Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
File: KtNUu6DgTX5arSd5J4n8Jt3W31E.mft (raw, json)
Hash identifier: XefFtx0UJsrax7wtGamsZKJX3SdQrpXt/P/TVkCwCn4=
Subject key identifier: 85:5B:8C:12:07:A3:C4:7E:E4:77:1C:A7:45:14:49:75:1A:11:1C:C5
Authority key identifier: 2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
Certificate issuer: /CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Certificate serial: 019658DD643133442104304ED3B96ED4CD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
Manifest number: 0F20
Signing time: Mon 21 Apr 2025 15:00:26 +0000
Manifest this update: Mon 21 Apr 2025 15:00:26 +0000
Manifest next update: Tue 22 Apr 2025 15:00:26 +0000
Files and hashes: 1: KtNUu6DgTX5arSd5J4n8Jt3W31E.crl (hash: Myvi3sEX3vC62B91xWvtUP7z2ZOXHQ9zhJfirtpKmbY=)
2: ybOe8ZqyigG4FWAsCMbOcL0c5L0.roa (hash: eOMsv1LZ5Dq7SSni9aMR0p8V/nr5wD1XrXlWWtuivxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:dd:64:31:33:44:21:04:30:4e:d3:b9:6e:d4:cd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad354bba0e04d7e5aad27792789fc26ddd6df51
Validity
Not Before: Apr 21 15:00:26 2025 GMT
Not After : Apr 22 15:00:26 2025 GMT
Subject: CN=855b8c1207a3c47ee4771ca7451449751a111cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:52:00:b4:a8:fe:80:ec:63:6b:0f:5b:8a:
f9:24:3b:f6:12:48:88:33:02:00:f3:fe:b9:04:51:
38:97:87:bf:a2:ba:64:60:26:9d:11:53:e9:76:c5:
af:b6:d5:45:ca:d3:d7:15:7d:a0:2f:59:05:66:67:
3d:ba:59:eb:f6:98:66:18:9d:04:3b:60:f1:e6:c2:
b8:6f:d6:db:47:fb:ff:f2:48:d4:f6:52:af:0b:6e:
d9:a0:78:bd:4b:02:9b:5e:5b:a6:53:15:4a:d1:86:
f1:61:fc:c1:c6:9d:83:d0:38:2d:4e:6a:69:c0:3d:
5c:6d:89:c6:72:88:43:41:69:5c:08:c8:b6:ff:6b:
ae:cd:57:3f:a4:9b:9f:2f:78:12:d6:80:61:67:7b:
07:bb:48:6f:2d:09:89:37:19:fe:46:2c:cd:70:1b:
fb:11:94:f7:cd:26:22:90:06:ca:67:05:08:13:cd:
6b:4f:f2:13:a6:30:be:f3:f7:93:20:92:77:5e:bc:
78:c4:01:19:cb:6e:3b:dd:4c:b8:03:69:ab:52:37:
be:54:0e:96:f1:22:a5:2b:9b:1f:21:8f:99:94:7f:
65:97:01:10:fd:a2:61:4d:39:46:ab:e4:91:d4:63:
6a:b8:c7:ac:7e:ab:d9:9c:76:35:3f:b1:42:5a:ec:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5B:8C:12:07:A3:C4:7E:E4:77:1C:A7:45:14:49:75:1A:11:1C:C5
X509v3 Authority Key Identifier:
keyid:2A:D3:54:BB:A0:E0:4D:7E:5A:AD:27:79:27:89:FC:26:DD:D6:DF:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtNUu6DgTX5arSd5J4n8Jt3W31E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/799f0d-a4f1-4a5b-8cc0-3a703789b03b/1/KtNUu6DgTX5arSd5J4n8Jt3W31E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:62:d5:de:2c:c4:4a:17:dc:b3:f1:dd:13:8c:72:4b:36:8e:
fb:d9:25:6d:40:37:31:9c:76:ea:4a:ef:c5:7a:27:c0:b2:66:
e3:01:0e:70:84:10:8d:4e:03:5c:63:58:83:cc:c0:da:e1:2f:
66:1a:b7:50:9c:7e:d7:63:a6:87:87:10:7f:e1:49:8a:fd:26:
e7:67:c5:dd:4f:4e:c1:5b:59:4c:5c:d8:41:ef:74:2b:88:52:
df:7f:e7:ac:58:fe:60:1e:81:57:d1:1e:b3:54:a0:99:31:5a:
40:a6:bc:22:b9:53:6f:91:eb:2b:43:d7:6a:a3:ed:00:51:77:
2c:37:fc:7c:20:67:71:b5:77:ba:78:00:6e:93:d4:da:c5:d4:
2a:29:94:cf:14:5d:8b:31:2c:19:7a:79:70:a6:a9:7f:95:a0:
7f:76:96:c3:3f:72:6a:18:36:b2:f7:ec:37:d1:a3:87:6e:79:
49:23:4b:b5:bc:0b:a9:c4:3f:5a:ef:87:71:ba:3d:d9:95:04:
43:e6:f7:a5:74:24:12:09:cd:36:0b:b3:3d:f8:96:2e:18:1c:
99:63:6a:1f:46:cf:b0:a5:93:d6:ac:52:ab:d6:25:c8:6f:3f:
e5:b4:1b:41:1b:c9:ac:8b:7e:e7:f4:c3:ca:52:76:4a:05:d2:
ad:39:11:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:17:53 2025 by rpki-client