Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
File: KAabTsBHxsLYCkmS5CKLMXzIsgw.mft (raw, json)
Hash identifier: OzGP9ErvX7lXKclUejPgwBg7wiCaiRPP2e7Q0D1V+kw=
Subject key identifier: 0C:DC:3C:B4:B9:A6:B2:C6:A6:18:C1:11:DD:F4:AA:82:06:B8:2E:12
Authority key identifier: 28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
Certificate issuer: /CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Certificate serial: 01967567A8CF6C355FB1744C755EA5FC7CA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
Manifest number: 0E1D
Signing time: Sun 27 Apr 2025 04:00:49 +0000
Manifest this update: Sun 27 Apr 2025 04:00:49 +0000
Manifest next update: Mon 28 Apr 2025 04:00:49 +0000
Files and hashes: 1: KAabTsBHxsLYCkmS5CKLMXzIsgw.crl (hash: Aj7+idg2hS9SKQR995XWs7L5dtYrUFRsfJaMNnfPRjE=)
2: z5t3MUctHGLyNYnasAsmy7myIE0.roa (hash: mO/iLAoYiC6aPBgVm4fsRrMygy6NYm/K/6/lkuaPce4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:67:a8:cf:6c:35:5f:b1:74:4c:75:5e:a5:fc:7c:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28069b4ec047c6c2d80a4992e4228b317cc8b20c
Validity
Not Before: Apr 27 04:00:49 2025 GMT
Not After : Apr 28 04:00:49 2025 GMT
Subject: CN=0cdc3cb4b9a6b2c6a618c111ddf4aa8206b82e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:fd:ce:25:43:26:0e:46:0b:8e:02:51:fc:
18:3c:3f:a0:6e:b4:16:3f:f7:66:79:a0:a5:12:88:
75:e6:49:63:af:35:03:6a:f6:a5:c1:76:d8:af:9f:
06:f1:c7:fd:a1:b0:26:43:25:e9:f1:2a:42:9a:00:
ef:2f:f2:c2:f5:87:59:0b:30:ca:76:0c:5d:72:93:
d6:a0:98:bd:f5:7c:43:68:a3:af:9b:14:c3:96:34:
97:1b:db:71:0c:e0:f6:97:ed:92:f9:60:2e:b2:4f:
e3:4f:18:3e:da:bd:f5:3b:d6:5c:10:d3:19:2a:6e:
0d:2f:f2:5b:ea:56:5a:5f:03:0d:a2:99:31:76:51:
bc:9c:b9:1f:3f:14:e6:65:a6:71:77:4c:71:73:be:
d8:4d:70:2b:6f:98:85:79:eb:75:a9:50:8d:43:9a:
67:30:27:ad:fa:41:16:a7:75:3a:4c:78:fb:c5:5c:
12:e7:4d:c7:ea:ab:e7:63:70:3e:a6:0a:5f:76:98:
1a:fe:51:4c:91:4e:a2:66:33:4c:f2:be:db:1e:5e:
84:9d:bd:b9:7f:fa:0e:ee:50:f0:10:93:bb:97:75:
9d:01:69:b3:05:f2:dd:bb:ca:69:12:51:a8:fb:b9:
0b:ca:97:42:0f:ec:d6:82:7a:d1:22:37:9c:0b:50:
89:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DC:3C:B4:B9:A6:B2:C6:A6:18:C1:11:DD:F4:AA:82:06:B8:2E:12
X509v3 Authority Key Identifier:
keyid:28:06:9B:4E:C0:47:C6:C2:D8:0A:49:92:E4:22:8B:31:7C:C8:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KAabTsBHxsLYCkmS5CKLMXzIsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/024554-7aa6-4c9f-a487-df7b45be46c7/1/KAabTsBHxsLYCkmS5CKLMXzIsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a2:96:d2:4a:0d:85:76:f4:40:d7:bb:41:4a:3e:18:e0:9c:
4d:0c:5e:30:70:62:8d:a4:96:88:d7:66:0a:34:4a:6f:aa:c0:
a7:87:70:a1:00:51:d9:2f:d9:c0:d2:74:cc:fa:3a:69:db:e2:
9f:63:2a:e0:e4:81:a0:13:9a:8c:8a:bf:db:fa:db:d3:68:09:
8b:d4:70:9b:a1:ad:46:7c:91:4a:1f:95:69:29:f8:27:e4:3d:
b4:32:9c:87:cd:b1:c5:36:36:85:0f:ad:50:68:6f:50:84:b3:
b8:60:a3:92:5e:fc:3a:c5:58:ef:73:97:e9:1e:26:63:10:b4:
90:a9:8f:9b:03:16:7d:bf:57:55:57:07:9f:ad:6a:ac:2e:00:
d0:52:4e:bb:79:87:22:69:a7:bb:3b:74:a4:7a:98:c2:4c:d2:
2d:a1:77:87:dd:39:5b:3c:29:34:9b:d7:da:02:6e:94:e9:b5:
67:e2:11:06:1d:8c:56:4d:ae:a1:e6:cc:1e:11:0b:18:f8:5f:
bd:8a:15:94:b2:39:4c:62:c2:26:f6:c7:62:40:44:9a:a2:24:
01:f5:35:2a:e6:1e:93:5d:2f:3f:da:dd:a9:37:45:8a:37:c3:
c4:50:3c:a0:b7:6f:39:95:02:78:9e:4d:33:5b:02:90:ed:22:
6a:10:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:07:50 2025 by rpki-client