Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: U11saTLRZTSSdszwCFiqX7jukzWEVutpJb0bwT2jxnA=
Subject key identifier: C1:CC:ED:6B:08:C5:2A:74:99:B4:DF:8A:46:71:17:42:DC:54:81:E0
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 01965D5F402ADBA1563E1497A256E5B1B420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 12:00:45 +0000
Manifest this update: Tue 22 Apr 2025 12:00:45 +0000
Manifest next update: Wed 23 Apr 2025 12:00:45 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: oMaY6vCu59S/al1/cyA9hOUGjih4LWtjov0swS2gntU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5f:40:2a:db:a1:56:3e:14:97:a2:56:e5:b1:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Apr 22 12:00:45 2025 GMT
Not After : Apr 23 12:00:45 2025 GMT
Subject: CN=c1cced6b08c52a7499b4df8a46711742dc5481e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:83:96:64:6c:ae:59:32:2c:ec:29:d7:6b:bb:
72:b2:24:a0:0e:61:b1:82:9d:fe:85:77:4f:d5:06:
b9:53:ca:e9:14:d1:fc:9f:53:b0:c9:40:61:36:05:
33:ac:55:88:fe:1f:99:cf:c2:03:c3:5b:98:a5:3f:
96:4b:ec:b5:36:66:bf:83:92:e6:8e:d8:4c:3b:f7:
78:4c:7d:24:f2:a8:fa:12:25:70:55:53:98:80:59:
93:28:a6:01:15:b6:da:e0:d5:6e:4e:4e:0f:ee:67:
4d:33:50:65:31:36:5e:2e:f3:00:80:fc:50:3b:d4:
81:b6:29:4b:91:95:53:7d:e0:4d:26:53:60:19:44:
07:1e:7a:5f:31:d9:cc:13:4c:28:cc:a8:60:58:f9:
2e:5b:d8:68:62:36:45:be:8d:c5:e3:97:c1:e4:c2:
2e:f3:86:f5:fd:ea:db:74:b0:75:ff:3c:45:f0:f2:
7b:40:51:2f:56:4e:24:21:26:f2:05:2b:82:6c:e1:
4c:88:55:f8:2f:d2:c4:f0:93:90:9e:6f:93:bc:82:
06:e1:cf:eb:4e:aa:c5:57:18:d2:94:d5:87:c5:70:
ae:f3:7e:41:e8:8c:88:87:6f:09:7c:25:6e:1b:2a:
57:a7:1b:ac:b9:b1:69:d5:70:d9:80:94:39:e6:d9:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CC:ED:6B:08:C5:2A:74:99:B4:DF:8A:46:71:17:42:DC:54:81:E0
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:6d:b6:1d:e4:39:1b:20:df:2a:2b:26:3a:d7:03:ae:61:a8:
df:62:a0:a6:89:50:12:5b:ef:47:f6:99:0f:eb:12:a0:e3:e1:
40:7d:fb:df:49:d8:7b:12:45:e7:23:59:95:71:cd:5d:88:28:
13:e9:a8:d0:52:9a:37:3d:52:93:47:11:0e:bf:84:53:88:01:
dc:08:1d:d1:6d:26:18:ab:a8:d5:5e:0f:4e:2e:37:d9:b7:48:
a1:e7:cf:14:53:bf:ec:48:5f:ac:71:87:c1:8d:34:7e:fe:a1:
3b:da:6c:a0:8b:ce:63:b9:94:a3:0f:67:ad:a7:f1:0b:50:3a:
e0:81:e3:5d:28:48:e9:10:ba:e1:94:c8:25:6c:6a:1e:36:f4:
90:8e:81:a9:ad:8a:10:2c:0d:85:a4:a7:cd:83:e6:57:3b:c6:
fa:79:40:02:12:e5:b8:7c:39:1f:52:fc:35:c5:de:97:a1:4b:
e8:b1:ae:73:11:de:f3:64:f8:ad:12:8a:5f:26:1f:bf:5c:c5:
4a:83:24:2d:82:ac:e0:55:14:25:2e:b9:e8:2c:1d:77:79:3a:
4a:88:c4:7a:36:45:35:d9:25:55:32:90:1c:1d:3d:0a:1c:a5:
07:1a:78:1e:46:a0:27:80:2a:84:a6:7a:55:b1:91:18:45:61:
9f:e2:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:25:27 2025 by rpki-client