Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: hZs5l1C+fa572cZDcX9V/3ecFyL2H1itIAKMRXE7CDM=
Subject key identifier: 59:87:90:C9:C5:F7:37:44:AD:A4:FF:EE:89:8C:CC:C4:B3:D2:AD:CB
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0196594B093D0C0F6731EEAD9773969D1091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 0956
Signing time: Mon 21 Apr 2025 17:00:11 +0000
Manifest this update: Mon 21 Apr 2025 17:00:11 +0000
Manifest next update: Tue 22 Apr 2025 17:00:11 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: E97KCy0af1Bya+0KRmCNp1GgkjjoziBKXoXWdQ2L8WE=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:4b:09:3d:0c:0f:67:31:ee:ad:97:73:96:9d:10:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: Apr 21 17:00:11 2025 GMT
Not After : Apr 22 17:00:11 2025 GMT
Subject: CN=598790c9c5f73744ada4ffee898cccc4b3d2adcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:0f:1d:41:9c:88:c4:4a:16:d4:c9:61:35:
86:7c:79:94:02:91:a7:c9:15:1a:29:fd:5f:9e:ee:
7e:39:40:97:a0:8c:d8:b2:27:6c:6c:ba:98:5d:bd:
50:32:11:94:d3:dd:e1:8a:47:19:ee:79:b5:d9:5f:
8e:ba:b9:22:ef:9b:44:72:e2:ee:62:81:2a:fa:1f:
7f:da:02:58:81:40:51:c3:28:29:a6:9b:01:d4:9a:
e5:1a:d5:65:7b:34:38:0f:ba:90:47:c9:be:bb:f9:
74:82:c4:3c:a5:84:93:37:aa:d5:a0:79:12:2a:5f:
22:01:cd:9f:29:1c:22:8e:c8:03:12:4f:94:18:fb:
82:c0:4c:46:43:43:e5:68:cf:ba:71:a1:e9:c5:75:
43:64:c1:75:9d:41:59:47:87:20:b2:79:f3:30:59:
57:e9:1d:e5:17:e6:f9:29:aa:ed:c4:c3:f7:c0:e8:
b9:20:c4:25:22:11:59:da:fc:b5:be:e5:9a:89:f8:
aa:92:1e:95:ac:54:4b:c5:e8:e9:01:96:7a:83:5d:
fb:e7:8a:1d:8e:6f:80:5b:20:73:37:51:a6:61:4e:
88:16:69:23:f9:21:2f:d4:dd:c6:c2:6e:59:41:e9:
7d:51:c0:9d:ca:0b:bf:87:3e:6c:bd:04:77:ac:82:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:87:90:C9:C5:F7:37:44:AD:A4:FF:EE:89:8C:CC:C4:B3:D2:AD:CB
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:44:12:47:70:b9:0c:e9:e8:54:50:48:b2:bf:41:5f:dd:ff:
fb:59:4d:44:f0:85:56:00:c2:dd:84:69:09:89:7a:90:ab:99:
34:ac:11:73:0d:38:13:59:b9:c7:40:3c:30:cb:19:61:0a:ef:
52:1e:6f:aa:95:5d:66:b0:43:ab:f8:95:98:f5:3e:88:08:98:
0f:2a:e4:73:96:7d:18:a0:9d:f0:fa:ce:d7:c2:40:c0:9c:b8:
00:75:d4:13:c1:54:e1:7d:f5:18:c3:25:82:1d:3c:10:b8:b1:
ba:9f:a2:d2:6e:7c:5c:c4:b8:c1:35:e1:d6:e9:d2:b5:e4:39:
1b:bb:b3:32:d2:e8:75:36:73:97:69:e3:68:4b:8a:6f:b7:96:
45:f6:b2:c0:a2:7a:7b:99:19:9f:ac:98:a0:e2:fe:bf:f2:0a:
78:4b:53:d1:6e:3b:ee:48:f2:59:13:3e:bf:c1:9e:19:99:a9:
3b:da:ad:7f:72:81:d3:0e:04:ba:23:9f:43:06:96:7a:2f:3b:
84:da:65:88:da:a8:28:ec:82:70:f7:95:6f:0a:36:22:eb:13:
cd:32:56:13:f4:25:fa:05:22:35:25:1d:7c:31:c6:42:ce:b0:
63:00:90:ef:72:95:fd:1f:7b:e5:ba:5d:44:ae:0c:7b:a7:2c:
3c:29:41:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 23:59:58 2025 by rpki-client