Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
File: KaA5l7KPWbCAMciYQH3V5RN93bE.mft (raw, json)
Hash identifier: zCr7CLOfc9jXxX60jR2ks+SBQT3mj/IfWYPb87XIrrU=
Subject key identifier: 4F:04:CA:ED:89:B9:A2:6B:1C:3E:2F:8D:98:AC:87:62:74:D6:60:39
Authority key identifier: 29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
Certificate issuer: /CN=29a03997b28f59b08031c898407dd5e5137dddb1
Certificate serial: 019674F9C29AB3B4EB363810DF0A0C6F2DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
Manifest number: 11FA
Signing time: Sun 27 Apr 2025 02:00:47 +0000
Manifest this update: Sun 27 Apr 2025 02:00:47 +0000
Manifest next update: Mon 28 Apr 2025 02:00:47 +0000
Files and hashes: 1: KaA5l7KPWbCAMciYQH3V5RN93bE.crl (hash: yiueYQLe6sInOAo4R4fbMLb2SsmZwZiGSaXWJSAUvjU=)
2: TFGcxJc1hz5sSLNvCaBuhb3JcFY.roa (hash: IVGRn6jYdKaVvVkrmcrSKzMRsOoEhE2vOI0riR6WQTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:f9:c2:9a:b3:b4:eb:36:38:10:df:0a:0c:6f:2d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29a03997b28f59b08031c898407dd5e5137dddb1
Validity
Not Before: Apr 27 02:00:47 2025 GMT
Not After : Apr 28 02:00:47 2025 GMT
Subject: CN=4f04caed89b9a26b1c3e2f8d98ac876274d66039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:21:6c:80:66:29:1c:64:13:31:53:24:92:95:
83:8c:3f:21:a0:7d:90:a1:3c:02:ff:84:82:0d:f8:
77:bc:bf:d7:ed:af:88:c3:c6:da:42:0f:5c:9b:15:
96:a2:60:fe:06:d4:51:ea:24:b7:de:43:57:5d:a1:
b8:68:28:47:bf:48:b6:fe:30:48:db:d7:09:81:d2:
da:7c:06:b6:a3:43:30:03:20:78:01:ed:20:87:a3:
86:cc:c6:53:78:e0:6a:b6:c4:90:65:e2:fb:38:35:
48:79:04:5b:31:da:0d:f5:22:93:2a:7d:52:3e:32:
0b:ef:3d:6e:2d:27:52:1e:c2:58:87:b3:1a:4f:47:
f9:9e:c0:10:43:bf:51:66:26:82:6a:f3:66:31:a2:
df:81:b8:40:2a:d5:6b:db:b5:df:ff:be:d4:04:6b:
c6:8e:1a:17:cd:39:13:e7:fa:5b:8b:d6:16:e6:cb:
3d:09:eb:f4:24:4c:a0:ae:0b:fb:fc:23:27:c7:30:
91:e4:f6:06:e4:e3:ed:d6:e9:d8:32:fb:c1:fa:47:
c6:c2:28:0e:1e:f8:9c:4d:a5:21:d6:31:4e:b8:01:
29:ac:3d:aa:db:14:96:cf:75:1e:a0:d5:98:ad:09:
cd:11:f6:38:9e:eb:7c:e4:b0:d9:2d:b1:0b:1d:23:
16:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:04:CA:ED:89:B9:A2:6B:1C:3E:2F:8D:98:AC:87:62:74:D6:60:39
X509v3 Authority Key Identifier:
keyid:29:A0:39:97:B2:8F:59:B0:80:31:C8:98:40:7D:D5:E5:13:7D:DD:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KaA5l7KPWbCAMciYQH3V5RN93bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/219be2-396f-427f-942c-1f8e522408a5/1/KaA5l7KPWbCAMciYQH3V5RN93bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:24:cb:f4:09:ab:b8:68:2d:04:0f:2a:10:f4:2c:ad:bc:7d:
37:01:91:e1:fe:11:b5:91:c3:e6:4b:66:bb:7a:07:b6:da:fa:
32:5a:51:3f:12:69:12:e5:6a:af:af:ef:48:06:1a:a2:26:08:
5f:26:38:52:e3:86:f7:6d:09:f4:81:fe:0f:bd:f3:65:62:48:
dc:e8:ae:c8:c2:fe:51:07:cb:b5:5f:69:4c:f8:bd:84:5f:85:
76:55:b3:24:19:68:df:8a:96:d0:e4:89:09:43:53:2e:e9:c3:
a7:08:54:e9:54:f5:bf:0a:70:93:55:e4:e3:95:e8:0f:1e:47:
29:de:2d:21:46:0b:5f:90:d0:99:55:02:4f:a9:87:5e:78:ec:
1b:70:83:5c:2e:b3:64:52:d4:3f:46:95:1b:4b:d7:6c:5e:7c:
81:6d:f4:e6:f7:c6:b6:b7:b2:62:d1:79:58:75:50:13:62:63:
9d:bc:51:4c:d8:4d:8a:f3:92:c4:0f:27:d5:8f:e8:8e:3d:75:
cb:89:60:90:3b:97:d7:d6:5b:6f:11:14:96:9e:88:c1:ad:8b:
99:0a:20:10:96:84:8a:e1:66:09:63:2e:b4:d6:28:b8:aa:1b:
11:10:5c:4f:bb:75:e6:15:83:44:60:af:cd:dd:80:20:e9:94:
51:7e:35:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:36:33 2025 by rpki-client