Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: BNAqietTh8M9AvX75TgreK24YbyE4d5gH2p4Y6qIQWQ=
Subject key identifier: 5E:A8:79:3E:63:85:09:8A:AA:1A:72:91:56:39:13:FA:4C:93:64:24
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 019606417F2FEDFF3D4C0DEA1FB76D2E4ABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 05BA
Signing time: Sat 05 Apr 2025 14:01:17 +0000
Manifest this update: Sat 05 Apr 2025 14:01:17 +0000
Manifest next update: Sun 06 Apr 2025 14:01:17 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: 0wwo488nQiBJMqoG7bDWHkqMS2jAzTpK1IhAZfKmCBU=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:06:41:7f:2f:ed:ff:3d:4c:0d:ea:1f:b7:6d:2e:4a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: Apr 5 14:01:17 2025 GMT
Not After : Apr 6 14:01:17 2025 GMT
Subject: CN=5ea8793e6385098aaa1a7291563913fa4c936424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3f:d8:90:21:8d:f5:fd:04:fd:ee:63:6e:a4:
c9:9a:9b:3e:bd:ee:89:a6:4c:e6:f8:62:31:e1:41:
ba:3f:c9:bf:ab:7d:07:9a:37:29:01:68:05:f8:d5:
1e:39:0d:c0:19:40:64:a5:ad:44:aa:e4:d1:59:8b:
a7:77:f5:95:71:a9:9d:6f:35:ad:3d:e7:d7:cd:55:
4a:a7:96:2e:fc:16:39:c6:0c:e3:38:16:61:c1:89:
5f:8b:d5:c8:fe:49:d5:85:29:29:a7:29:ac:09:ce:
70:fb:b2:3c:dc:43:a0:b6:16:06:db:53:6b:b2:ad:
20:17:dd:ab:d8:85:03:3b:d5:1b:8a:55:8b:d1:19:
83:13:d9:c8:47:f1:ce:83:75:27:f6:41:46:c8:d3:
53:07:a2:0d:5d:61:32:57:00:06:51:24:a3:43:9f:
92:ce:a3:5a:60:54:9d:a7:a4:64:fd:2d:db:f8:87:
0c:d5:28:d5:73:d4:f0:5b:ef:91:52:92:76:f7:6d:
14:7f:c3:45:65:87:c7:6c:e3:b6:f3:7c:4c:20:cc:
94:ba:37:29:85:81:42:9a:97:b8:39:f2:ed:f0:7e:
f7:8d:6f:69:40:d8:93:01:de:71:65:5d:29:e3:dd:
2b:28:f3:3c:cb:75:bc:3b:7d:70:f3:78:55:3e:1f:
2c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A8:79:3E:63:85:09:8A:AA:1A:72:91:56:39:13:FA:4C:93:64:24
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:c1:ed:54:72:57:78:6e:d4:2c:c4:49:02:a5:ea:69:e0:7c:
ae:b7:e8:77:43:bd:48:56:ca:34:dc:cf:b9:06:51:eb:5d:e5:
6c:64:4e:37:09:90:67:e8:4c:1d:65:d3:f0:d3:2a:32:80:b0:
ca:19:f9:99:e2:2f:4c:0d:0d:c5:f3:08:90:57:b8:26:62:49:
b3:3b:41:ac:d0:a3:1c:99:aa:90:f4:a0:c3:bd:80:fa:68:f7:
7a:cc:51:e0:e5:56:9f:16:1e:fa:29:63:79:15:ae:c4:21:81:
90:2a:66:bc:4d:a1:87:36:35:be:57:02:97:a4:d4:d5:8f:91:
3f:bf:96:1c:47:ec:ba:dd:10:37:7f:84:47:57:81:12:7e:4a:
b6:ad:ca:58:f8:bf:66:98:87:f2:26:fc:94:1d:55:cc:cd:9d:
69:9c:f6:69:84:7f:6b:97:80:e4:81:75:ef:f5:27:c2:c0:e1:
77:70:5d:c5:4f:47:d8:de:77:58:53:73:12:52:c4:ff:5a:62:
4e:00:b9:16:37:bd:35:93:3d:23:bf:ac:c3:98:1c:7d:f1:ec:
48:df:6a:22:57:4a:84:2d:8c:e9:bc:5e:18:60:48:5a:fe:3d:
45:28:9d:80:f9:db:45:a7:3b:94:89:94:a5:40:b3:a5:6e:1c:
d7:09:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:06 2025 by rpki-client