Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: lLUYbiMEKUIqVd1QWjb5Pm0DcKYo8a8vIpzG6fkr+Nw=
Subject key identifier: 95:6D:35:72:6B:B6:5A:14:1D:30:D3:DE:37:1D:E0:0A:A9:32:48:69
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 019687A4E932C43AA222CAC91BC0C0024050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 14FE
Signing time: Wed 30 Apr 2025 17:00:53 +0000
Manifest this update: Wed 30 Apr 2025 17:00:53 +0000
Manifest next update: Thu 01 May 2025 17:00:53 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: +tQQE223mFSGmouRXanp28MMsX/O9KAwLEJY7RObCi4=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:a4:e9:32:c4:3a:a2:22:ca:c9:1b:c0:c0:02:40:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Apr 30 17:00:53 2025 GMT
Not After : May 1 17:00:53 2025 GMT
Subject: CN=956d35726bb65a141d30d3de371de00aa9324869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:88:a8:5c:99:a9:15:20:eb:3c:5d:ff:3e:
53:7e:85:e6:25:68:f5:bf:db:9d:63:34:d0:e8:b3:
ac:eb:0f:1a:a7:c7:0f:45:6a:7f:18:41:55:89:2a:
bd:68:a5:98:37:bc:0b:95:5b:29:f8:2a:8a:28:62:
53:45:1b:b7:48:0f:6f:90:f7:d9:80:9c:6e:be:0d:
ba:20:cf:20:ce:c7:e2:40:d0:cf:d9:7c:6b:7a:e9:
60:ed:5e:10:39:d3:7f:66:3e:cd:e2:c1:b5:a7:3a:
f7:6f:42:9d:f3:1c:ab:32:0d:dc:8b:0f:38:17:40:
7e:02:31:16:00:21:2e:7b:ea:bf:bf:ed:74:3f:3a:
10:21:8f:2d:0e:f3:c4:14:3a:d1:a8:c4:5e:46:0d:
7b:f7:4f:95:bc:a3:d0:c2:f5:15:37:b3:59:85:fa:
da:fb:02:f5:c1:4c:7f:96:c3:24:1d:cf:f5:2b:91:
21:6f:ec:17:60:13:95:15:64:ac:4f:74:00:85:9e:
98:25:96:78:e0:dc:38:d4:1b:13:fe:3a:f9:5d:41:
88:77:2e:ee:4e:a6:5f:b9:26:e9:ba:ae:7a:75:bf:
e7:30:6e:cc:84:05:9c:17:c5:92:c3:20:d2:4b:37:
72:c0:df:07:46:51:6a:26:1b:77:2f:5f:e5:18:88:
c7:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:35:72:6B:B6:5A:14:1D:30:D3:DE:37:1D:E0:0A:A9:32:48:69
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:78:e9:a1:29:5a:d6:da:79:3c:07:c9:7c:cb:4e:49:75:
26:c6:ea:8f:3b:56:68:35:14:00:3c:fd:e5:4a:b5:fe:89:23:
12:f0:80:98:da:e6:e5:50:e4:12:64:5e:14:e4:97:1b:b5:94:
75:a6:86:99:41:e7:20:bc:00:1c:75:17:fe:a9:05:6d:79:ff:
a4:38:1f:2e:60:5c:c2:05:c1:76:7a:7c:6d:e2:bb:c7:62:96:
db:08:7b:84:e0:81:6f:c1:6e:c0:fe:a5:bb:55:1b:98:3f:5b:
40:3c:40:db:b6:1e:8e:04:28:da:ed:76:cd:ce:95:56:fb:22:
de:40:0b:c3:6e:ca:62:a9:04:a6:78:82:4b:67:f6:39:10:5e:
9b:59:4d:2c:52:eb:c2:15:19:82:b3:ee:3f:e2:89:0a:7b:e0:
e5:37:dc:b2:6b:27:65:25:27:2e:ad:c5:aa:fc:5b:89:ca:21:
a7:f8:a5:2c:1b:88:d6:23:52:69:41:d7:93:0f:a4:bc:16:7b:
bf:a9:17:44:38:e8:2e:50:d6:07:90:2b:73:bf:43:50:04:3d:
35:f5:cc:d9:9e:21:19:29:b8:3d:82:74:ca:90:6a:0a:dd:74:
22:94:63:7b:b8:0e:b8:ff:00:0d:9a:b6:90:1e:7d:c7:e0:b1:
cf:69:ee:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 21:25:22 2025 by rpki-client