Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: HL89VCINd9uFJy3E+hCgHMZCHRdwS+4VDkUyIg2I5io=
Subject key identifier: F5:39:CD:F2:E2:A8:66:A6:7B:6C:68:53:E9:44:68:8A:38:1B:D1:7E
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 01958B84887FF326961DD18ADE12C7570EDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 056C
Signing time: Wed 12 Mar 2025 18:01:13 +0000
Manifest this update: Wed 12 Mar 2025 18:01:13 +0000
Manifest next update: Thu 13 Mar 2025 18:01:13 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: T7qf6RSz6oH0kB51BXyQwPQJRZWl3Lv8LXFdBgJ8xuU=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:88:7f:f3:26:96:1d:d1:8a:de:12:c7:57:0e:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Mar 12 18:01:13 2025 GMT
Not After : Mar 13 18:01:13 2025 GMT
Subject: CN=f539cdf2e2a866a67b6c6853e944688a381bd17e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4e:cf:f5:3c:bb:72:82:f5:b2:af:39:cc:85:
15:f8:2e:91:c2:4b:dc:46:b0:7a:76:aa:66:69:cf:
9d:c2:a3:6b:37:76:8f:b7:ab:7e:a6:81:96:2c:bd:
68:b9:32:3c:4b:5a:95:6e:bf:fc:d1:27:30:ee:40:
86:71:d8:6d:47:75:4f:42:91:c6:08:13:b9:c8:bb:
fd:05:ad:38:be:be:26:fa:29:3c:6a:b5:79:0a:4f:
b1:97:6c:2a:01:ef:f9:c1:4a:f5:e7:1e:7e:0e:da:
e2:5e:68:72:8a:8b:30:26:ef:19:27:2a:f7:07:8e:
b5:d6:42:d0:70:18:26:bd:f7:37:09:8e:94:21:e9:
e8:24:ec:77:07:8d:b0:90:ee:d6:dc:e6:04:2b:bc:
e0:a2:5d:00:b4:dc:9b:05:18:da:2a:31:82:64:97:
aa:eb:f6:be:79:6b:de:19:08:74:f5:e4:b9:34:14:
54:90:5f:03:ea:70:c9:b9:12:66:5f:a4:2c:5c:0c:
70:3b:ce:e6:84:72:07:67:1c:87:eb:4b:79:2d:fd:
8c:a5:7e:9a:de:ed:60:b8:34:61:82:d3:b3:fa:6b:
21:98:0d:95:73:fc:83:71:fd:e0:c0:2c:46:e5:d1:
76:e2:ff:20:4d:78:7b:b0:9d:d2:96:44:76:bb:e2:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:CD:F2:E2:A8:66:A6:7B:6C:68:53:E9:44:68:8A:38:1B:D1:7E
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:db:ad:d0:3e:cb:db:71:73:ca:79:5b:dc:1a:cb:d1:f0:f1:
00:2f:df:08:6b:48:9d:8b:b7:43:96:45:ea:4e:a4:af:25:3f:
c8:cb:5e:c4:ac:6e:5b:a4:e6:b7:07:a3:64:20:4e:60:f7:18:
a9:df:60:5d:10:d6:cd:bf:ab:05:6a:ea:f9:66:1f:7d:14:10:
02:66:76:8f:15:28:36:7e:14:f4:45:ae:42:fb:48:ff:cc:f2:
48:ef:53:19:82:45:fd:e7:6f:58:17:79:04:53:f3:37:17:54:
b2:85:d3:b1:6a:b8:24:32:a9:89:12:b5:b4:46:cb:ee:94:a8:
17:ae:7f:ff:72:22:f0:94:ca:90:f9:a4:99:af:78:50:9f:b8:
b6:23:f9:ff:9c:7e:28:19:16:87:c5:82:cd:21:16:a9:a1:c5:
a3:5f:37:29:b1:7c:62:dd:06:b5:b2:8b:c3:e0:db:92:64:58:
b8:70:c7:6a:49:e0:5e:58:80:a7:d4:20:81:1e:1e:9d:eb:ae:
d3:3b:de:c0:d3:d1:45:73:83:cb:b9:92:c6:97:e9:8a:2d:ea:
f6:06:6e:d7:47:9b:ba:c4:43:06:9c:80:f3:e6:c6:ac:34:68:
3b:32:a4:c5:ee:89:11:16:c4:a8:9f:97:77:11:f1:27:c2:d2:
b5:1a:7b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:44:04 2025 by rpki-client