Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
File: KIUcb8brOBbhFsikqFHQ0XjJDzE.mft (raw, json)
Hash identifier: aDQDdSBkgF3j3Ggd4JN1aU4Zkp/28sLp7JTjqlDAAg4=
Subject key identifier: A3:22:B5:C5:FF:17:A3:32:85:D3:8F:EE:56:68:81:B6:BF:D6:4F:48
Authority key identifier: 28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
Certificate issuer: /CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Certificate serial: 01963E791E62423C077E12E7522F765C74C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
Manifest number: 12D0
Signing time: Wed 16 Apr 2025 12:00:47 +0000
Manifest this update: Wed 16 Apr 2025 12:00:47 +0000
Manifest next update: Thu 17 Apr 2025 12:00:47 +0000
Files and hashes: 1: KIUcb8brOBbhFsikqFHQ0XjJDzE.crl (hash: lUhp7EWBYYak8DMzmgMMpSIfYbKNVDvvgLT3NBpGim0=)
2: QKIPUY8W9rG1LSw1ZEyZOELoapA.roa (hash: Z80mVuvHDatSxJ6yGfprXykxFLoYcEum7C9B/uFuICg=)
3: ZPcs3ZKKxPUQbEu3DEs7Hfv-wYM.roa (hash: btG37/wBYGxhtViE0Hi1ryp1c5dcgao2x4gq6RXDb18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3e:79:1e:62:42:3c:07:7e:12:e7:52:2f:76:5c:74:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28851c6fc6eb3816e116c8a4a851d0d178c90f31
Validity
Not Before: Apr 16 12:00:47 2025 GMT
Not After : Apr 17 12:00:47 2025 GMT
Subject: CN=a322b5c5ff17a33285d38fee566881b6bfd64f48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:71:eb:4e:50:cf:af:51:fc:2e:d2:b4:36:33:
f7:d4:8a:8f:33:42:86:8e:93:54:fd:8b:f5:64:c6:
71:19:00:e3:2e:2c:fa:b0:0e:7c:b0:60:b2:27:c9:
1d:48:d9:77:f4:0c:35:20:8f:9e:01:bc:b6:27:f4:
80:61:29:9e:5e:b5:39:39:49:10:a8:96:07:0f:89:
42:53:5a:c6:28:91:48:53:1e:a7:00:5a:f4:f0:12:
39:c4:95:d4:8f:ea:f6:76:a9:dc:3e:4e:06:15:56:
c0:53:a7:41:3d:3e:97:4f:7d:4e:c0:2d:34:67:44:
30:1d:19:60:fe:ad:fe:24:2d:53:b0:8a:da:db:d9:
bf:cf:26:98:a7:ec:04:0e:7a:8b:05:f5:e4:3f:21:
75:f9:d5:91:fb:cf:7b:85:8d:99:0c:82:ec:49:72:
9f:23:ec:4e:e1:59:3b:45:86:3a:ff:df:3b:f0:0c:
d0:31:f5:28:48:b8:79:94:af:60:bd:56:04:56:85:
0b:b5:33:7d:79:ae:ed:bf:51:82:14:eb:ec:31:05:
f7:02:22:dc:1a:a4:ec:73:45:91:c9:b1:3f:9d:90:
d4:8d:b0:ff:29:52:cc:d2:fb:c3:71:8a:15:34:d6:
c4:f0:13:ce:43:93:0f:a8:1e:b1:a7:6d:70:84:f0:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:22:B5:C5:FF:17:A3:32:85:D3:8F:EE:56:68:81:B6:BF:D6:4F:48
X509v3 Authority Key Identifier:
keyid:28:85:1C:6F:C6:EB:38:16:E1:16:C8:A4:A8:51:D0:D1:78:C9:0F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIUcb8brOBbhFsikqFHQ0XjJDzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b9e6df-da8f-4491-8fe4-5245b135221b/1/KIUcb8brOBbhFsikqFHQ0XjJDzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a8:80:81:7a:27:4e:fd:9e:90:be:7d:53:74:eb:5d:d6:d0:
b6:32:15:2f:86:f3:60:95:e9:ba:60:6d:2e:f8:cd:9d:cc:90:
fb:e2:10:20:9d:c8:76:d8:6e:9a:c1:dd:eb:89:3c:26:bc:f2:
bd:9b:2d:77:48:98:e8:35:b6:00:49:e7:da:09:02:93:0a:14:
bd:ff:74:22:1b:bf:f4:75:4f:19:21:70:08:86:b1:fe:09:17:
65:6e:71:7d:b6:3b:c9:c9:d7:31:ee:94:13:b5:29:64:09:df:
18:fe:bd:ef:a2:0b:f4:d6:ef:f5:82:a3:79:fc:f7:9a:e8:d3:
0f:4f:f7:74:c6:62:33:95:f5:2e:fd:f4:1a:c1:87:9e:7b:ed:
37:59:a2:bc:b9:2f:95:56:0d:7b:13:3c:af:b9:5c:59:4b:b1:
d7:eb:d3:9c:73:f9:1a:e3:db:a7:b4:f4:ae:17:8c:4e:76:ba:
b5:93:00:5a:ae:a2:9d:12:88:eb:7a:e9:a0:d2:6d:d1:fd:60:
5b:dc:12:b2:45:1a:23:f7:66:e5:fa:fe:0a:df:d9:89:71:c3:
25:0f:46:5f:67:36:44:85:fa:0a:1c:4a:23:51:5d:e4:12:aa:
2a:ce:73:f2:f5:4d:ad:1f:8c:00:b5:f6:2e:46:fa:6f:9e:1e:
70:3b:b6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:14:26 2025 by rpki-client