Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
File: KTdcnACxUp1VHufijGBwq0Oi_nY.mft (raw, json)
Hash identifier: CydXW69IFSsZXcSI8BuJDetTYibZ3yJiWewZ1jDIwX0=
Subject key identifier: 40:96:40:95:84:68:DF:93:94:C8:E2:C4:C8:19:0D:5A:AB:2F:B1:06
Authority key identifier: 29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
Certificate issuer: /CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Certificate serial: 01960D8D13FF9A491C9FC7E03AABF976BE98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
Manifest number: 0C9F
Signing time: Mon 07 Apr 2025 00:01:11 +0000
Manifest this update: Mon 07 Apr 2025 00:01:11 +0000
Manifest next update: Tue 08 Apr 2025 00:01:11 +0000
Files and hashes: 1: 2muVnH1_oI_9ztpeyJIqq88lM1c.roa (hash: UznFOVn685h5ihMi8FItxWdR/wWRBKXy+8YPxE2cn9c=)
2: KTdcnACxUp1VHufijGBwq0Oi_nY.crl (hash: Pnjby5b/rCQ0TlSHopT1RmW9HsJrLSM1Iq7EvcZAwFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0d:8d:13:ff:9a:49:1c:9f:c7:e0:3a:ab:f9:76:be:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29375c9c00b1529d551ee7e28c6070ab43a2fe76
Validity
Not Before: Apr 7 00:01:11 2025 GMT
Not After : Apr 8 00:01:11 2025 GMT
Subject: CN=409640958468df9394c8e2c4c8190d5aab2fb106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d3:27:e6:de:cd:be:dc:da:20:97:9e:4f:ae:
02:c8:a5:79:9d:6b:d3:5c:3b:ff:91:1f:2a:d1:ec:
2e:50:5f:06:2e:ba:5c:6b:4f:88:ab:e3:5a:b5:2d:
2c:40:ff:34:61:bf:df:64:6b:8c:42:17:2c:94:8f:
8a:bb:b1:93:cf:fa:e9:96:e5:c1:11:02:2b:8a:a0:
cb:59:af:80:69:29:53:6c:ec:bf:ae:b2:64:d0:3e:
b3:b0:d9:37:19:fa:ba:fc:31:6f:80:82:91:58:a2:
18:5e:ba:76:6a:ec:f4:b0:d0:77:23:76:a5:93:3a:
18:7c:4c:d0:91:0d:31:26:7b:22:65:ab:28:fb:0a:
01:e1:13:72:a2:d9:2a:7d:47:59:07:e0:82:73:eb:
d8:68:c9:5f:25:42:ed:b9:66:86:49:e4:0a:08:f6:
d2:eb:9f:58:72:a9:3b:2d:12:e1:56:08:37:9a:9d:
cb:fa:a1:c3:0d:a6:eb:50:65:bd:56:bf:2f:94:ed:
6e:a7:72:68:f0:e3:b7:18:8c:86:b9:9a:ac:6c:a9:
08:7f:61:b2:7a:a4:38:25:6f:2d:c5:42:f8:5d:9f:
16:72:0b:13:fe:85:f3:bf:bb:59:87:aa:45:58:2f:
6d:9e:f9:a6:cc:51:79:5e:ae:ab:16:c1:ae:06:6f:
46:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:96:40:95:84:68:DF:93:94:C8:E2:C4:C8:19:0D:5A:AB:2F:B1:06
X509v3 Authority Key Identifier:
keyid:29:37:5C:9C:00:B1:52:9D:55:1E:E7:E2:8C:60:70:AB:43:A2:FE:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTdcnACxUp1VHufijGBwq0Oi_nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/77f977-015b-4caf-893f-0504e111a3b8/1/KTdcnACxUp1VHufijGBwq0Oi_nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:be:39:fa:c3:11:30:b7:91:04:be:40:5b:ab:9a:99:53:82:
cd:ce:7f:7f:c0:44:be:71:44:7e:72:8d:03:10:1e:82:40:af:
75:38:f3:6e:69:bf:5c:0f:d5:cd:8b:a4:88:58:0d:25:2b:2c:
13:55:d9:b1:68:e6:c9:0d:a3:9d:1c:d0:42:c4:bd:cd:47:2a:
fb:4a:1c:47:ec:2f:49:71:a1:e1:4f:77:16:d4:15:0f:29:a7:
5f:2e:3c:08:ff:c9:d2:ad:01:2c:5e:a0:e5:74:c9:fc:e0:d3:
7c:50:07:36:7a:fb:c8:5d:c0:a2:e3:91:15:09:7e:a3:20:77:
29:c6:a8:bf:53:39:c1:6f:16:df:85:4a:47:e2:82:18:eb:ab:
89:ba:cd:01:f6:7a:49:ef:48:03:9b:b3:b1:56:64:7d:16:af:
cc:4d:39:aa:68:db:71:77:06:ea:2d:83:c5:c3:2f:18:f6:10:
80:54:65:f0:32:01:6f:55:a1:1d:1f:78:bc:e0:c8:ae:62:1a:
25:5b:24:b5:1d:7c:61:d4:33:89:fc:9e:6b:93:e9:63:1b:c3:
51:7c:ed:0c:61:3f:fe:85:cb:9f:0a:a6:9c:b5:05:83:a7:ca:
cb:3e:54:28:73:20:c1:9a:ec:13:a9:1a:bd:6e:69:be:04:f3:
4a:ea:14:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:21:14 2025 by rpki-client