Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
File: KAWFe6e9XcggxhYmxjNJ47f6p9M.mft (raw, json)
Hash identifier: eHz+/H39EAd6/k11M/AkEXj7qavmJvY7x0WToJ871q8=
Subject key identifier: 0C:EF:4C:AB:B7:30:14:45:67:90:1F:4D:0A:1A:A9:D7:B4:33:3F:2C
Authority key identifier: 28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
Certificate issuer: /CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Certificate serial: 0196759E40AB8F24A69A5E88892F920691BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
Manifest number: 0DA2
Signing time: Sun 27 Apr 2025 05:00:27 +0000
Manifest this update: Sun 27 Apr 2025 05:00:27 +0000
Manifest next update: Mon 28 Apr 2025 05:00:27 +0000
Files and hashes: 1: KAWFe6e9XcggxhYmxjNJ47f6p9M.crl (hash: RYy7KR+habY093ItQ26c/4xV54KnX5kEGS05uqgbyZ8=)
2: QKHWtvbYs2bFm7Yqz1D-noGUUCg.roa (hash: ZmlSUpfzL4PQUwk4jtXCzAOTz3/AO/19cZEbT2JXoOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:40:ab:8f:24:a6:9a:5e:88:89:2f:92:06:91:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2805857ba7bd5dc820c61626c63349e3b7faa7d3
Validity
Not Before: Apr 27 05:00:27 2025 GMT
Not After : Apr 28 05:00:27 2025 GMT
Subject: CN=0cef4cabb730144567901f4d0a1aa9d7b4333f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0d:66:ae:03:12:af:18:f9:7f:4a:2b:24:d2:
93:08:29:1d:74:82:c2:34:eb:71:7a:68:0b:9e:1e:
2b:43:1d:11:d7:ca:4d:bb:09:dd:35:6a:be:2a:3e:
bf:2e:0f:fd:ba:6f:64:84:09:c5:48:04:54:94:2f:
91:f7:2e:33:8e:11:1d:f2:1f:c5:fe:1d:a9:71:69:
56:8f:5f:a5:2a:ff:7b:88:0c:23:5b:3d:c8:39:b8:
66:ab:8c:92:f9:d5:f1:9b:96:76:5a:dc:92:0b:52:
98:d0:d9:0d:08:d4:72:94:76:41:c6:b9:35:6d:b4:
2e:0e:64:18:75:fc:99:37:36:44:a3:eb:e1:30:29:
23:7c:e6:00:c0:2d:f4:a4:67:21:ad:16:e3:89:ca:
05:1d:ac:24:e0:78:66:3f:5c:97:a9:56:9b:b5:b7:
fb:74:f0:18:72:a9:0f:2d:c7:e3:08:ea:33:1d:7d:
37:20:77:54:5b:fe:8f:bc:07:c8:11:a3:de:0c:c5:
3e:ca:a1:4a:dd:82:85:fb:54:0d:e3:16:61:46:7c:
20:02:4a:2b:85:58:c5:7c:0a:51:cd:1c:02:88:2c:
a9:af:0f:4a:1c:00:70:82:91:49:5f:7a:72:fb:db:
96:28:4f:7d:57:be:79:ec:66:91:36:e4:51:2a:12:
6b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EF:4C:AB:B7:30:14:45:67:90:1F:4D:0A:1A:A9:D7:B4:33:3F:2C
X509v3 Authority Key Identifier:
keyid:28:05:85:7B:A7:BD:5D:C8:20:C6:16:26:C6:33:49:E3:B7:FA:A7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAWFe6e9XcggxhYmxjNJ47f6p9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/35a19e-edab-44c9-916a-16b5ebdd2040/1/KAWFe6e9XcggxhYmxjNJ47f6p9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ec:93:af:75:17:2a:9c:6d:9c:92:e0:02:6b:cb:d2:1c:7d:
0b:b0:2c:1f:8a:db:5e:14:c1:b9:70:02:9a:2f:f1:98:b7:80:
d3:9a:81:ba:2b:1b:f2:59:55:e0:44:7f:79:ec:2c:5d:eb:e8:
ca:ee:44:60:e2:34:bb:6d:af:23:09:47:45:54:82:30:86:8e:
45:1d:12:06:73:a6:69:34:8a:5c:5b:df:79:ef:8f:1a:64:e2:
fc:df:76:7a:27:cf:bb:28:d9:92:0d:7c:e9:56:07:6f:4e:8b:
c2:f5:7d:93:6a:57:7a:b5:1d:90:3d:1a:85:6a:29:ec:e6:a2:
2e:3e:b9:af:16:11:87:ac:47:07:ec:8b:26:84:93:69:f6:7a:
bc:b8:b8:83:bc:7a:23:c4:c1:7e:d1:87:eb:b3:5f:77:8a:6f:
51:87:1a:59:5a:e0:c2:a4:d0:09:52:69:6b:69:b8:1b:fe:73:
2d:c9:c4:43:b8:92:75:8f:70:7f:9e:95:f1:b9:8c:08:3d:8b:
9a:5b:e0:ff:68:49:20:04:d7:ee:46:27:20:fe:ee:58:a4:4e:
bb:fa:1f:42:1a:6b:6e:00:90:cd:73:23:74:e1:7e:3e:af:34:
0a:17:1a:ed:4a:b4:81:11:57:db:4d:c5:60:ff:b3:78:5e:f5:
3c:d8:76:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:53 2025 by rpki-client