Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: 34i+GXGJzE4ZXOX/DT9gVOYwHi52ddAxFR5WqxjBzsM=
Subject key identifier: 4C:36:B1:8E:14:20:75:9F:A9:07:4C:A1:0A:01:39:B7:9D:CB:9B:B0
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 019684A37BC7A9C515C3C8619E08E6D01F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0614
Signing time: Wed 30 Apr 2025 03:00:28 +0000
Manifest this update: Wed 30 Apr 2025 03:00:28 +0000
Manifest next update: Thu 01 May 2025 03:00:28 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: ARfsKQmB4Ru3zLPnz3p1n96Rw5i2iZu+QulIME8nb78=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:84:a3:7b:c7:a9:c5:15:c3:c8:61:9e:08:e6:d0:1f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: Apr 30 03:00:28 2025 GMT
Not After : May 1 03:00:28 2025 GMT
Subject: CN=4c36b18e1420759fa9074ca10a0139b79dcb9bb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f4:bf:05:b7:60:46:fe:76:81:fc:19:10:ee:
16:f1:a6:12:49:27:51:1e:70:bf:06:cf:32:48:a2:
d0:50:e0:43:5d:f3:c3:8f:68:70:e4:45:41:5a:a3:
26:38:ba:ce:29:df:c6:1c:e3:f4:06:2c:f7:ed:b3:
a8:4b:c0:d2:a5:9b:51:ea:b0:8d:28:3c:81:22:07:
26:04:a5:8c:a7:45:c2:82:c8:f3:ec:2f:43:a2:4c:
a0:ef:0c:89:da:8a:1f:e0:d4:cb:e6:a0:5b:1b:c9:
ec:69:61:aa:81:20:5f:01:eb:d5:1b:1e:41:5a:e5:
4a:d5:fb:40:eb:d8:d1:86:2b:2a:19:b4:50:50:2e:
2d:d0:db:db:8a:47:c2:2b:46:65:fc:b3:46:72:3d:
cc:66:1d:57:e5:bd:6a:3b:80:aa:9e:4b:59:16:c1:
2d:a2:b9:f0:4a:9c:54:56:40:c5:1c:cc:8b:c0:48:
44:47:eb:09:f6:37:0a:ca:3a:bf:ee:e5:8b:62:fc:
39:9a:a1:08:13:e0:88:77:94:e9:b8:69:65:42:b5:
41:dd:5a:17:03:28:17:04:fd:e8:da:17:a6:66:be:
bf:53:10:41:97:08:bf:a4:d2:5a:f4:86:1f:d6:99:
fe:d6:e3:e8:4d:3e:0d:48:de:3f:41:56:44:b3:11:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:36:B1:8E:14:20:75:9F:A9:07:4C:A1:0A:01:39:B7:9D:CB:9B:B0
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:56:2d:6c:9d:2e:4b:78:72:60:69:3c:8c:47:c5:34:73:32:
4d:ee:eb:17:69:0d:4e:8d:b5:6d:9e:09:ad:1a:0d:d1:1f:6e:
4d:3c:fe:33:d3:a4:06:0c:cb:01:ff:66:2c:4e:8b:d5:13:42:
44:96:6a:ed:40:8e:30:b7:7f:90:7b:5f:c2:ac:c7:81:29:27:
ca:b1:25:63:f1:f4:15:a2:d8:59:bf:fe:57:9a:65:7f:7d:15:
ed:f8:05:86:3e:be:fb:b0:15:7c:13:0e:2e:6b:6b:d5:f1:93:
d6:d6:e9:31:00:df:76:5d:a1:3b:2c:07:e0:65:8a:d5:b8:59:
3e:0f:14:0e:0d:b5:c4:76:f6:50:a4:c3:b3:51:6f:2c:61:11:
8b:14:e2:ca:23:75:3d:43:2e:9b:b1:b2:2e:63:28:74:d6:d0:
09:2e:20:ec:28:de:e4:1d:a9:a8:3f:9a:0e:2b:23:cf:3f:ff:
90:1d:ba:7c:27:15:96:bd:c5:85:8d:12:29:98:9b:dc:1a:dc:
b9:92:8a:11:89:3c:5f:e7:83:32:f4:73:00:35:d0:70:8d:46:
83:ac:a3:2f:11:2e:fc:9e:19:68:c5:7a:6e:e6:38:b3:93:40:
75:4c:3b:68:0c:04:d5:8e:99:2d:39:c8:b3:e0:e3:6a:9c:3b:
31:0a:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:38:09 2025 by rpki-client