Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
File: KNyB6jid1qrE77w01S13jrp6f8Q.mft (raw, json)
Hash identifier: TG0N+Anu6so3Qo+nRWnwjGGUzgAg0jTowROKp9Zytiw=
Subject key identifier: 8C:C9:35:A2:62:FB:CF:69:10:D3:B4:C9:36:02:EE:82:13:2F:8A:03
Authority key identifier: 28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
Certificate issuer: /CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Certificate serial: 0196A4D2F76A85D0AEC85E9D9244033A333B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
Manifest number: 14AA
Signing time: Tue 06 May 2025 09:00:11 +0000
Manifest this update: Tue 06 May 2025 09:00:11 +0000
Manifest next update: Wed 07 May 2025 09:00:11 +0000
Files and hashes: 1: KNyB6jid1qrE77w01S13jrp6f8Q.crl (hash: UkA2r2nASJjuYQ3OqNcf6MvEqw8S042vdn8XN4u9YNg=)
2: jzeNLpSr6ZsmMJ4zfkQyfVqA2rE.roa (hash: DE+RSjvcm7xMKntvmhh9CpWW/88iCje6f36L/NDszxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:d2:f7:6a:85:d0:ae:c8:5e:9d:92:44:03:3a:33:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28dc81ea389dd6aac4efbc34d52d778eba7a7fc4
Validity
Not Before: May 6 09:00:11 2025 GMT
Not After : May 7 09:00:11 2025 GMT
Subject: CN=8cc935a262fbcf6910d3b4c93602ee82132f8a03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:85:5f:6a:6f:62:70:a8:fb:27:c4:57:d9:
80:10:41:45:45:e7:9b:c3:04:78:f3:2f:51:ba:2f:
b2:14:bf:e5:0e:8b:01:e8:0a:2e:97:d0:69:fb:22:
95:70:78:e7:8f:af:97:d9:d5:fd:d8:e1:3f:d7:b6:
bd:c4:98:39:ae:65:37:9c:96:55:af:be:66:d5:0a:
27:22:fc:29:b4:0c:ec:e4:6c:a6:fa:f3:e6:9f:b3:
47:7f:d9:a7:5d:ad:a5:c1:be:a3:69:e1:e9:7c:83:
76:b4:cc:26:c1:0e:83:e4:28:f1:85:da:47:13:01:
5b:2f:d7:ba:71:65:d7:92:c7:87:4d:80:7b:a8:ec:
fb:7d:04:64:a8:fd:bc:57:7e:08:e4:3a:e7:46:60:
9d:db:58:da:f5:e6:3c:65:8a:a0:60:34:69:b8:85:
a1:4c:b6:72:bb:55:5f:6f:68:fa:59:c9:4d:fe:bb:
08:19:e0:61:42:14:22:5c:ff:f9:2f:f6:8d:57:52:
e3:b1:12:a4:28:f4:f8:70:47:b3:a2:9f:1e:1a:bf:
e1:53:f8:9e:d5:a8:14:ad:89:d1:5a:7d:2c:cd:d1:
de:14:9d:02:85:f4:9d:7e:f8:f5:b9:82:de:0f:45:
a2:68:10:9e:53:f0:6d:35:f6:45:f0:40:c9:6d:6d:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:C9:35:A2:62:FB:CF:69:10:D3:B4:C9:36:02:EE:82:13:2F:8A:03
X509v3 Authority Key Identifier:
keyid:28:DC:81:EA:38:9D:D6:AA:C4:EF:BC:34:D5:2D:77:8E:BA:7A:7F:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KNyB6jid1qrE77w01S13jrp6f8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b69c6a-b788-4a1f-9c5d-c07fff746938/1/KNyB6jid1qrE77w01S13jrp6f8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:4a:59:f7:75:f5:85:71:ef:fb:7b:7b:67:7c:25:15:2b:39:
67:ee:e7:70:ee:fc:37:d0:b4:de:13:6e:1c:4c:dc:9b:99:7f:
b4:f0:05:ae:00:1c:b0:af:d9:53:30:f2:83:7c:4e:56:d9:db:
87:e3:74:27:4e:bc:98:e0:09:e3:42:4f:55:20:6d:d7:30:56:
07:07:1d:4f:07:2d:72:48:19:44:03:16:a7:b9:ac:71:20:c8:
97:3c:11:10:56:41:18:04:48:22:06:3a:55:30:9d:84:c0:16:
62:3c:18:f3:d2:6d:4f:60:7f:0a:5c:4e:f0:f6:67:49:9e:fe:
cc:a4:74:dc:1b:48:ad:dc:06:05:a3:73:91:44:0f:7c:13:52:
cb:1d:01:9c:1c:63:12:71:6a:1b:55:9a:82:a4:bf:ee:d9:19:
2e:dc:cc:dc:9f:3a:0b:6c:bc:99:ec:0f:d6:26:3f:fa:4c:85:
d8:54:9b:7c:91:49:f7:b3:c1:4d:b0:45:8b:a5:88:b0:35:a8:
0d:80:c1:38:70:57:55:58:af:2f:d2:7e:4f:72:98:ed:a1:4d:
41:90:ef:a5:cb:25:d0:e9:f1:df:07:f2:eb:1a:5b:1f:8b:0f:
7a:9b:a8:46:8a:23:1a:84:c0:a3:40:81:fc:b1:ad:7d:ff:ed:
1b:18:91:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 14:12:26 2025 by rpki-client