Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
File: K0lf5W80diAmqUA18yDwqQt6JWY.mft (raw, json)
Hash identifier: oCAIMRiUeLdcDOsygfs/zTZbsgeDrZL0YOJNO8bJBfY=
Subject key identifier: 2A:F7:C9:C1:8C:E4:2A:B0:ED:AA:67:84:12:BF:FE:A0:43:0F:5A:71
Authority key identifier: 2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
Certificate issuer: /CN=2b495fe56f34762026a94035f320f0a90b7a2566
Certificate serial: 01958BBB3CEE0C72A1BFC4F2725593F0BD79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 19:00:58 +0000
Manifest this update: Wed 12 Mar 2025 19:00:58 +0000
Manifest next update: Thu 13 Mar 2025 19:00:58 +0000
Files and hashes: 1: K0lf5W80diAmqUA18yDwqQt6JWY.crl (hash: pWJCS+S2dFudZFkBOoLLIhbULx2w9vCgTP5GO+6bhiU=)
2: xWy_WK3zN7U168-WlDV1tLOFxms.roa (hash: 1F+oH+DvxsXdBv6L+suStKLkTpWpU6OO0n2cflrUK4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:bb:3c:ee:0c:72:a1:bf:c4:f2:72:55:93:f0:bd:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b495fe56f34762026a94035f320f0a90b7a2566
Validity
Not Before: Mar 12 19:00:58 2025 GMT
Not After : Mar 13 19:00:58 2025 GMT
Subject: CN=2af7c9c18ce42ab0edaa678412bffea0430f5a71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:05:f2:76:5a:ea:40:9f:ae:24:9e:24:b0:
e0:2a:46:8f:41:b7:25:b1:89:4f:cc:f8:c1:88:8f:
7f:28:89:f4:be:73:99:4e:2a:fd:23:2a:71:c2:72:
f7:09:63:35:68:26:8a:a1:5c:95:d2:fa:4e:56:10:
ee:ad:7f:0b:30:c4:57:d9:26:4b:c9:57:6a:e0:04:
b2:06:99:79:39:16:b4:f1:63:83:30:49:21:be:05:
68:6d:b9:ab:f2:37:e9:7f:37:be:de:b3:e8:fb:51:
65:b6:c2:3a:e8:68:1b:b2:ca:0b:42:74:33:17:ae:
f2:7f:31:49:10:d0:94:1e:44:df:74:60:99:1e:f6:
ab:1e:e6:16:e1:44:6a:6d:ae:de:ba:99:ce:33:3f:
02:47:51:96:a1:11:5c:fb:1d:47:d2:d1:1b:88:4f:
62:4a:b4:02:f0:ca:be:14:79:d9:17:d8:3f:63:ac:
79:19:3f:18:94:c4:e5:b2:30:de:28:4a:61:4a:f0:
38:9e:9b:c7:46:9e:61:67:4b:3f:f7:6b:5d:c3:e3:
fe:82:07:77:6c:4c:6a:32:6d:01:7e:af:3b:f2:bf:
86:4f:ae:24:b9:82:d9:34:88:e0:04:48:3e:25:09:
e3:4c:5d:ce:3b:64:68:ca:ea:1a:a7:0c:1b:b2:c0:
d1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F7:C9:C1:8C:E4:2A:B0:ED:AA:67:84:12:BF:FE:A0:43:0F:5A:71
X509v3 Authority Key Identifier:
keyid:2B:49:5F:E5:6F:34:76:20:26:A9:40:35:F3:20:F0:A9:0B:7A:25:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0lf5W80diAmqUA18yDwqQt6JWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4d24c7-7477-4f7f-a8b4-9d63795211d3/1/K0lf5W80diAmqUA18yDwqQt6JWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:a5:b8:f2:5a:71:13:cb:99:17:69:82:44:46:5a:c2:ef:91:
d4:e3:ed:83:e4:32:b5:3a:62:a7:56:46:d3:6a:fa:5f:ba:62:
0b:9d:85:7d:e5:5e:61:c8:38:48:e7:4d:ad:ec:11:76:ef:a2:
80:f2:b8:1f:77:23:b0:24:54:41:ad:16:27:0d:30:6f:40:5b:
2e:7d:04:8a:cc:84:5f:0c:73:0d:50:8a:ad:79:73:b5:7f:6e:
ff:e4:21:0f:e7:93:bd:42:e4:75:3b:c5:8a:47:14:3c:ca:ea:
5a:92:bc:02:d0:36:98:98:79:bd:89:e0:53:8b:23:bc:65:f0:
0d:d3:d4:64:20:7d:27:25:c3:86:32:b2:0c:0b:7f:f4:39:1d:
e0:0a:1b:31:59:4e:73:80:e2:36:4f:3e:8e:8d:d4:11:e1:31:
3a:90:a9:b5:93:e5:1c:46:22:dc:51:c1:c7:32:35:e7:95:86:
1f:05:0d:b4:c7:12:08:36:bd:5a:80:0e:ab:c9:00:92:70:b1:
dd:e8:79:0b:76:86:4d:30:7f:a8:8c:50:4f:59:65:6d:f8:8e:
dd:89:c6:54:f8:7b:85:62:b0:46:d6:e3:9a:08:a2:45:ad:b1:
29:c8:5b:81:0c:2f:c8:94:68:18:f0:3f:92:56:ae:ca:a2:a6:
1e:a1:27:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:11 2025 by rpki-client