Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
File: krFD19sRWVfF25r4lfTn4Vt7axc.mft (raw, json)
Hash identifier: 7vuM5V0ABJSO6FHjkfDwJs4NKzfkcUVkLZNalRvIVgk=
Subject key identifier: 35:44:11:48:A9:D3:1A:21:8C:7E:63:EF:C1:6D:D3:72:D3:3B:D3:8C
Authority key identifier: 92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
Certificate issuer: /CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Certificate serial: 01967B695E860BA1B1E941D71B945D766BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
Manifest number: 0CDA
Signing time: Mon 28 Apr 2025 08:00:25 +0000
Manifest this update: Mon 28 Apr 2025 08:00:25 +0000
Manifest next update: Tue 29 Apr 2025 08:00:25 +0000
Files and hashes: 1: krFD19sRWVfF25r4lfTn4Vt7axc.crl (hash: 2XVa4WMK3sWe8PDjYEQMei9kCRsUQNI2izVCiCcOCJw=)
2: tT2MkC3bDAt-AG9rSFm6itBZmH0.roa (hash: ZIroNCPsL/l7JhsPE9mGE4anIRCcdf9s2wEC0oqqzzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:69:5e:86:0b:a1:b1:e9:41:d7:1b:94:5d:76:6b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92b143d7db115957c5db9af895f4e7e15b7b6b17
Validity
Not Before: Apr 28 08:00:25 2025 GMT
Not After : Apr 29 08:00:25 2025 GMT
Subject: CN=35441148a9d31a218c7e63efc16dd372d33bd38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f6:ad:b8:8f:74:d9:53:85:bc:bf:8d:4b:cf:
3e:2b:5f:c5:b4:01:9f:f8:c5:85:ea:da:0f:f7:a1:
02:51:f0:3f:6b:93:c8:ea:56:ad:4a:2e:ed:9a:42:
b8:0d:77:f9:17:8b:7a:91:37:ce:8b:69:4b:f9:da:
21:1a:69:df:85:fc:ae:f6:a2:04:75:84:1e:ef:f3:
6a:50:2a:2e:29:87:a6:d6:50:24:f9:f2:d4:c3:ab:
79:cf:da:83:c6:5e:0e:29:4a:f8:0f:e3:c7:19:3d:
b8:1c:30:4a:69:26:48:a6:7e:70:52:85:a6:94:1e:
1d:f8:d0:98:66:aa:85:2d:e2:54:30:0d:39:50:11:
bb:91:4a:f0:47:28:69:4f:0e:30:75:4b:72:06:0f:
12:3b:3d:6d:fa:38:b5:91:34:db:06:a5:01:a6:57:
6b:fe:fd:a6:92:e2:ac:f2:76:fc:4b:63:13:e3:54:
8b:dc:bb:1f:c0:eb:d3:d0:c2:f6:1f:28:c9:bb:3b:
d4:81:ac:d5:dd:d8:c2:50:40:aa:8e:b8:f3:69:ff:
a3:d1:4e:7d:12:9f:3b:20:26:f5:b5:aa:92:a0:07:
d7:dd:bd:f4:af:75:58:cd:7f:8e:a1:1f:8c:89:89:
f8:c0:ae:5f:ae:55:93:4f:f3:5f:56:88:e3:e0:f8:
de:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:44:11:48:A9:D3:1A:21:8C:7E:63:EF:C1:6D:D3:72:D3:3B:D3:8C
X509v3 Authority Key Identifier:
keyid:92:B1:43:D7:DB:11:59:57:C5:DB:9A:F8:95:F4:E7:E1:5B:7B:6B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/krFD19sRWVfF25r4lfTn4Vt7axc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/d11443-1372-4cfc-8d57-6d3a88153767/1/krFD19sRWVfF25r4lfTn4Vt7axc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:19:5d:d3:7e:5a:4e:97:84:cc:bd:25:55:8f:04:01:72:c6:
7e:c3:6b:fa:d8:4b:0e:fe:88:4b:1c:7f:7e:c9:fe:84:98:b3:
8c:3f:d9:bc:b5:2c:5d:6e:d4:60:15:de:5f:d5:b5:ac:93:63:
13:30:dc:be:b3:20:d5:af:5e:2e:5a:f3:89:1f:d0:57:6e:a7:
e2:9a:31:2a:97:aa:f1:89:71:a0:cd:75:6c:14:8f:04:ad:81:
96:79:99:01:4c:95:54:b8:d2:f5:38:8a:bd:04:bb:71:e6:fb:
82:0f:e1:ba:24:a3:ca:40:d0:2c:d9:28:ce:7e:32:a2:bc:59:
97:20:e2:1f:c8:89:e0:8f:a8:68:af:50:23:59:1b:28:e7:8b:
6c:fe:34:84:f2:94:ab:c9:28:95:c3:f3:5a:3f:b5:0d:b0:ab:
71:5d:91:46:5d:81:6e:04:f7:88:fe:0d:ea:c1:ee:1c:55:70:
68:5f:7b:41:54:8a:6c:ca:3d:c0:e0:0b:06:dc:b9:ac:32:ba:
bd:79:99:4c:88:ab:7b:e3:6c:d5:e6:d5:38:35:39:f1:91:72:
45:81:48:e7:2d:fc:44:ea:ee:84:5d:18:f1:d1:1b:12:0d:13:
f5:db:09:e2:90:41:81:b8:7f:82:86:d6:4d:90:67:fa:cd:23:
d5:0c:40:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:12:35 2025 by rpki-client