Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
File: 00KrFW1a4VOtFlKOh9nIR53ApKU.mft (raw, json)
Hash identifier: GhBAxiABgvJX4jB27HMvkJoeA12wAMQJKK7TnuvPPNQ=
Subject key identifier: 41:44:B0:A9:C0:87:CD:5F:E8:3B:7B:61:BA:75:6A:4B:C2:03:29:BB
Authority key identifier: D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
Certificate issuer: /CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Certificate serial: 019649D83385679C984EEB87740BCF4035C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
Manifest number: 14F9
Signing time: Fri 18 Apr 2025 17:00:27 +0000
Manifest this update: Fri 18 Apr 2025 17:00:27 +0000
Manifest next update: Sat 19 Apr 2025 17:00:27 +0000
Files and hashes: 1: 00KrFW1a4VOtFlKOh9nIR53ApKU.crl (hash: ZqxhvIGZYwXZ1XpHqtDnqC8ul0IZCiK1IaAL2ueNEys=)
2: YzWazfZkDmpS6lnGJouGiR4vMgw.roa (hash: g+4T1wjwDSXCQUkHT41UwModEGJm2ijdNXqnxLEPkqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:49:d8:33:85:67:9c:98:4e:eb:87:74:0b:cf:40:35:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d342ab156d5ae153ad16528e87d9c8479dc0a4a5
Validity
Not Before: Apr 18 17:00:27 2025 GMT
Not After : Apr 19 17:00:27 2025 GMT
Subject: CN=4144b0a9c087cd5fe83b7b61ba756a4bc20329bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fc:d9:60:8b:d2:24:6e:36:2a:6e:fe:d7:26:
90:3b:11:96:3d:5d:b6:39:c9:b3:5d:36:66:54:67:
c8:31:f5:25:5a:99:ce:ee:83:aa:f7:d9:31:87:a0:
5c:55:b7:cd:dc:2e:68:70:83:96:ec:c1:65:aa:04:
51:49:c2:7d:ab:32:db:06:21:3b:b6:cf:17:83:6d:
79:ba:9f:d7:ed:3b:9c:9a:12:83:b9:17:aa:c4:f6:
f6:18:f4:b4:21:58:db:4a:00:a7:02:ea:6f:f7:e8:
71:18:ba:24:d2:0b:6d:67:e0:88:05:98:43:32:85:
3f:6d:2c:c7:3e:6d:6d:6c:4d:91:3b:30:b5:8d:a8:
98:d7:ae:b7:1d:cc:4f:79:2f:43:ba:89:cd:33:82:
f3:45:17:76:8d:89:78:fa:89:15:3a:02:9a:d5:bc:
3c:69:91:fb:0c:64:c7:2d:fb:46:19:4e:72:0d:de:
e4:6b:82:ed:a4:00:e7:dd:51:e9:8a:ae:35:1d:44:
6b:4f:d3:22:6c:c8:3f:3e:13:40:41:d6:27:05:64:
f0:10:55:c1:ec:54:8d:84:45:57:cc:0f:8e:a3:62:
d5:ad:c8:91:e5:58:cc:0a:6a:f3:7d:16:7f:ee:d3:
b7:fd:ae:a8:35:dc:39:b7:c2:b5:e3:ca:64:28:1a:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:44:B0:A9:C0:87:CD:5F:E8:3B:7B:61:BA:75:6A:4B:C2:03:29:BB
X509v3 Authority Key Identifier:
keyid:D3:42:AB:15:6D:5A:E1:53:AD:16:52:8E:87:D9:C8:47:9D:C0:A4:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00KrFW1a4VOtFlKOh9nIR53ApKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/263447-0c80-4cda-b915-081a637f703e/1/00KrFW1a4VOtFlKOh9nIR53ApKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:dd:b0:8f:18:d0:74:80:d6:9d:15:fc:cd:e7:92:80:55:52:
dd:dc:ee:5b:6a:a8:9a:8d:b6:5a:c3:f0:90:82:a2:b3:ef:1c:
e0:c5:1a:7a:68:76:76:e9:ca:0c:b2:bd:c0:46:1f:a1:71:85:
13:c2:4d:bd:ab:82:13:d1:1d:ca:cd:9d:82:b4:cd:06:3c:2d:
30:65:cc:9a:d7:6d:08:5d:33:44:d0:f0:d1:6e:6c:dc:8f:42:
4a:08:f7:e5:dc:95:24:cd:16:79:f2:34:fa:84:26:ec:a5:28:
41:8b:27:c3:6a:40:e0:75:06:bc:b3:cf:5e:ca:35:51:ce:bb:
9d:00:df:93:cb:ab:f8:8a:f8:7f:5b:83:57:9c:34:23:12:6b:
f2:c2:9a:cf:e2:44:6c:4e:60:e2:a5:5a:4a:21:62:13:14:02:
0b:88:e8:5b:b7:ab:7f:2a:42:c3:94:94:81:2e:0c:c1:82:a2:
6e:ab:a4:f3:a2:6a:54:07:8e:6e:28:fb:a4:a7:44:93:88:39:
5b:ef:d7:d0:56:cf:77:b3:17:45:40:ce:e6:32:4c:48:fd:25:
4e:ec:03:4a:e9:00:8d:2d:6b:fb:7e:9e:55:da:1e:bd:45:73:
05:f4:4e:bf:30:83:99:42:b2:f5:04:5f:67:34:ad:43:62:ef:
81:6e:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:33:43 2025 by rpki-client