Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
File: kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft (raw, json)
Hash identifier: OO8X1CWit18G+2Nrl36ebDixBm8wMEXAxfw3VLZ+HqQ=
Subject key identifier: 20:07:62:A7:8D:01:A0:DD:3A:5E:49:0C:86:29:25:E0:61:E8:EE:CE
Authority key identifier: 92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
Certificate issuer: /CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Certificate serial: 019677FB0A24799DD993C8B3350AA90D9733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
Manifest number: 0C2B
Signing time: Sun 27 Apr 2025 16:01:02 +0000
Manifest this update: Sun 27 Apr 2025 16:01:02 +0000
Manifest next update: Mon 28 Apr 2025 16:01:02 +0000
Files and hashes: 1: kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl (hash: mwjSCBYD5ZbmTVWhaI0chvetn4mKccBh4OInmfMVy28=)
2: o0NNJAdQ09Zlx7io8L7w4JsxeRk.roa (hash: GHDYyjn7cWOGvu2PuaUkyCHLa21ud2IleT+Ydwgziyc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:0a:24:79:9d:d9:93:c8:b3:35:0a:a9:0d:97:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f85622e22fc96ceacf73114d890f4f3aa7d495
Validity
Not Before: Apr 27 16:01:02 2025 GMT
Not After : Apr 28 16:01:02 2025 GMT
Subject: CN=200762a78d01a0dd3a5e490c862925e061e8eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:7d:2e:77:dc:46:a8:03:2f:37:5c:ef:72:
b7:1c:72:c1:3d:d8:8d:65:a4:54:fc:8a:3d:74:80:
ea:9a:da:e8:56:96:6c:5c:6e:a4:cb:f5:a9:0c:c6:
50:16:67:5b:fc:79:ce:b3:c0:f8:f3:e6:31:ad:53:
ec:79:e8:62:6e:99:b4:35:ff:aa:04:70:7d:de:34:
db:ba:3c:6c:ae:7f:eb:7c:27:86:2c:50:df:f9:b1:
06:8c:42:13:a4:59:e4:c7:a5:7f:8a:4a:65:98:9d:
3f:22:78:4c:8c:2e:7a:f7:69:bf:d1:a4:79:51:93:
97:3f:e7:68:c3:20:26:5f:49:41:cb:9d:ed:d9:bf:
c3:f7:cf:2c:89:7c:ea:86:b7:ff:46:37:cb:c6:7c:
07:e0:f4:60:29:81:7c:a5:f2:03:d9:26:03:72:8a:
59:d3:4f:b8:ad:27:30:34:43:c8:58:b1:22:05:7d:
a4:3e:e1:b6:8e:2f:a7:e4:71:66:2a:06:22:e6:75:
9e:55:d2:3a:74:6d:07:2a:16:9b:2a:f4:fe:c5:f7:
2b:4b:ec:ef:b3:48:cd:f2:e0:44:90:0e:25:f6:0f:
ab:b3:6a:20:8c:d8:c0:44:38:08:c3:71:28:0a:0e:
87:16:47:bb:3f:a2:ff:41:ae:51:d4:98:55:c4:26:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:07:62:A7:8D:01:A0:DD:3A:5E:49:0C:86:29:25:E0:61:E8:EE:CE
X509v3 Authority Key Identifier:
keyid:92:F8:56:22:E2:2F:C9:6C:EA:CF:73:11:4D:89:0F:4F:3A:A7:D4:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvhWIuIvyWzqz3MRTYkPTzqn1JU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/1000eb-ffd0-4fe3-b7af-0738c2334e7f/1/kvhWIuIvyWzqz3MRTYkPTzqn1JU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8f:e8:fd:21:ac:61:90:54:46:67:b7:b3:45:2d:fe:55:6a:
f9:33:9d:76:9f:65:e3:4e:22:d1:cd:d1:df:f3:03:72:54:ea:
3c:a6:3c:d6:d5:a6:50:b8:62:14:5b:1a:cc:7e:45:e9:b1:a0:
4b:36:b4:2c:5b:9a:87:43:cb:ff:9f:1b:97:0c:1d:41:f6:ad:
b5:f3:db:b2:90:64:52:46:89:0e:04:4b:84:67:e8:d3:3d:46:
7d:93:fe:0f:06:e7:54:af:dc:6c:97:fb:3a:fc:2a:8c:65:72:
74:0d:3b:d1:fa:51:51:cd:94:b5:37:77:04:1b:92:45:a5:f1:
82:39:5c:01:59:d0:90:96:d4:ec:e6:3b:23:bd:58:82:0f:c0:
b8:4f:90:49:3f:cf:c7:23:05:cf:a8:01:ae:f2:4f:a7:62:93:
b2:08:02:e9:d6:d5:18:1f:eb:61:e9:cb:da:72:79:6c:df:1c:
96:fb:ee:27:60:f4:26:d8:96:cf:66:2f:6b:e4:99:28:f9:db:
2c:f0:a4:88:c0:c5:a3:5b:7f:dd:2f:83:3b:b7:b1:34:b1:5a:
98:fd:94:e4:83:18:cd:41:ae:10:21:62:72:80:85:fa:e4:8c:
90:cb:87:0f:67:28:dd:62:59:8a:c3:49:dd:40:10:56:6b:ce:
d9:75:91:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 20:56:48 2025 by rpki-client