Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: IWOKx7Q5Ua97iICbgUMEPp9O9mSiCoT2qjzolzaMjBw=
Subject key identifier: 3F:3F:08:27:FA:0D:7F:4F:C9:80:FE:C1:43:0D:2E:9D:CF:02:1A:1C
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 019658019912428420A8E6B5282D73EEBFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 0EFA
Signing time: Mon 21 Apr 2025 11:00:21 +0000
Manifest this update: Mon 21 Apr 2025 11:00:21 +0000
Manifest next update: Tue 22 Apr 2025 11:00:21 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: +dyybbvU1t0jVlfcK/xf1oqBUj5y6R9BISw9gw/b16I=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:01:99:12:42:84:20:a8:e6:b5:28:2d:73:ee:bf:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: Apr 21 11:00:21 2025 GMT
Not After : Apr 22 11:00:21 2025 GMT
Subject: CN=3f3f0827fa0d7f4fc980fec1430d2e9dcf021a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:23:06:a5:cc:d5:53:4c:21:cb:e6:18:ef:b6:
d7:07:92:7b:01:d1:dd:f2:65:8b:66:d2:37:26:fe:
8d:88:ea:68:24:af:d2:2e:8d:51:27:b6:f0:3a:75:
d8:9b:f6:1a:5c:aa:24:77:1f:35:09:bb:9a:0b:b9:
c2:77:fb:bd:9d:7f:a0:28:e0:1e:8f:26:10:45:e0:
09:59:c4:86:45:22:ef:42:b8:22:88:2f:dc:0e:6a:
c6:41:2e:40:8b:8f:ed:a2:66:54:84:2f:39:ac:62:
c3:bf:27:a6:12:c1:4d:36:da:76:a4:65:69:c2:fa:
75:87:56:28:f3:a9:d3:2d:98:1f:53:1f:ea:7c:81:
2f:cc:9e:ae:b9:2e:ad:eb:d2:0b:e6:97:ac:5e:37:
d7:90:31:12:cc:c0:61:02:4c:31:6a:f5:e0:76:0b:
d6:f8:e3:43:ea:f3:c3:30:df:43:47:b0:35:41:08:
1e:50:9b:fd:13:f6:85:26:81:5f:28:96:96:4d:53:
04:86:8e:ba:70:7c:15:ea:76:78:3e:81:1d:8d:41:
82:11:98:e1:16:6d:84:37:a3:a0:73:0d:d7:c1:22:
1b:53:b2:51:c0:53:39:99:9f:ac:55:73:41:8d:e4:
29:7e:6d:80:c3:1a:20:7a:63:5c:a3:79:d5:5c:b8:
72:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3F:08:27:FA:0D:7F:4F:C9:80:FE:C1:43:0D:2E:9D:CF:02:1A:1C
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:5f:72:8d:af:d3:82:79:33:95:e2:3f:95:cc:2d:43:b5:ed:
b1:57:54:d9:9e:a7:e7:e4:69:99:3a:ed:b1:65:5a:58:5f:01:
eb:39:45:94:f4:fe:cc:02:4c:f4:e6:c6:11:d8:ba:41:1e:e3:
6d:d1:75:9c:08:26:37:a3:d9:82:e1:ba:bd:71:24:3b:c8:16:
08:b0:0a:75:01:58:17:4b:bc:c6:3d:c6:39:32:e4:8b:28:da:
83:e5:60:11:b3:c2:45:3d:19:b6:73:00:77:5d:2e:ba:5d:96:
71:1e:19:eb:fc:97:f6:b4:6e:1e:e3:0a:aa:31:5a:21:1a:67:
cb:de:5a:39:8e:72:63:48:49:07:f0:13:4f:20:cd:38:08:f0:
ce:ad:f2:f4:00:b6:f5:f7:47:a5:b2:46:cd:e0:6a:40:6a:46:
51:bf:70:3a:39:51:a4:e8:8d:86:aa:7a:c6:46:13:49:a2:33:
fb:4d:67:36:15:cb:c8:ba:3c:44:67:1b:a9:28:68:3d:70:25:
88:52:9d:31:17:55:bd:7f:c5:53:b9:dd:27:d9:e9:9c:a8:81:
1b:47:fc:7f:79:70:02:c6:11:8e:78:55:03:6c:e3:32:ba:9a:
16:31:b8:5e:48:38:74:c5:55:3b:b1:82:25:86:10:4e:dd:74:
f2:e2:2a:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:11:11 2025 by rpki-client