Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: 8BQHXYu2fKZzJ8D0F0qxfEui6iWEuiypSVydQN0Ipcw=
Subject key identifier: 5C:00:5E:EF:6A:25:C1:DD:51:BB:B2:78:02:04:B3:2B:65:81:84:D0
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 01960F0D4C80ED05B8761228FC8BCFD1C407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 14DB
Signing time: Mon 07 Apr 2025 07:00:51 +0000
Manifest this update: Mon 07 Apr 2025 07:00:51 +0000
Manifest next update: Tue 08 Apr 2025 07:00:51 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: XCATtllykxFChIbg5f63EsAdigj6zdS95Rx65+GXZ80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0f:0d:4c:80:ed:05:b8:76:12:28:fc:8b:cf:d1:c4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: Apr 7 07:00:51 2025 GMT
Not After : Apr 8 07:00:51 2025 GMT
Subject: CN=5c005eef6a25c1dd51bbb2780204b32b658184d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:69:1e:12:2f:87:86:ef:ba:73:fc:e0:f2:3b:
33:95:ed:36:ab:c7:d2:7a:dc:ac:a9:dd:20:08:dc:
81:4c:18:b2:7e:ba:b7:43:74:3d:d3:20:0b:77:5f:
38:94:2a:76:59:bb:50:f2:90:4d:12:5c:ae:5a:a1:
a0:9a:30:55:bf:7b:93:28:70:b9:58:a5:eb:ec:93:
b4:8a:5f:41:12:19:e4:44:27:8f:ca:6f:3d:fd:41:
28:3b:c3:5e:a2:3a:2a:54:4b:7f:91:8d:fb:24:d4:
8f:04:85:c6:55:54:45:02:27:94:3c:04:55:80:ca:
f3:cd:60:c6:a0:31:6b:da:70:05:02:a7:46:0c:73:
30:ec:3c:74:53:96:e4:70:4b:6c:74:4c:71:46:75:
27:40:ac:16:73:db:e9:f4:5e:b4:9d:48:81:4d:9c:
c0:ee:6e:ef:52:10:20:19:03:e2:a9:59:8c:fb:4b:
ef:3f:76:10:45:65:a9:9e:ad:72:d1:c2:c0:54:d7:
d2:f3:f8:ee:24:07:94:66:09:62:32:cc:86:78:d3:
68:47:99:d4:e1:4d:24:02:d3:54:a9:fa:30:17:9e:
52:ea:ac:f9:bb:69:a1:bf:3e:20:d8:a6:38:a1:82:
6e:ac:1a:5d:95:ce:bc:e2:51:b8:e7:ee:27:0e:c2:
19:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:00:5E:EF:6A:25:C1:DD:51:BB:B2:78:02:04:B3:2B:65:81:84:D0
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e6:e3:e1:63:01:44:59:a5:77:3c:de:7c:3f:56:61:aa:2e:
78:75:8e:4f:7a:4d:ba:ee:c4:26:da:dd:a7:9e:71:d2:b8:e1:
1f:37:6a:65:e1:f9:be:12:a8:91:a0:38:7e:df:d2:11:f4:a8:
56:a7:91:4c:c3:ab:f5:7c:79:84:86:93:8d:59:b7:2a:15:0b:
a1:34:c9:fe:73:32:d7:1b:9a:e5:bf:ea:c7:1d:31:d0:78:3d:
7a:fa:4c:1d:0c:93:e9:e4:d1:79:6f:df:d2:99:57:76:fd:6d:
13:88:74:c7:ab:50:18:f4:c0:ae:8d:02:f0:1b:71:44:70:63:
05:b5:53:7a:22:16:6b:d0:b8:a3:d4:53:9e:9b:7a:c6:a6:13:
2c:37:60:d9:c3:18:ae:4b:c4:2f:5e:6c:1a:de:5d:f2:76:bd:
83:4f:67:80:a1:d1:1c:0d:7f:96:66:26:43:bd:03:38:10:62:
6a:45:14:b6:b1:46:e6:c6:e9:e2:52:be:6a:8e:b7:aa:64:39:
b5:a9:9f:e9:a7:69:a8:6d:66:9f:96:ae:bb:65:65:a2:55:be:
b7:50:a6:f9:67:d9:1f:9e:34:9c:5c:41:a1:69:31:4b:26:b9:
11:80:b2:91:ab:2d:7b:58:0d:cd:c6:0e:a7:93:61:7c:dd:fa:
48:b7:8e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:45:27 2025 by rpki-client