Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: fkUKZWllXiAYwY1kfZff8vQQ+X9bdvTMjQ5vMKmgDqE=
Subject key identifier: 9A:97:9D:AC:52:DE:D2:60:C0:3A:05:5B:DA:81:1D:EC:D3:8D:AE:5E
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 01964EC7B8202935C99F2D183CC7D7CC36FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0D12
Signing time: Sat 19 Apr 2025 16:00:33 +0000
Manifest this update: Sat 19 Apr 2025 16:00:33 +0000
Manifest next update: Sun 20 Apr 2025 16:00:33 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: jNjiFvN7OIgjLmz0toqM/kaV/2AWeptatX2Z3Rs5440=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:c7:b8:20:29:35:c9:9f:2d:18:3c:c7:d7:cc:36:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: Apr 19 16:00:33 2025 GMT
Not After : Apr 20 16:00:33 2025 GMT
Subject: CN=9a979dac52ded260c03a055bda811decd38dae5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ad:49:97:fc:5e:a0:5b:5c:de:59:dc:20:de:
75:b4:3d:4c:aa:43:d9:5c:a9:67:ff:53:f2:32:cf:
52:96:24:8c:9e:2a:e8:91:14:b3:50:7f:ce:d4:dc:
e0:35:15:9e:fd:5c:8b:85:2f:95:ab:1e:1e:2b:9b:
02:a3:c3:58:49:71:08:f7:55:94:ea:d1:fd:c7:98:
90:da:e2:08:7b:8a:f1:41:67:93:f2:28:5b:62:25:
6b:96:45:e8:e2:66:62:1a:e2:2f:74:d4:8f:cb:95:
cb:85:5c:7e:71:b7:f4:b4:e0:9e:53:f3:9d:06:6c:
cc:18:b8:2c:4f:aa:ce:82:f0:5e:a6:8e:47:2a:7d:
b6:21:28:ba:02:61:64:55:f9:45:91:e4:65:a8:ec:
a7:08:a9:b1:ae:9f:42:89:48:13:3b:85:c3:8e:3e:
75:e0:a0:7d:2e:21:10:ce:8b:53:ee:b3:16:11:67:
54:84:22:75:b1:85:65:f6:74:e0:5e:94:77:78:ec:
74:d7:f2:eb:12:17:b0:55:dd:24:ce:0c:8c:79:8e:
58:7c:ad:d7:40:fa:3f:08:1b:01:93:52:f5:97:be:
5d:d8:e5:4d:67:d2:83:64:20:0b:de:ca:b7:d7:5d:
9f:74:71:c4:fc:1e:1f:9b:66:2f:a6:75:0a:4d:3e:
9a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:97:9D:AC:52:DE:D2:60:C0:3A:05:5B:DA:81:1D:EC:D3:8D:AE:5E
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:a1:58:1c:59:60:1c:fc:bc:04:4f:aa:34:d6:7a:67:0c:06:
48:61:7c:a1:29:b5:9c:15:b3:1f:d0:06:7a:7c:24:97:a6:74:
78:66:4a:75:e9:1f:85:e0:be:12:12:22:3d:80:36:ed:16:ef:
43:d7:2a:5e:9c:65:bc:95:2f:ef:44:33:d3:fd:66:cd:f8:38:
8e:f0:9c:3e:55:6c:60:6b:81:f8:51:ed:b4:92:7e:40:aa:b4:
7f:0e:b1:b2:1c:cd:80:73:30:b0:40:42:79:15:02:c0:a8:dd:
2e:26:2f:ec:0f:27:64:6e:33:35:95:af:d7:2e:04:c4:f1:7d:
22:6a:e8:3b:90:5d:32:f2:04:cc:35:6f:19:03:62:80:ae:2e:
00:95:ad:b8:c8:88:a1:bc:05:14:bd:d1:16:2d:cc:21:d8:95:
f2:50:c5:b4:81:65:e8:b2:80:a6:1a:f3:53:0b:6f:e1:35:5d:
b6:9c:52:fc:de:84:b4:ae:21:23:7b:d1:82:64:2d:40:b6:9f:
b7:32:a2:95:6d:dc:ec:d9:8d:63:90:b6:5b:66:ac:df:ad:82:
4a:ce:d6:05:e4:60:95:b1:a1:35:90:ff:b8:50:84:af:32:87:
a2:c3:e7:1b:31:34:1b:85:cc:b3:95:a5:f3:ee:a1:95:25:6e:
7b:a3:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 18:35:21 2025 by rpki-client