Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
File: KgV9tw5HTrSgd_oT875N17Y4C1Q.mft (raw, json)
Hash identifier: tLQrQx8WBrvOLQTys2c8OIltTxxbK6iw1sZa39+0X88=
Subject key identifier: 51:A6:F0:1D:36:21:FB:2D:AF:7B:09:4D:07:71:81:83:A6:06:AA:1B
Authority key identifier: 2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
Certificate issuer: /CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Certificate serial: 01957910B867940A49E1A7037175B3312452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
Manifest number: 0E84
Signing time: Sun 09 Mar 2025 04:01:33 +0000
Manifest this update: Sun 09 Mar 2025 04:01:33 +0000
Manifest next update: Mon 10 Mar 2025 04:01:33 +0000
Files and hashes: 1: KgV9tw5HTrSgd_oT875N17Y4C1Q.crl (hash: KlSMYeJdzk9O6a9y+srMhMiimJs7Nn1tPRIbFIAHusA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 10 Mar 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:79:10:b8:67:94:0a:49:e1:a7:03:71:75:b3:31:24:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a057db70e474eb4a077fa13f3be4dd7b6380b54
Validity
Not Before: Mar 9 04:01:33 2025 GMT
Not After : Mar 10 04:01:33 2025 GMT
Subject: CN=51a6f01d3621fb2daf7b094d07718183a606aa1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:db:7a:00:9f:49:fe:58:08:9d:9e:76:1f:4d:
ba:af:e3:27:c5:db:f6:39:b6:1a:cc:9d:cd:5e:a6:
70:da:ff:72:fc:90:89:e9:69:98:ce:97:1d:c4:73:
dd:fa:77:b0:b7:8a:a0:41:6b:fa:0a:99:33:2e:20:
d6:0e:f9:2e:c4:fc:92:cb:ba:dc:7f:11:ee:e3:ad:
7d:0a:9e:dc:86:d1:e8:e7:59:3d:c8:70:92:72:d7:
80:34:59:52:43:93:68:43:fc:ca:3e:22:d9:6b:54:
06:71:ae:b5:46:e1:b7:b1:b7:c8:3d:0e:f2:38:01:
1a:9f:7d:08:e1:84:a7:86:24:67:ed:3c:30:60:de:
fb:b2:c1:c3:90:18:bb:67:65:8a:25:33:17:d6:e6:
60:12:23:73:97:d6:58:b6:4e:95:e5:65:02:44:e1:
6c:93:b8:37:39:45:a6:bf:37:b2:ef:b1:de:2e:2e:
d2:4c:11:2b:da:4f:d5:5a:d8:3e:82:4b:c6:dc:d4:
cc:da:4f:ac:2d:ee:5e:7f:0f:c0:93:d7:fb:5b:da:
2d:50:47:25:c4:e7:76:b8:49:a1:c3:b6:cc:b2:26:
d4:11:a0:1a:f7:56:17:08:f6:ad:75:3a:ab:4a:2e:
8c:72:25:3c:e0:70:69:1c:86:b4:32:87:95:bb:b5:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:F0:1D:36:21:FB:2D:AF:7B:09:4D:07:71:81:83:A6:06:AA:1B
X509v3 Authority Key Identifier:
keyid:2A:05:7D:B7:0E:47:4E:B4:A0:77:FA:13:F3:BE:4D:D7:B6:38:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgV9tw5HTrSgd_oT875N17Y4C1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/d978ff-74a1-4915-959a-c03568dc08b3/1/KgV9tw5HTrSgd_oT875N17Y4C1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:24:51:81:ce:69:d3:c5:c4:51:b7:40:09:4e:2d:94:7e:75:
b6:b5:18:4b:f3:ea:cd:0c:cf:9b:d1:ce:ec:b6:ce:d2:c1:b4:
b7:5f:94:4b:05:d9:3b:bd:20:63:51:65:63:de:88:8b:66:e8:
e5:b8:9a:e5:45:ed:f8:c3:ae:7d:bc:57:ac:c3:8c:c0:7e:d5:
a1:b9:8e:41:d2:b7:7d:32:9c:c4:7f:ec:4f:6c:de:0f:37:e4:
91:d5:83:47:d0:68:92:81:8d:de:57:29:46:2b:4f:9f:7a:a8:
a0:e8:08:b3:19:8e:46:aa:51:eb:60:bb:7d:ef:d1:91:d1:d0:
f7:45:28:47:23:ae:f4:c4:a1:77:5e:d0:f5:8f:44:f0:ae:d2:
c9:db:a0:c5:ee:4c:8f:23:c3:d0:46:97:92:5a:ba:c8:4a:06:
94:37:51:ef:1b:a6:4b:37:dc:ac:13:ba:62:27:a5:46:dd:10:
21:5a:08:45:c8:fa:9a:a5:a8:ab:c3:83:a5:a0:bf:5e:9c:09:
7e:23:3f:ec:97:ce:5a:b8:3c:99:e3:ba:e6:5f:dd:cb:5c:b9:
ba:2d:d4:af:b3:9c:b1:5a:20:8e:ef:71:87:1b:62:d2:31:de:
fe:bc:19:95:e3:63:f6:80:f3:19:96:21:f8:d9:1e:e3:0d:aa:
06:de:47:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 9 11:35:36 2025 by rpki-client