Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
File: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft (raw, json)
Hash identifier: AN54GnDALAab79WeBgB6td9HyMOFZiaXQaFXyYKy1kI=
Subject key identifier: 07:8F:5E:E1:03:75:C3:FC:94:71:11:6C:2C:98:2D:BF:6C:0A:33:34
Authority key identifier: 28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
Certificate issuer: /CN=28f8ede20b78f995993da98f434a966074d562c2
Certificate serial: 0196760C3C2B7DEF8BA5C3745ECBB84ACB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
Manifest number: 0C9A
Signing time: Sun 27 Apr 2025 07:00:35 +0000
Manifest this update: Sun 27 Apr 2025 07:00:35 +0000
Manifest next update: Mon 28 Apr 2025 07:00:35 +0000
Files and hashes: 1: KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl (hash: bkVV7Bcciy4bbt0ezdO8N2DBLJ7yd3j1RoGMKMeAjJg=)
2: QrZTcjFrQJb3bvPYCzlmoBO_9JQ.roa (hash: WYTR6hwNEJJPOZupDqIytAiSQqBtGgxwk+L0S3fkxlw=)
3: oEDAb_-YZ2g4zh9tclXwopyXjP4.roa (hash: E6+8HcazGwD4GmKYHyq4M2SPeGPxJmXR/m+ObVabJaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:0c:3c:2b:7d:ef:8b:a5:c3:74:5e:cb:b8:4a:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f8ede20b78f995993da98f434a966074d562c2
Validity
Not Before: Apr 27 07:00:35 2025 GMT
Not After : Apr 28 07:00:35 2025 GMT
Subject: CN=078f5ee10375c3fc9471116c2c982dbf6c0a3334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d1:bf:a7:7c:3f:8a:00:3e:11:90:ce:dd:2e:
2c:8c:3d:e9:71:cd:c8:53:f4:fd:82:b1:01:c1:51:
ad:e7:3e:d1:5b:c2:f7:37:5c:d7:2c:87:6e:ec:6d:
e9:4e:4f:bc:c1:4d:18:08:15:6d:f0:35:18:aa:78:
ac:cc:16:ad:8f:85:b5:83:56:c7:70:59:e7:d9:d2:
b8:0c:17:38:12:2d:16:c6:e7:0f:4c:d3:58:fa:34:
1c:22:2d:ca:84:8d:e6:92:ea:39:51:2a:e4:c3:34:
7b:d4:82:62:2b:47:5a:50:7b:89:0b:3a:63:fe:f4:
05:3e:af:e2:b8:cd:e6:e7:14:7c:a0:4e:64:97:45:
13:4a:a4:3a:9b:8b:97:51:f2:6b:6d:4c:3d:3c:eb:
62:87:85:b9:c2:2b:43:cd:7d:9f:9e:9b:b8:ed:2a:
51:7d:bd:55:62:c4:bf:df:7a:c9:7d:a1:af:e2:10:
8e:29:75:28:91:cc:2c:2f:41:5a:d6:12:67:04:3c:
e7:c9:b5:8c:22:ec:1a:d9:b8:46:5b:d1:a2:7c:aa:
55:6d:09:9b:06:c5:4b:41:83:8b:4a:ea:9c:e5:94:
16:2d:a4:95:60:c7:eb:e3:7f:af:20:1c:89:77:41:
17:4e:ce:d8:9b:59:2a:a0:a3:0c:5d:d8:62:b9:58:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:8F:5E:E1:03:75:C3:FC:94:71:11:6C:2C:98:2D:BF:6C:0A:33:34
X509v3 Authority Key Identifier:
keyid:28:F8:ED:E2:0B:78:F9:95:99:3D:A9:8F:43:4A:96:60:74:D5:62:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/cfcffa-6029-42dd-9ef8-9d3a0f23cbe7/1/KPjt4gt4-ZWZPamPQ0qWYHTVYsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3b:8c:48:d4:0e:27:a6:71:ac:a8:26:9d:18:2c:dc:39:e4:
68:6e:dd:e9:0c:65:73:dd:76:45:1c:6f:61:d7:f3:ff:c5:82:
9d:76:4e:cc:61:64:c7:33:27:9e:9b:53:a9:73:a3:e0:51:b4:
fb:6d:fe:90:a4:8e:cc:11:dc:80:19:f8:f1:b7:56:84:fc:8e:
09:e7:b4:38:78:b6:99:a8:e3:90:a8:04:db:20:a0:9c:97:00:
29:25:a0:2c:54:e0:9d:d7:2a:64:29:e8:51:81:09:bf:63:0e:
95:c0:cc:f0:21:24:f1:1f:af:ff:a4:ef:69:c0:50:5d:69:df:
94:05:3c:d5:3d:82:8c:2e:e7:96:ff:b6:b1:65:a8:92:d3:8b:
ce:a0:c9:a7:37:ad:f2:5c:ec:0e:e1:70:b7:a8:79:3f:96:ad:
ba:04:30:ba:58:fb:13:07:08:d4:82:25:8c:72:e8:cc:00:43:
a3:96:26:2d:bc:40:a2:37:2a:71:77:ee:bf:13:7f:e3:f8:dd:
f6:f3:4e:c9:1a:7e:b3:8a:fe:ce:24:b4:90:53:41:b0:ca:77:
42:b6:f0:8a:37:aa:0e:97:2a:61:46:48:89:e8:cd:c8:e1:0d:
e1:59:4c:45:08:57:0c:1d:92:7a:5e:0f:fd:86:f0:89:cd:23:
46:54:85:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:19:58 2025 by rpki-client