Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
File: KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft (raw, json)
Hash identifier: igjf5dSyGxnFZEKH9QzKEe5VgowGgeFoO+pIvQvW5Ng=
Subject key identifier: 8E:B9:0B:C0:43:B8:15:26:21:D4:78:1C:E3:D1:9A:52:74:7E:C6:CB
Authority key identifier: 2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
Certificate issuer: /CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Certificate serial: 01964D7E85E1897C3F35390812B8F532C0FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
Manifest number: 14FB
Signing time: Sat 19 Apr 2025 10:00:59 +0000
Manifest this update: Sat 19 Apr 2025 10:00:59 +0000
Manifest next update: Sun 20 Apr 2025 10:00:59 +0000
Files and hashes: 1: KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl (hash: PwfSDAY0WZhf7tVNkpJILuIGlAsupC9aJ6yL7Mes1TY=)
2: cjk16MmGa9VAbHsgngJUOkSp08A.roa (hash: vjUqfCV04EKTU6LoX8huXEuT5umrktch7/fsTB3KR0w=)
3: k2Uppl8G01BcsH3g3-MinVDILtU.roa (hash: lp7j+Bb3bbdsfLwcfqn/iR6o1CoScaVkVKl5uGRp5+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4d:7e:85:e1:89:7c:3f:35:39:08:12:b8:f5:32:c0:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a734eabcfb5b6c2a4e48388edb3af8f506b1fab
Validity
Not Before: Apr 19 10:00:59 2025 GMT
Not After : Apr 20 10:00:59 2025 GMT
Subject: CN=8eb90bc043b8152621d4781ce3d19a52747ec6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:91:26:93:9f:81:30:ec:85:8e:0f:26:9e:c0:
f7:f5:e3:08:f3:7e:38:a2:d1:f5:a6:ef:94:2f:40:
ab:69:80:4b:b8:e2:98:de:91:98:a9:84:7b:58:25:
fe:88:5b:d5:19:ad:3a:44:f0:16:60:7f:68:56:e5:
3b:f7:87:28:98:5b:21:ac:f5:a3:2b:cd:7a:75:c0:
40:0a:ad:9b:99:7f:83:2f:75:6b:1b:b8:8d:0d:59:
74:27:d8:0d:c3:36:07:99:4f:43:3d:57:31:2e:76:
4e:c1:17:78:69:64:76:be:98:2e:18:6f:2e:0b:e7:
74:d8:10:7d:fd:ca:5b:5f:b2:b6:b2:72:b2:de:ae:
b8:9c:2c:d8:c2:d0:8b:58:75:33:e7:67:a2:ff:64:
d6:1e:22:d4:c4:37:21:50:04:8e:81:7f:61:ca:0b:
65:ef:d4:ae:ef:e7:84:a7:11:c6:d9:54:ff:3b:f0:
6b:f3:54:70:b7:f0:f4:4c:f6:3c:45:3f:27:13:ee:
a2:8d:5e:2b:48:fa:8d:57:e7:40:59:44:42:e2:ba:
75:34:8e:4b:d5:7e:8d:c8:92:80:17:fa:71:b3:c7:
39:a3:fd:db:d0:fc:c3:30:ba:a3:21:2e:ca:69:31:
8f:12:4f:ce:19:96:43:ca:6a:b0:ec:16:c1:e3:62:
58:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B9:0B:C0:43:B8:15:26:21:D4:78:1C:E3:D1:9A:52:74:7E:C6:CB
X509v3 Authority Key Identifier:
keyid:2A:73:4E:AB:CF:B5:B6:C2:A4:E4:83:88:ED:B3:AF:8F:50:6B:1F:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnNOq8-1tsKk5IOI7bOvj1BrH6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6f952a-ad59-4b9f-b7c7-09aac0789b93/1/KnNOq8-1tsKk5IOI7bOvj1BrH6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fb:b6:fe:fa:ba:d9:5f:d0:08:a4:4f:db:59:ee:c6:f0:34:
86:81:d4:84:b0:de:8c:7c:81:34:3a:a0:db:6f:74:fc:89:68:
12:40:f2:3c:22:67:b2:c4:35:15:f4:1b:04:4e:a4:da:36:b6:
b2:e3:d6:28:4a:6b:3e:de:86:50:88:d0:58:7d:d5:eb:33:53:
15:a8:b1:84:9b:a1:0d:2b:9f:94:76:7e:bc:d8:5c:73:b5:fb:
93:98:91:cd:2a:0c:ae:23:c3:de:db:58:24:0c:ac:73:3b:ec:
32:54:fe:95:ad:81:a2:1a:95:72:a6:35:64:aa:77:f4:a1:7f:
41:c4:9e:f1:90:e6:24:10:3e:70:60:3d:00:67:45:f5:d3:88:
8b:10:36:9f:cb:f6:cf:6e:12:6d:1a:f6:f0:26:12:bb:41:b9:
73:b6:ec:50:d8:64:09:67:00:0b:02:52:18:48:7f:87:66:19:
aa:85:40:25:57:1f:33:f1:fb:3a:16:7d:22:37:b9:77:4c:72:
e7:c3:47:0c:c1:da:2c:af:f9:e9:b2:d2:2f:9d:29:98:50:83:
a1:1e:23:e6:8f:3f:0f:fd:14:d7:ce:c3:52:ca:7b:43:15:ae:
1e:88:1c:3a:a7:12:2a:c5:2b:6e:fb:7a:85:0d:b7:f4:1c:08:
89:31:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 14:05:18 2025 by rpki-client