Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: injHo7MmQN4o2MOwcTCQuW/W5iEg5maCyEvGjSYZwrQ=
Subject key identifier: 53:F2:11:1A:A7:DF:D1:56:20:D1:10:16:D6:63:AA:16:28:C9:5F:34
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 019674FA3B1FCAD70A92BE25F89E01310806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 085C
Signing time: Sun 27 Apr 2025 02:01:17 +0000
Manifest this update: Sun 27 Apr 2025 02:01:17 +0000
Manifest next update: Mon 28 Apr 2025 02:01:17 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: AHOgbOC/WlXTL0Wr25Di1hGoohTXn4qam+gfVTYaefU=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:fa:3b:1f:ca:d7:0a:92:be:25:f8:9e:01:31:08:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: Apr 27 02:01:17 2025 GMT
Not After : Apr 28 02:01:17 2025 GMT
Subject: CN=53f2111aa7dfd15620d11016d663aa1628c95f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:91:c0:c8:4b:85:7b:3d:79:7b:e6:6d:bc:32:
5a:ec:47:3d:f7:d1:c3:c6:3d:9d:5a:e7:a9:66:e0:
fd:ed:2e:8f:a1:48:49:7a:87:8e:d0:5e:bf:6c:da:
e4:8f:b4:25:ba:99:1f:44:f0:d2:85:5d:99:6e:82:
23:5b:e1:d1:e7:6b:5c:ed:36:27:90:66:b9:79:0b:
36:93:c1:b9:d4:0d:5d:79:9b:c4:a9:b6:8f:d5:5e:
b3:23:99:42:03:59:e4:13:1f:92:85:72:41:86:89:
57:64:75:94:e3:b7:8a:dc:be:1c:9d:9a:44:c2:93:
43:cb:5e:42:23:bd:2a:4a:c3:87:8f:f0:44:27:75:
5e:89:27:90:97:08:24:79:72:a9:fc:c7:33:77:35:
46:36:d5:b1:a0:3a:36:16:e5:2c:ec:77:02:78:85:
03:f5:99:a8:57:9e:f9:0f:5f:77:f7:73:06:b3:ff:
13:a4:68:3f:eb:22:a0:31:d4:b4:44:93:20:ee:0c:
90:ac:48:4b:38:ca:40:63:ed:e2:8d:57:e0:93:a2:
fc:5e:85:58:95:9f:63:6d:8e:bd:83:25:1f:2b:a0:
87:7c:cb:aa:46:70:a8:61:16:ac:97:69:6d:33:d1:
3b:f8:b6:15:11:d8:82:56:e2:30:9c:dc:c1:b2:4b:
9b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F2:11:1A:A7:DF:D1:56:20:D1:10:16:D6:63:AA:16:28:C9:5F:34
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1f:70:f1:44:54:af:7a:3f:03:88:77:07:fc:c6:8e:91:9d:
11:71:44:fa:15:a4:09:49:84:a5:6b:fa:29:a7:4d:3a:48:4b:
52:d3:f1:47:48:4c:3d:f6:5b:a6:65:93:89:a9:80:73:dd:f0:
30:f8:59:71:24:30:fd:1a:e4:c2:a5:69:8a:21:9e:0d:ce:ab:
f9:67:a2:c7:8e:09:5e:b7:52:c2:d1:cc:00:bb:76:bf:1b:41:
88:b8:ef:52:f0:3b:ef:4a:a6:5f:be:4b:62:8a:f4:2e:43:63:
86:0d:41:da:73:fa:48:33:7c:aa:9a:f4:4e:47:51:88:7f:cf:
e3:d4:91:bf:49:38:db:f4:7d:69:4e:b2:5f:66:63:4c:4a:46:
d1:c3:6d:91:54:0c:a7:21:d4:74:55:8c:16:b3:3d:f4:ae:7a:
42:f5:35:75:f0:fb:6f:3b:df:49:fc:6b:27:37:7d:50:83:06:
3e:a6:3e:83:39:d6:86:08:4a:95:a5:e0:a3:a3:3c:4e:de:97:
f0:e2:26:53:28:01:6c:55:9f:25:6e:5c:34:58:86:e3:42:22:
74:ab:1b:fe:0d:94:a4:ae:ef:63:47:4b:47:5e:b2:4f:77:d2:
3c:37:49:68:ba:69:13:fa:23:2a:fe:2f:c5:0f:c9:7d:b1:e3:
4f:a0:f9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:49 2025 by rpki-client