Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
File: KfzfdinE4A6QbxQ19EndEJ9BC2w.mft (raw, json)
Hash identifier: 4co7qfyljHndQgcWb6OslhRu51jm9umGgOOcrVLadR0=
Subject key identifier: AB:BF:AC:CD:15:8E:59:B3:12:BE:65:83:E8:68:37:F5:27:9D:8A:0E
Authority key identifier: 29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
Certificate issuer: /CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Certificate serial: 0195903D46199E50D9789CFD5D807092311D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
Manifest number: 1175
Signing time: Thu 13 Mar 2025 16:01:29 +0000
Manifest this update: Thu 13 Mar 2025 16:01:29 +0000
Manifest next update: Fri 14 Mar 2025 16:01:29 +0000
Files and hashes: 1: KfzfdinE4A6QbxQ19EndEJ9BC2w.crl (hash: 1GQ87amhpEin24cNJ+0scvBOnGlgnpICSh6LLoEYXSs=)
2: lKv_MpftntPeWIBfQDo4EvQnOCE.roa (hash: v96JNz5ZiqAWk2kEUzYU+IVtwUC39vYGpp2p54BaFZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:90:3d:46:19:9e:50:d9:78:9c:fd:5d:80:70:92:31:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fcdf7629c4e00e906f1435f449dd109f410b6c
Validity
Not Before: Mar 13 16:01:29 2025 GMT
Not After : Mar 14 16:01:29 2025 GMT
Subject: CN=abbfaccd158e59b312be6583e86837f5279d8a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:8a:ff:54:10:96:88:1c:ec:31:42:1f:4c:
c3:a0:01:60:70:e5:70:6a:ae:f9:de:7f:4f:78:93:
7f:a8:83:fc:61:c6:03:d0:98:be:aa:18:c1:e9:da:
ba:bd:10:64:31:59:9a:be:93:74:26:92:20:86:8c:
df:5c:1b:15:84:f3:25:2d:47:c2:c0:5b:4f:23:70:
c7:b3:ea:35:6a:1c:86:ae:6b:a4:e7:3e:07:8f:e3:
ee:90:77:cb:80:a2:f0:77:4a:5a:67:15:04:d9:96:
c9:9e:4b:4f:e7:3b:89:f4:af:18:18:d7:f6:3d:7b:
d5:d2:c7:f2:b9:09:9f:a0:f2:ea:e7:62:28:9e:2a:
a8:de:74:a8:0f:44:70:d4:bc:97:8e:2a:c1:2a:09:
03:97:99:36:73:da:03:c3:d9:7f:6a:a8:9a:f3:b9:
c3:fb:13:3c:19:2b:9d:a4:b5:af:e5:aa:3a:ae:46:
f1:ac:28:01:22:dd:90:87:5a:47:01:51:58:2b:ae:
04:b0:e7:0f:90:8e:dd:ae:80:9e:3e:24:77:4b:5a:
17:d9:06:1c:71:50:fa:38:7d:bd:f7:f5:53:68:bf:
27:3d:67:dc:38:8e:de:6e:53:a5:02:96:e6:6d:58:
3e:a8:c9:cc:5c:e6:82:07:25:14:34:1d:3a:89:6f:
90:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BF:AC:CD:15:8E:59:B3:12:BE:65:83:E8:68:37:F5:27:9D:8A:0E
X509v3 Authority Key Identifier:
keyid:29:FC:DF:76:29:C4:E0:0E:90:6F:14:35:F4:49:DD:10:9F:41:0B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KfzfdinE4A6QbxQ19EndEJ9BC2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/d47be8-2ff0-4c93-b912-905e763f048d/1/KfzfdinE4A6QbxQ19EndEJ9BC2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:60:12:cb:ad:bc:a3:5b:a4:4d:46:21:43:2a:c5:07:95:23:
88:73:00:85:3f:c7:ca:6e:69:17:49:24:4a:ad:b2:3b:cc:44:
a4:03:69:65:b6:73:1f:73:61:e7:93:c4:bc:3e:cf:52:8d:39:
36:e7:e6:64:19:1a:2a:8f:01:c0:b3:13:1f:2a:9d:1f:f4:b3:
b3:f1:ab:5e:e5:13:53:9e:31:2e:44:7a:c7:c9:aa:15:70:ae:
b8:90:e9:55:db:ef:88:5d:0a:32:53:da:c5:cd:cd:fd:77:f0:
05:1a:a8:d7:c7:f7:1e:3c:d3:24:08:71:08:99:0f:cb:1e:a3:
d7:06:dd:ca:50:36:b1:eb:c7:7b:16:d6:d2:2b:fb:45:0d:80:
16:df:4d:73:d0:2c:e6:cf:a2:e7:a0:3e:a9:fb:59:08:b7:39:
4b:14:54:55:0f:fe:13:a7:33:37:b4:8c:5c:95:83:ef:4f:78:
ea:5b:08:8f:2d:70:64:89:3c:fc:61:7d:ea:a0:c5:7f:d9:84:
59:b8:f3:e2:b2:ef:7b:0f:2c:c9:47:a9:e1:b9:3f:20:7b:5e:
be:02:6e:8e:d9:48:78:78:f0:4e:75:40:f3:d3:ba:56:c4:e9:
b8:60:2d:5a:7d:75:bc:d1:3a:b2:17:69:11:ee:2d:58:89:35:
78:8a:42:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:29:27 2025 by rpki-client