Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: qqMEDMlJSH/BJmcJmWHeVfMqvNRsX58bxO2Wm38DPjA=
Subject key identifier: DF:DD:11:84:08:AE:DC:36:FD:04:47:A2:53:27:E6:92:8F:50:9F:C2
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 01962B2A0656B4F5A043D62ED6E41DDAC817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 0E54
Signing time: Sat 12 Apr 2025 18:01:36 +0000
Manifest this update: Sat 12 Apr 2025 18:01:36 +0000
Manifest next update: Sun 13 Apr 2025 18:01:36 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: r4TSYOiPkQpehHYeHmN6JdrzDyzLNP2YZDlTHaNKfNU=)
2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2b:2a:06:56:b4:f5:a0:43:d6:2e:d6:e4:1d:da:c8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Apr 12 18:01:36 2025 GMT
Not After : Apr 13 18:01:36 2025 GMT
Subject: CN=dfdd118408aedc36fd0447a25327e6928f509fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:46:3b:06:bf:29:aa:95:ea:a3:a0:83:9b:54:
e5:fd:58:62:d8:d5:d9:19:ad:37:56:c8:20:f6:9b:
41:c3:b8:0b:1d:61:b0:76:ce:7b:73:46:7d:4c:b4:
ce:a8:a3:12:23:d7:c7:db:ed:b9:cb:bc:c3:46:c4:
44:8a:2c:ac:95:2c:48:49:74:94:97:64:97:60:ff:
16:eb:50:d3:8f:16:b6:be:8d:86:2c:9d:7c:d7:78:
1e:37:1c:f7:ec:71:0d:2f:cf:34:b4:0d:d7:c8:cd:
d8:e6:76:f9:57:92:25:97:df:8f:e4:95:76:0c:08:
53:02:b2:3c:c4:bc:af:d5:21:9f:61:87:9a:66:32:
52:52:0d:67:c2:03:66:e7:1b:e8:ae:ad:b3:2c:37:
94:d6:ef:a7:9e:d3:87:e0:30:81:74:99:50:0e:2b:
3d:5d:09:39:c6:15:88:ae:6e:0b:23:9f:79:f0:d9:
98:eb:15:e6:18:0a:a3:b0:a6:f6:5e:af:28:89:27:
fc:e4:72:d6:d6:64:e0:1d:67:60:24:e0:ec:63:e6:
e0:07:9c:f3:55:e4:d8:12:e0:11:97:86:e8:28:d3:
28:ec:96:21:46:03:7d:90:80:08:a2:6d:cb:eb:0b:
8d:e9:71:9d:e8:97:50:2b:30:5d:c8:df:c3:81:3c:
7f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:DD:11:84:08:AE:DC:36:FD:04:47:A2:53:27:E6:92:8F:50:9F:C2
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:bc:0b:39:46:ed:a5:e9:31:03:93:7f:52:36:ea:37:34:6b:
6e:2a:aa:e9:65:ef:92:f8:1d:e5:c0:7c:2d:0a:1b:30:13:3b:
55:c8:85:c3:8b:46:56:e3:aa:78:6f:0b:44:9d:f1:c1:6f:70:
e7:13:b6:50:f5:8f:ee:32:46:46:cb:06:f0:6e:2a:b3:61:91:
3c:7f:49:5b:c6:41:a1:94:27:57:71:c9:7a:2e:99:f1:12:32:
e4:22:4a:0a:7f:95:7b:e6:4a:63:e4:f1:24:88:fd:dd:ec:d5:
e9:a5:bc:f8:c4:fa:58:c0:5c:5b:80:a7:06:57:b1:e0:61:86:
63:ca:02:7b:e3:23:0d:c4:36:8e:7c:54:56:b0:cc:a5:f6:47:
1f:09:32:db:68:7d:09:9e:df:6e:89:16:28:63:ed:af:bb:b8:
8d:ef:70:6f:0a:1c:51:1a:86:ec:66:3d:c8:52:34:11:55:49:
59:db:f3:11:14:95:16:a3:8f:26:59:7d:02:2b:0a:f2:e3:b8:
ec:31:a2:6a:8d:1f:24:f9:42:e6:48:ad:1d:13:92:41:87:55:
69:6a:cf:23:4b:bc:fa:5f:8e:fc:ae:7f:26:03:4f:5d:3d:a5:
d5:8f:c2:28:ca:c1:03:62:6b:31:b2:3a:42:95:2d:df:0b:7e:
40:10:b8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 03:41:10 2025 by rpki-client