Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
File: K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft (raw, json)
Hash identifier: yyjShE986XZQ97kePfQ+lqLuns1d/I8A49g835NFE4c=
Subject key identifier: FF:7E:8B:99:7C:4F:76:06:EC:8F:4E:99:AC:BE:9A:9B:5A:50:8E:8C
Authority key identifier: 2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
Certificate issuer: /CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Certificate serial: 0196760BDDA5733F336F4A1C28306DC4D009
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
Manifest number: 150A
Signing time: Sun 27 Apr 2025 07:00:11 +0000
Manifest this update: Sun 27 Apr 2025 07:00:11 +0000
Manifest next update: Mon 28 Apr 2025 07:00:11 +0000
Files and hashes: 1: K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl (hash: ZkuE9wA2ql6E3O0Lnq0NWS41PQchEVymAOPqwT/ODmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0b:dd:a5:73:3f:33:6f:4a:1c:28:30:6d:c4:d0:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b49e884a441f04b7f5e2ed474b5847e83212bcb
Validity
Not Before: Apr 27 07:00:11 2025 GMT
Not After : Apr 28 07:00:11 2025 GMT
Subject: CN=ff7e8b997c4f7606ec8f4e99acbe9a9b5a508e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:51:2b:44:78:78:27:28:b0:23:5e:d1:9b:0b:
e3:90:b6:03:87:f9:22:a6:1f:6c:00:9c:43:f7:8d:
51:2b:a7:02:9f:a6:cb:14:b1:5c:98:d6:b8:3c:ac:
96:f3:ac:9f:fb:93:49:38:91:9b:8f:fe:38:d4:f1:
78:a0:db:e8:97:09:b9:e1:97:89:d3:36:9d:e0:4a:
a6:fa:aa:ae:bd:1d:3e:2c:16:ce:cd:59:d2:44:7f:
89:21:cb:88:4f:bb:32:55:d6:6d:94:db:51:74:93:
9e:2d:82:55:61:8a:80:2b:4a:d4:3a:a2:d9:3f:92:
85:7a:76:d1:e1:ba:a0:16:06:16:f7:eb:c8:76:ef:
fa:7d:56:ec:df:10:5d:0a:6c:73:ed:2f:38:31:d9:
1f:92:4c:53:c4:ba:3e:85:37:cf:5f:f2:3d:88:14:
66:0e:de:59:44:20:47:db:b3:f6:8f:2b:0a:e6:6f:
bf:d7:f3:43:93:73:aa:e5:43:ba:7b:d9:3b:65:39:
33:d8:f3:d4:7b:d9:f6:51:12:28:f9:25:cf:6d:c8:
ae:84:f1:66:54:26:5d:fd:60:15:4f:5a:38:0f:08:
c9:c3:b5:f6:6a:24:7d:16:9d:34:11:23:6b:d6:69:
d6:2e:88:54:70:64:a5:fc:52:63:79:14:34:a9:b1:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7E:8B:99:7C:4F:76:06:EC:8F:4E:99:AC:BE:9A:9B:5A:50:8E:8C
X509v3 Authority Key Identifier:
keyid:2B:49:E8:84:A4:41:F0:4B:7F:5E:2E:D4:74:B5:84:7E:83:21:2B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K0nohKRB8Et_Xi7UdLWEfoMhK8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/af528c-ff41-4eef-8a93-42dd985cd7b0/1/K0nohKRB8Et_Xi7UdLWEfoMhK8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:43:42:02:00:53:6c:06:7c:dd:c6:d8:a6:4e:b0:c0:df:61:
d4:17:41:82:99:2c:a2:38:22:80:88:6b:b5:13:13:c6:7b:98:
c7:e5:ec:98:4d:de:bd:83:5e:a3:f3:31:ac:78:72:d2:1d:97:
ff:27:0e:e8:c4:ee:6f:be:0f:67:6d:f4:9c:4e:30:46:f0:24:
6f:c9:14:0a:35:a2:b4:98:ea:f1:23:37:1c:05:9d:4c:74:21:
ae:ba:ac:e7:5c:cc:39:73:a6:44:17:5d:5a:5d:99:b7:83:c0:
cb:ef:7c:d6:c7:5f:a1:08:28:8d:2b:08:eb:e9:b0:05:b9:ff:
7b:a8:89:d5:ea:47:d1:9c:20:a5:2a:64:78:4d:06:f0:02:35:
e3:a4:da:7d:17:25:e7:b5:8c:1f:29:28:d0:a4:a3:2a:aa:c5:
48:cb:2c:f4:01:38:87:ea:52:c5:21:09:9c:7d:25:3b:da:83:
92:28:7e:9c:f3:b0:cd:38:1d:19:61:3a:df:9e:a4:f9:aa:83:
6c:25:c7:25:96:56:7e:9d:ed:df:a2:8a:10:b7:f8:1d:c1:ab:
3a:91:89:24:d2:ef:56:da:54:d9:66:b8:17:41:1a:d1:4e:94:
9e:81:8c:a5:3c:44:90:a7:95:97:c3:c1:92:68:39:c9:c8:ab:
d5:39:a7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:10:56 2025 by rpki-client