Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
File: K0q0wVF_cy34suyD3krSNo1Fz98.mft (raw, json)
Hash identifier: vGhM2zPVaPIgxF1xW5dAQCROgFHNEEyAtXVpLPV2EBE=
Subject key identifier: 2D:45:59:F4:CD:2D:BA:4E:45:5B:6B:69:1C:36:43:90:3E:4C:5B:26
Authority key identifier: 2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
Certificate issuer: /CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Certificate serial: 019679E927F835BBE1FF33CD7EFB661D18DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
Manifest number: 13EA
Signing time: Mon 28 Apr 2025 01:00:45 +0000
Manifest this update: Mon 28 Apr 2025 01:00:45 +0000
Manifest next update: Tue 29 Apr 2025 01:00:45 +0000
Files and hashes: 1: K0q0wVF_cy34suyD3krSNo1Fz98.crl (hash: 147rKNkJlAg+PPdrhpz7NsrasPkeBv98A2hajQ/hDl8=)
2: kUV5gNpaG9Xf3cZ7lRR3FP5Oag4.roa (hash: 2uQS8P+CjJocxImWDpdYZcJPqNgU1mCNOmTtqZK5rjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:e9:27:f8:35:bb:e1:ff:33:cd:7e:fb:66:1d:18:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b4ab4c1517f732df8b2ec83de4ad2368d45cfdf
Validity
Not Before: Apr 28 01:00:45 2025 GMT
Not After : Apr 29 01:00:45 2025 GMT
Subject: CN=2d4559f4cd2dba4e455b6b691c3643903e4c5b26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6a:de:f5:da:3d:c6:a7:8f:f0:43:d0:98:c3:
a6:dd:10:bf:4a:0b:ba:af:03:4e:ff:a1:39:2e:6d:
06:d7:34:a0:15:53:62:ef:ce:ea:73:da:68:c3:5a:
69:1e:50:54:23:f5:ed:b8:5a:0e:8f:17:fa:44:2f:
ae:89:9f:1d:3b:63:23:9f:40:d6:79:b0:71:77:a6:
8e:44:f1:d7:93:c0:c4:e6:39:2a:1d:50:cc:9b:d6:
71:41:96:e1:09:1b:f5:46:9d:53:02:7d:97:de:0d:
d8:89:51:a5:3c:14:47:f5:52:9a:fc:d6:c2:9e:0e:
a7:2a:d9:6d:7b:ef:f9:94:dc:9e:08:99:cc:97:4d:
e4:89:e5:f5:fc:45:2a:a7:70:fc:05:30:50:e3:1c:
57:9e:b0:3c:95:02:15:e7:90:17:04:2d:26:a8:ec:
10:fd:77:5d:60:1c:17:3f:95:17:35:ea:6d:a4:8e:
40:82:96:a5:db:1b:ed:9c:f3:20:45:6c:45:4d:57:
01:70:31:fe:9e:af:eb:ba:5e:bd:2e:8a:ed:b2:44:
6d:5e:4a:1f:0c:d0:6e:d7:74:23:30:14:b9:64:42:
06:e4:94:b2:e4:63:8f:07:b2:b3:9f:4f:6f:a8:7f:
3a:c0:af:16:f0:4c:7b:fc:e7:83:ac:7f:a0:e4:a0:
ba:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:45:59:F4:CD:2D:BA:4E:45:5B:6B:69:1C:36:43:90:3E:4C:5B:26
X509v3 Authority Key Identifier:
keyid:2B:4A:B4:C1:51:7F:73:2D:F8:B2:EC:83:DE:4A:D2:36:8D:45:CF:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0q0wVF_cy34suyD3krSNo1Fz98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/27c7a3-943c-4b29-bd82-e7abcf223715/1/K0q0wVF_cy34suyD3krSNo1Fz98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f4:cf:7f:e9:d5:74:62:65:89:39:59:8b:15:04:bd:3a:f9:
b4:8d:e4:4e:5f:5e:87:42:0a:03:d7:f2:6d:db:ef:27:ab:a2:
78:f4:63:6f:9b:19:e9:66:1c:8b:36:56:e7:7e:92:bb:38:21:
87:d2:c2:bb:ea:56:86:fc:fd:86:56:2b:b7:cc:f2:16:95:83:
76:2a:82:fb:48:76:4b:e0:9d:c2:48:bf:84:46:ec:de:2a:b8:
9b:1b:48:1c:d8:73:71:0c:1b:58:df:02:7f:36:ad:56:20:92:
56:e0:35:f1:92:a0:df:7a:9a:2a:1d:86:df:b8:f5:e7:b8:48:
06:dd:06:c9:ac:e0:d1:bf:08:22:79:29:7e:b2:12:22:0f:ea:
e8:56:dc:92:97:66:6c:60:16:0e:05:17:35:bd:51:1a:b0:dc:
93:77:61:d6:e2:63:4c:f2:d2:97:be:68:41:e1:cb:94:b7:2d:
de:c1:45:43:24:0b:27:8c:c2:c6:bd:cd:20:60:66:0d:f8:85:
94:38:73:04:00:11:6c:ee:ed:cf:79:a5:c7:53:50:0c:6b:6e:
5b:98:71:60:a6:7e:69:57:3a:f4:d5:3c:be:5c:24:5c:dd:8f:
32:29:b9:98:15:52:60:3d:34:89:3b:f3:42:4b:59:0f:5f:6f:
80:ab:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 05:35:25 2025 by rpki-client