Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: fNDyQFMnVUx2PQJa/mCdOaSNhRuhHaMsYpKVgL3SFPM=
Subject key identifier: 0D:A7:7D:04:D4:6A:CD:6C:C3:CD:06:53:76:90:A5:AC:24:01:C1:CC
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 019621817477FA78156FC39EF2E2AA5BD860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 06B9
Signing time: Thu 10 Apr 2025 21:00:54 +0000
Manifest this update: Thu 10 Apr 2025 21:00:54 +0000
Manifest next update: Fri 11 Apr 2025 21:00:54 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: 74kzzOADntkyY61YpTLAEAFRL9cliIdlbxLuFfVk0G4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:81:74:77:fa:78:15:6f:c3:9e:f2:e2:aa:5b:d8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: Apr 10 21:00:54 2025 GMT
Not After : Apr 11 21:00:54 2025 GMT
Subject: CN=0da77d04d46acd6cc3cd06537690a5ac2401c1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:f3:b5:f1:c4:05:a9:bf:98:6a:c0:3f:2c:
c2:f1:d8:f4:40:d5:16:ee:5c:80:f8:62:34:fc:4a:
39:60:ed:b6:a4:a5:a8:0c:3c:a3:12:c6:6e:d3:26:
53:5c:3f:db:16:30:fa:25:b0:8b:46:64:22:0a:4b:
67:54:e7:67:3c:be:9f:49:9b:b2:71:a3:d4:d8:5b:
99:31:15:a8:a3:e2:f9:26:b2:54:fd:9b:da:6c:96:
11:ca:33:18:8b:45:8c:4b:3c:76:0f:08:50:6d:14:
ce:87:7b:ce:36:48:2a:72:be:55:95:23:73:7d:ab:
6a:66:e9:87:7b:c3:1e:47:f4:1c:fd:90:5c:b5:e8:
2d:ed:8b:8e:d3:24:1e:f0:b9:a2:af:f3:1b:a5:c3:
ce:16:c6:1d:c7:fc:61:a9:32:db:a0:65:81:1f:06:
e5:70:3a:d2:64:20:f1:7e:5d:c6:26:fb:cf:83:3b:
4c:ef:5e:97:32:85:21:37:48:86:94:30:7a:67:6d:
1f:e7:6e:fe:6a:f0:c4:9a:33:ee:bb:5c:45:55:35:
7a:ca:e2:e0:91:af:d3:52:f6:cb:8a:11:1c:37:5b:
8c:40:e0:4d:da:60:e3:54:ac:ca:06:05:46:e4:a0:
af:81:70:d1:dc:d6:7a:04:35:d2:39:0a:4a:15:0b:
93:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A7:7D:04:D4:6A:CD:6C:C3:CD:06:53:76:90:A5:AC:24:01:C1:CC
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:68:ed:e8:61:cd:73:89:31:30:7d:02:0f:7f:3e:b5:13:5a:
d9:56:81:c4:9a:8b:11:99:a3:3a:18:d8:30:17:b5:24:c1:5e:
d7:e2:c0:3e:4a:88:c3:fa:c0:3f:84:84:e6:a9:d3:ce:24:96:
7f:fb:6b:45:61:e1:25:23:10:46:d6:30:6c:9d:7e:e3:af:aa:
68:52:00:5c:92:76:c6:b7:49:e5:64:0e:a7:e4:8c:3d:a9:90:
31:06:ba:f0:cc:11:25:0f:9f:db:e9:2e:89:70:a6:88:b5:5f:
a4:8a:98:5a:c3:3b:a8:d6:03:7b:24:10:e3:1e:4d:e4:2c:7e:
c8:bb:e4:cf:ce:e1:b5:ec:eb:3a:8c:0e:94:fa:65:88:72:6c:
b8:6a:80:7f:37:67:46:a1:58:9a:18:45:27:4c:2c:81:be:ce:
61:3a:2c:f4:d9:db:63:a1:70:83:08:14:93:85:8b:b2:12:27:
14:27:e9:27:21:7e:b2:cd:a3:d5:16:36:90:4f:13:75:00:d2:
0b:83:8e:9a:ef:17:98:5e:7c:c0:f3:22:1b:05:4f:c1:6c:d0:
f4:bb:bb:7a:97:96:f3:a3:5e:46:7b:06:43:3b:4f:6c:c0:11:
66:64:3f:1a:f8:0d:b4:3f:dc:40:a3:b0:d1:2b:36:22:bb:89:
65:f9:af:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 03:46:18 2025 by rpki-client