Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
File: kFHan04DQdDI3l6sVMY6EenvW18.mft (raw, json)
Hash identifier: NDJWcnp7DpTnpmDNujn9K9SzxrfLsTCJnLgT+u3nogE=
Subject key identifier: FD:91:FA:D3:E2:AA:51:4D:F3:64:A4:A1:B7:7E:F5:F7:40:79:A6:3B
Authority key identifier: 90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
Certificate issuer: /CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Certificate serial: 0196821098AF63697A1E9A792D706BBAC0A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
Manifest number: 0BD2
Signing time: Tue 29 Apr 2025 15:00:47 +0000
Manifest this update: Tue 29 Apr 2025 15:00:47 +0000
Manifest next update: Wed 30 Apr 2025 15:00:47 +0000
Files and hashes: 1: kFHan04DQdDI3l6sVMY6EenvW18.crl (hash: U764Kq2eu8uJGVzOd0GQQundCE9EMVylhAklyLy8MVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:10:98:af:63:69:7a:1e:9a:79:2d:70:6b:ba:c0:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9051da9f4e0341d0c8de5eac54c63a11e9ef5b5f
Validity
Not Before: Apr 29 15:00:47 2025 GMT
Not After : Apr 30 15:00:47 2025 GMT
Subject: CN=fd91fad3e2aa514df364a4a1b77ef5f74079a63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:63:e7:48:76:bf:2c:72:16:f0:1a:e9:f9:
98:98:8c:6f:5e:a7:4e:ea:b0:a8:7a:9a:4a:32:00:
f4:80:0d:ed:42:ec:48:fa:cd:ed:29:a5:c4:d5:f4:
96:5f:11:00:df:85:73:c6:33:42:7a:50:23:0e:78:
41:3d:ce:cd:4f:cd:bb:46:54:3f:54:de:c9:50:66:
bd:16:97:bf:f0:0c:02:f1:50:2b:7b:ea:a9:b8:dc:
cc:44:4b:c3:b8:5f:58:54:82:45:30:3b:7f:ca:20:
d1:9f:fe:af:13:4a:82:ac:1b:e5:12:31:3e:64:2b:
ba:40:a7:72:5a:59:5e:e8:c3:ba:b9:50:64:c5:32:
35:0b:e0:99:73:2a:83:bd:3c:72:ba:77:f0:00:aa:
0e:03:24:69:aa:8d:69:82:26:3a:c6:eb:a2:0a:f5:
a3:ff:c2:3a:ac:71:eb:c8:c8:32:65:42:b1:c8:f9:
0e:34:0d:b7:3f:d4:ad:1a:50:60:8c:31:46:27:cb:
e1:45:82:69:a2:ff:78:0f:15:12:d9:d6:86:2e:98:
df:ab:7a:8c:d6:8a:bd:a7:d6:8e:9f:d8:68:94:3b:
16:7e:57:ef:d4:07:5c:55:a6:ef:0c:27:bd:69:8b:
0f:df:10:b2:4e:55:0d:14:2c:73:31:39:ba:61:00:
64:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:91:FA:D3:E2:AA:51:4D:F3:64:A4:A1:B7:7E:F5:F7:40:79:A6:3B
X509v3 Authority Key Identifier:
keyid:90:51:DA:9F:4E:03:41:D0:C8:DE:5E:AC:54:C6:3A:11:E9:EF:5B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kFHan04DQdDI3l6sVMY6EenvW18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bc1c4-2b7b-40ee-9181-9b34428ed424/1/kFHan04DQdDI3l6sVMY6EenvW18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:bc:59:35:e6:b6:03:d0:b2:30:0a:64:7c:5f:89:9e:2a:d4:
be:da:b0:fd:02:ba:92:60:6b:b4:8d:2d:c9:f0:89:04:09:39:
c0:d8:16:4d:04:8b:ef:b3:63:eb:bb:0d:78:80:9e:3e:48:b6:
82:26:43:d2:32:82:ec:5b:1c:7b:ec:ca:de:f6:ad:07:4a:a7:
d3:06:36:8d:49:a9:d5:a0:f4:32:fc:82:18:a6:37:52:44:a7:
1e:6e:86:13:0a:98:ae:ae:e1:c3:86:c8:45:d0:7d:d3:2b:92:
af:cc:09:c7:38:0a:e2:75:40:42:7f:70:1b:0a:5f:3b:88:f7:
54:50:dc:93:56:52:69:3a:f8:e8:cf:86:5f:0d:c7:26:1e:e0:
a9:a4:6f:54:a9:b4:d7:30:05:e8:b0:2d:73:c3:ac:a8:0b:b4:
69:11:e9:3d:f3:c6:62:28:0b:ea:55:79:91:29:37:5a:aa:e2:
a0:67:29:cc:76:b2:9e:26:5b:49:73:81:9a:a8:d9:f5:02:ab:
a8:64:d3:0a:b4:11:01:ff:fe:af:90:2f:3f:87:43:92:52:76:
76:91:81:1f:fa:47:5a:0e:66:66:af:70:f9:55:12:af:9c:65:
45:68:74:6f:76:a5:93:aa:a0:1f:6e:69:41:8c:83:2e:bc:6c:
00:97:5f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:45:22 2025 by rpki-client