Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
File: Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft (raw, json)
Hash identifier: uDV8JaRhTM/BSbD6mByD4eixCPDbHEkPyRVk0KQ/8mo=
Subject key identifier: 19:C3:CE:94:98:30:4B:E5:09:FE:A1:7F:35:E3:F7:44:91:A6:1A:1E
Authority key identifier: 2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
Certificate issuer: /CN=2afd754f3077cd60f009be026c9084e572970660
Certificate serial: 019684359CC490F853FF8B6D45A1B7E60B75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
Manifest number: 0308
Signing time: Wed 30 Apr 2025 01:00:28 +0000
Manifest this update: Wed 30 Apr 2025 01:00:28 +0000
Manifest next update: Thu 01 May 2025 01:00:28 +0000
Files and hashes: 1: Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl (hash: /9ltF6XYNSh46ws2XKY0qQ88ZLBI3suPWBt3qFVEi34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:35:9c:c4:90:f8:53:ff:8b:6d:45:a1:b7:e6:0b:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2afd754f3077cd60f009be026c9084e572970660
Validity
Not Before: Apr 30 01:00:28 2025 GMT
Not After : May 1 01:00:28 2025 GMT
Subject: CN=19c3ce9498304be509fea17f35e3f74491a61a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:de:a7:09:0d:a5:d9:1f:36:04:e8:f5:8b:4a:
6c:29:5d:84:be:3b:58:a8:e2:0e:24:e7:7d:eb:ce:
c4:04:fe:e0:16:cc:42:e1:ca:c2:eb:46:39:31:15:
38:21:8a:57:d9:70:75:b4:b8:99:96:57:7d:c3:0b:
ce:d5:e7:1f:93:df:54:92:cf:63:f3:78:c0:52:03:
5e:79:26:73:e6:41:5e:36:f2:d6:7f:db:48:40:0c:
da:f6:20:0e:2b:51:30:31:fe:57:30:40:39:e7:f4:
7a:8f:bf:c8:82:e3:bd:5d:e6:ed:84:ca:a1:9a:e0:
fa:4f:f8:06:c7:69:2f:4e:f5:fa:a5:20:62:04:9a:
96:e5:13:8d:10:0f:53:d0:9a:9c:31:c0:ec:47:7f:
51:ff:b7:b4:9e:08:d1:1f:49:cc:f5:aa:7b:fd:f3:
7d:fc:81:c5:be:5a:e8:39:47:81:55:ae:a4:37:25:
04:aa:2a:3f:2b:79:0b:6f:2a:be:3a:4d:82:a4:e7:
91:60:26:a6:c8:29:4a:27:80:5a:d4:1e:d9:4a:83:
7e:69:0e:f7:17:99:d2:f8:c2:e9:78:c5:62:62:6a:
02:db:06:bd:a8:85:64:51:de:04:a6:28:63:1c:2c:
03:0e:35:bd:9b:53:9a:bf:af:60:78:29:9c:66:91:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C3:CE:94:98:30:4B:E5:09:FE:A1:7F:35:E3:F7:44:91:A6:1A:1E
X509v3 Authority Key Identifier:
keyid:2A:FD:75:4F:30:77:CD:60:F0:09:BE:02:6C:90:84:E5:72:97:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kv11TzB3zWDwCb4CbJCE5XKXBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/1986cc-e350-415a-ad73-b4013db8b7c1/1/Kv11TzB3zWDwCb4CbJCE5XKXBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:a9:6d:3a:8c:90:0a:e3:ea:9e:79:85:9d:99:94:6b:12:3e:
69:0b:25:08:4c:00:63:e1:d3:02:67:ba:46:59:8a:f2:be:44:
11:14:8e:66:d4:80:ea:83:70:2c:0b:8d:1d:fa:9f:1d:9d:de:
a6:e9:f3:38:15:a0:ff:4d:64:e2:82:6d:f6:ac:d6:2b:16:5f:
53:b2:53:6f:b9:2b:19:79:94:f1:14:08:98:fb:fb:b6:dc:08:
95:c3:ad:11:07:6f:24:9d:95:02:91:45:2f:74:02:76:b7:b6:
bf:06:74:4c:0c:e5:b0:ad:9c:08:a7:1a:dc:d3:c7:e3:4e:0a:
ca:17:3a:c4:3f:57:5c:61:f9:da:4c:0b:7c:c5:e2:0c:fd:83:
cb:e8:41:0f:0e:f1:d1:85:ac:be:1b:ef:f0:44:94:4b:5c:46:
8b:05:e4:43:28:33:7f:15:bb:c0:46:dd:ab:70:56:96:79:0f:
ca:83:ed:d8:f7:4a:b0:9c:89:3c:35:87:7b:29:61:64:e9:d4:
d7:57:35:1c:40:70:6a:00:f6:62:4a:ed:94:2e:7d:61:b5:cd:
6e:02:84:96:72:29:c0:42:83:a5:b0:d8:22:5e:ae:e4:c1:3d:
42:c2:c9:29:37:17:ac:7b:ab:7c:b1:77:93:06:b8:f9:81:ea:
69:3c:56:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 09:41:54 2025 by rpki-client