Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: IFOyC9iqP0ivLvrdgfMtE1u+9ajaJ3x3/mScYqBRsI8=
Subject key identifier: 06:2E:6D:F2:85:AB:0E:CF:CE:A5:EF:87:40:49:E8:7C:AC:C0:9A:97
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 01964BC6E6E2DC1D9E11122369DCCBA3D2E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 14FA
Signing time: Sat 19 Apr 2025 02:00:48 +0000
Manifest this update: Sat 19 Apr 2025 02:00:48 +0000
Manifest next update: Sun 20 Apr 2025 02:00:48 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: 6IK3OjsOxwsGf2YpxOX8fLMAmmD/PWo/+klq9yGGj1M=)
2: Pt5jCGzvovgNs5CdDynFwkh2QzQ.roa (hash: nVdxdKNGSJEZ6402xd/EQ5NSj2OrYk/HxmlnqTUvP6Y=)
3: c_ThGFbqhteIloHLISS2D3Is-B0.roa (hash: dWKCcE+KdsbeTu7uVlboc1SJNBL/6lqMpvChZHMYdHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4b:c6:e6:e2:dc:1d:9e:11:12:23:69:dc:cb:a3:d2:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Apr 19 02:00:48 2025 GMT
Not After : Apr 20 02:00:48 2025 GMT
Subject: CN=062e6df285ab0ecfcea5ef874049e87cacc09a97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:56:ba:5e:2c:73:e3:a8:1b:40:72:65:f0:34:
cd:3d:f2:98:63:0c:74:67:39:1c:09:10:68:cd:81:
d2:f3:9f:8e:c6:81:08:87:2e:c1:e0:ec:e3:56:94:
bf:d1:0b:62:d5:65:37:c6:eb:17:0b:a5:10:b9:2f:
51:3b:4e:a3:0f:df:1f:29:f4:e9:da:35:c4:8e:15:
f4:b0:83:c9:0a:38:f4:c0:2e:1f:08:06:43:8b:f7:
af:bb:df:20:95:d9:66:50:c8:76:84:8d:c5:53:3a:
1a:95:dc:5c:88:2d:64:7c:84:ec:fc:ea:54:e3:26:
88:46:c5:ff:68:9d:c1:04:5b:e3:3d:de:84:bc:77:
1a:e9:e2:e3:5b:a2:ce:1d:71:85:39:96:aa:34:67:
4a:c4:21:c2:3d:86:3e:02:c5:9b:e2:74:94:27:27:
03:d3:3a:2e:5b:a0:0c:1d:ba:2e:9d:26:73:5a:78:
0e:ad:65:d3:e6:5a:74:66:ba:96:d7:b5:1d:f5:8e:
eb:93:85:b0:73:ba:5b:7e:0c:64:ab:bc:7d:3f:55:
fc:33:87:c3:5a:d8:76:2a:bf:5f:37:bc:87:b2:d2:
15:c5:d6:80:5a:44:12:a7:05:1d:0a:1c:e6:6c:8a:
af:ac:b3:71:67:ba:bb:57:2d:77:11:f5:8a:cb:16:
de:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2E:6D:F2:85:AB:0E:CF:CE:A5:EF:87:40:49:E8:7C:AC:C0:9A:97
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:22:a9:7c:03:0a:13:49:ab:30:53:54:ba:ba:ad:85:4f:40:
15:65:5e:20:45:2f:99:4e:0f:e9:b6:75:77:5a:50:06:a0:a5:
f9:6c:47:ab:06:8e:97:5f:eb:f0:5e:51:d8:a2:19:f2:07:62:
6a:82:ab:25:46:3f:15:c8:9b:ce:21:19:1e:38:49:51:8d:9a:
86:cb:cc:c1:cd:62:83:01:64:2e:01:23:2a:57:68:f8:03:a3:
9b:84:44:a8:01:1d:39:88:ef:05:6a:c5:2a:66:14:29:33:ca:
55:87:df:37:bb:78:6f:82:0c:ad:2c:27:a1:5e:7c:b1:92:d0:
47:6b:0b:9f:7e:a7:d1:a0:56:d5:28:cb:ba:a5:1b:24:93:65:
97:f7:f4:59:34:bb:8f:b1:84:58:bc:10:40:c7:a6:85:c3:49:
ce:48:d7:41:fd:b7:3a:e1:34:7d:0b:1e:c3:8a:e0:c0:03:cd:
ea:54:d7:49:6c:ee:ec:04:8d:3a:1f:07:aa:fb:5e:9b:44:90:
07:96:9d:71:43:1f:34:ad:a1:61:13:dd:96:c3:a3:da:71:12:
eb:be:64:eb:a5:ca:13:92:c9:71:03:76:36:46:8e:ca:7c:13:
ce:9e:1d:0d:a1:df:58:72:d1:da:01:3e:4e:20:96:83:4a:fb:
e5:15:5b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:36:09 2025 by rpki-client