Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
File: ktf2mgS9nK1SOzn3ei3atEwpEZI.mft (raw, json)
Hash identifier: JOogpnydhYolYLwrUxTVm99Tstsry5Nmw1RmtNhAsIg=
Subject key identifier: FB:F6:30:3F:DD:A8:22:76:06:E5:A3:60:7B:11:75:4A:D1:FF:27:10
Authority key identifier: 92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
Certificate issuer: /CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Certificate serial: 01967FEB0340E311BA765CE0DA15426DF1F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
Manifest number: 14A5
Signing time: Tue 29 Apr 2025 05:00:30 +0000
Manifest this update: Tue 29 Apr 2025 05:00:30 +0000
Manifest next update: Wed 30 Apr 2025 05:00:30 +0000
Files and hashes: 1: ktf2mgS9nK1SOzn3ei3atEwpEZI.crl (hash: ZQSmkn7LatgOQat6MAU9bpcC3cTpPOMmj29lzMBPrLE=)
2: tX7ugzTELMCfaa10qZ6cRQFzo6s.roa (hash: pM1f1c7cpi8tX6YPlXTmsRIvmuNbzIiqqMIx6Cp/Bqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 05:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:eb:03:40:e3:11:ba:76:5c:e0:da:15:42:6d:f1:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7f69a04bd9cad523b39f77a2ddab44c291192
Validity
Not Before: Apr 29 05:00:30 2025 GMT
Not After : Apr 30 05:00:30 2025 GMT
Subject: CN=fbf6303fdda8227606e5a3607b11754ad1ff2710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:96:b1:96:c7:9c:d8:3f:9f:68:f3:d5:c1:4a:
53:f6:6e:31:c7:bd:13:bf:0b:68:30:af:75:8d:06:
5e:a7:c2:81:ac:da:d8:62:9b:8d:76:cb:dd:09:9e:
29:e9:eb:2f:83:1d:04:b8:e2:d0:66:14:9e:1c:45:
b7:25:4e:67:69:d3:91:c0:39:f4:18:40:7a:29:9f:
67:21:e0:7f:98:74:54:cc:22:56:17:53:86:46:04:
22:2b:c0:6c:fa:9f:f4:1f:16:cc:82:ac:a4:41:b2:
70:0f:9a:e7:b4:71:c0:be:f9:62:0c:bc:0a:82:0c:
bb:da:84:41:72:d7:70:59:fd:cc:20:01:da:06:c9:
90:c3:d1:de:3b:38:68:60:8a:96:d6:63:b5:b5:26:
fe:67:a6:a1:11:46:be:f8:0e:19:17:4c:59:d0:38:
25:59:46:57:d7:9d:bb:2d:28:96:78:d2:4d:84:d4:
81:53:48:38:34:2a:fe:5b:ad:bd:9e:49:1a:15:ea:
52:7d:12:c1:95:f1:32:dd:cf:39:c2:eb:b6:37:20:
73:14:48:8f:3d:1a:89:21:45:a2:86:2d:f4:da:c2:
b8:36:fc:91:0c:b0:6a:f5:00:92:fc:76:94:1c:95:
34:69:c6:52:87:63:fa:e2:3a:35:ef:a7:da:1b:ab:
4a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F6:30:3F:DD:A8:22:76:06:E5:A3:60:7B:11:75:4A:D1:FF:27:10
X509v3 Authority Key Identifier:
keyid:92:D7:F6:9A:04:BD:9C:AD:52:3B:39:F7:7A:2D:DA:B4:4C:29:11:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktf2mgS9nK1SOzn3ei3atEwpEZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/50d855-cd81-481a-95ef-b84487f920e4/1/ktf2mgS9nK1SOzn3ei3atEwpEZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:d0:29:a7:fd:75:a0:9a:e6:74:fe:01:e0:c4:aa:f7:8a:0a:
a5:af:7a:b9:d1:7b:b3:14:30:5d:c4:97:89:c2:ae:ea:7a:dd:
5f:1b:cc:5a:85:c5:c4:08:f9:fd:47:69:97:3b:df:09:ba:73:
72:1d:20:77:88:8a:49:09:1b:bf:86:d1:20:49:cb:09:77:f1:
12:88:17:1f:bf:ce:ac:c6:3c:09:ec:40:ae:24:fd:55:19:a4:
9e:53:08:bb:44:90:62:7f:5e:fc:65:a2:b3:de:a7:e9:e3:ff:
d7:19:57:4a:48:ac:10:3e:26:4e:80:a4:ee:51:78:f4:a8:3b:
93:97:26:a2:75:f5:4b:33:ad:f1:b9:77:32:c5:b0:7e:7d:0f:
2c:b6:c7:27:f6:41:a3:c8:94:0c:93:10:16:1d:c4:11:42:2b:
6a:07:dc:a1:6e:62:f9:e0:65:94:f7:c9:a0:75:d2:ed:4c:da:
67:64:23:7a:44:9c:0f:db:76:d6:fa:13:1c:63:8f:85:a6:87:
99:c6:3b:e0:b8:95:70:e8:e2:3e:0f:69:96:85:da:6a:eb:70:
3a:b1:1a:66:ab:e3:fc:72:3d:f7:66:8c:9d:c7:4b:16:6f:49:
f4:cf:86:18:b1:7e:2e:d2:44:d9:3b:ce:f4:fc:77:9e:54:0d:
7b:c8:cd:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:27:57 2025 by rpki-client