:bf:1b:0d:81:6a:4f:
54:dc:7b:74:85:43:d8:75:b2:4e:49:2c:40:4f:9a:b0:49:4c:
84:c2:4e:6d:f3:48:e9:05:c3:e4:9c:f1:a0:2c:3d:f9:97:b1:
5c:c6:a0:e2:fb:f9:aa:75:54:94:d9:30:52:7f:13:00:11:48:
57:0b:c7:1e:58:97:d9:46:ba:b0:21:dd:44:08:63:59:ad:24:
db:de:af:9c:93:af:fa:4b:64:2e:e1:af:f9:4f:e0:12:e4:5e:
47:3e:82:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:26:47 2025 by rpki-client