Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
File: KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft (raw, json)
Hash identifier: AdWn3JDXUkOawMtVhVRcO2jpCBZtmImIjq6jFoUtQbU=
Subject key identifier: 60:09:B6:96:ED:57:AE:2B:58:AC:84:88:0D:A0:EA:7A:73:8D:13:F9
Authority key identifier: 29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
Certificate issuer: /CN=29081d68bddea8bebf26e61821978594f223bcbe
Certificate serial: 0196748C38D311FC893D25A7369CB316D00E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
Manifest number: 070E
Signing time: Sun 27 Apr 2025 00:01:08 +0000
Manifest this update: Sun 27 Apr 2025 00:01:08 +0000
Manifest next update: Mon 28 Apr 2025 00:01:08 +0000
Files and hashes: 1: KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl (hash: jM9zGRXA7VqHReMOhhaxI37eM2I0p7NibimjUBX1RvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8c:38:d3:11:fc:89:3d:25:a7:36:9c:b3:16:d0:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29081d68bddea8bebf26e61821978594f223bcbe
Validity
Not Before: Apr 27 00:01:08 2025 GMT
Not After : Apr 28 00:01:08 2025 GMT
Subject: CN=6009b696ed57ae2b58ac84880da0ea7a738d13f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8f:9c:1c:f2:c3:42:78:7c:2d:15:b0:22:19:
6f:e8:b9:db:1a:08:68:c5:6c:36:74:23:9a:aa:72:
43:d7:f0:9d:de:14:04:1b:a0:43:e8:eb:98:c2:29:
70:eb:fd:e1:1d:84:7d:1c:61:cf:37:dd:a1:f3:dc:
e1:70:0b:18:e3:4e:63:2c:d4:85:49:1a:7f:b1:d8:
19:10:7b:76:af:39:7e:98:b1:93:49:f4:94:cd:43:
94:86:cd:e4:73:a5:67:7b:1c:c2:a1:6c:77:29:32:
c8:2d:a8:e8:b3:50:c4:89:3b:fa:b5:45:cd:17:ba:
57:bb:51:f0:38:ba:f0:9e:c9:a6:60:02:0d:e7:9e:
e7:56:4d:03:e6:29:94:a1:1e:0a:db:20:05:8d:4a:
46:d4:a0:16:03:e4:a7:6a:9a:e1:c7:7b:0a:b9:d9:
e1:ca:15:19:65:e4:56:7f:1d:bb:cf:f1:42:8e:de:
23:d2:d6:f3:5e:fb:c6:8f:9c:4d:c1:dd:1a:25:0a:
24:3a:38:fe:9a:ee:28:63:3c:8d:cd:c9:f5:2b:97:
7a:de:b5:45:7b:02:0c:20:b3:13:90:38:26:9c:0a:
84:4d:2f:57:1c:95:de:94:3a:b1:bf:05:f3:81:94:
6c:17:35:60:63:b2:53:57:76:cd:39:60:ab:cf:6e:
af:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:B6:96:ED:57:AE:2B:58:AC:84:88:0D:A0:EA:7A:73:8D:13:F9
X509v3 Authority Key Identifier:
keyid:29:08:1D:68:BD:DE:A8:BE:BF:26:E6:18:21:97:85:94:F2:23:BC:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQgdaL3eqL6_JuYYIZeFlPIjvL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b68f6f-960d-4e33-873f-7367c0f20bc9/1/KQgdaL3eqL6_JuYYIZeFlPIjvL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:8a:5d:50:26:86:bd:15:81:ed:a7:2e:3e:cd:9e:20:a1:90:
82:38:2b:25:da:f8:a9:95:75:d9:8b:4c:67:ac:ac:66:83:62:
a8:bf:10:b1:97:76:62:44:90:ba:a1:de:77:51:99:fa:2c:09:
81:67:ae:0a:93:38:9e:b2:ba:60:05:99:ff:96:96:ae:c1:50:
a4:8d:79:a3:c0:4b:2e:1c:c9:18:db:b5:bb:fc:0f:8c:d7:49:
b7:e1:f5:1a:35:24:c3:cd:75:d2:7e:80:7e:03:bd:e8:fe:ed:
1d:ec:4a:fc:df:ce:ec:6d:8b:3c:ac:d5:47:75:c1:ba:41:1a:
bf:f7:d4:e2:d4:9a:86:24:ef:77:99:ab:1c:4d:51:99:99:cf:
b4:0d:5c:37:07:66:80:90:45:c0:c9:83:ee:c0:19:96:2e:30:
e8:8f:32:b7:5e:5c:8f:83:70:e0:4d:fb:1a:b2:f1:6d:bd:0c:
d6:62:87:f5:13:aa:26:6e:d5:98:c3:45:16:70:c0:3a:89:e6:
49:25:f4:97:40:6d:59:f7:f6:a0:e6:6c:8a:74:ee:59:2f:6f:
a9:aa:d4:9b:dc:36:1f:73:8d:3a:8e:f8:3b:13:93:41:48:c7:
8d:ad:20:5b:88:0d:5d:3b:c4:75:12:0b:4a:c7:83:12:d2:3b:
a3:05:a9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:43:55 2025 by rpki-client