Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
File: knaysJMpLF-nXm4UwqSZrIR-QWs.mft (raw, json)
Hash identifier: 4aCZmBoeNrXk7VK6ct+8hlQ+v0X2PYpKt9K9SemveSU=
Subject key identifier: 63:D1:DD:71:D6:AE:F0:B5:BF:1B:49:FA:BE:64:12:2A:E6:21:B7:82
Authority key identifier: 92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
Certificate issuer: /CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Certificate serial: 01967BD7B6BD519C0A1781A9458FD77B5CF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
Manifest number: 12E2
Signing time: Mon 28 Apr 2025 10:00:56 +0000
Manifest this update: Mon 28 Apr 2025 10:00:56 +0000
Manifest next update: Tue 29 Apr 2025 10:00:56 +0000
Files and hashes: 1: knaysJMpLF-nXm4UwqSZrIR-QWs.crl (hash: PwdcaTFlYhfGULcFGOrswimd/HIelJOS9p7SbBV0ttw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:d7:b6:bd:51:9c:0a:17:81:a9:45:8f:d7:7b:5c:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9276b2b093292c5fa75e6e14c2a499ac847e416b
Validity
Not Before: Apr 28 10:00:56 2025 GMT
Not After : Apr 29 10:00:56 2025 GMT
Subject: CN=63d1dd71d6aef0b5bf1b49fabe64122ae621b782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:fa:98:18:04:18:71:24:52:fc:02:0e:7b:
30:97:b3:a5:df:f2:b0:c0:b5:03:b5:1b:15:40:a0:
36:6f:a7:6d:d9:e0:6a:c5:be:0b:05:c0:e0:43:10:
f1:53:b8:3e:71:a8:d6:32:32:28:4a:9f:03:5a:c6:
86:d3:cd:8d:d8:7c:cc:17:f9:cc:b6:fa:57:52:af:
85:bb:26:7b:9f:33:89:5a:40:db:9e:3b:e0:f0:41:
ee:80:f7:96:76:c5:f6:7c:30:e4:79:cc:81:75:9b:
5b:75:9b:ce:7e:2d:3c:43:aa:3e:fb:0b:86:8b:bc:
82:43:92:7b:a7:82:6f:28:d6:b4:c8:91:67:b2:7f:
17:2e:91:bb:dd:3f:6c:a2:da:93:07:0d:e6:57:f2:
d1:f3:f1:5e:cb:ac:d1:a8:3a:43:8b:f6:59:28:59:
a9:0b:80:9c:93:c6:23:68:19:7f:2e:8e:b4:4a:94:
06:2d:73:e7:47:ba:ae:30:a8:9b:db:71:cc:ff:9a:
4b:5d:a1:e8:6a:e5:a1:38:2b:d6:e4:cc:7d:5b:6b:
20:a1:3a:b3:90:d1:15:83:5a:f3:f5:53:7f:6e:ae:
db:fc:8a:91:99:83:e4:82:da:96:24:4c:82:46:50:
d0:5b:10:65:14:6d:50:52:96:33:77:39:a6:9d:fd:
c4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:D1:DD:71:D6:AE:F0:B5:BF:1B:49:FA:BE:64:12:2A:E6:21:B7:82
X509v3 Authority Key Identifier:
keyid:92:76:B2:B0:93:29:2C:5F:A7:5E:6E:14:C2:A4:99:AC:84:7E:41:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knaysJMpLF-nXm4UwqSZrIR-QWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3fa92f-cabd-413b-ae5c-69b733cbc528/1/knaysJMpLF-nXm4UwqSZrIR-QWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:da:b1:20:36:0a:47:b7:89:bf:65:99:1b:08:ae:00:c6:e5:
76:6a:d2:b4:08:c4:54:8d:90:34:79:67:92:2f:91:09:28:ec:
9b:33:14:0a:68:44:ca:b6:8f:dd:21:ad:46:9b:2a:cf:7b:fd:
7d:b5:0f:d4:56:bf:c1:cf:bd:02:e7:19:fd:96:c5:fa:18:e5:
97:40:b0:49:4e:e8:eb:3a:65:55:6d:46:19:8f:f6:ef:79:15:
46:94:20:43:97:cf:41:d5:2b:43:4d:f0:44:c4:14:aa:cf:91:
04:85:96:86:a4:fd:ee:05:27:31:19:62:93:c8:97:77:96:c5:
30:1c:ff:70:df:f1:0c:d8:f9:e8:c7:25:0d:bb:95:75:49:7b:
cb:ec:ed:f6:86:f2:ff:1d:1d:4e:f0:5e:8f:ad:f6:66:8a:0d:
20:8b:b6:9c:0a:88:3b:26:26:7f:3f:8b:62:02:7f:5b:f9:4a:
b3:c5:d6:f4:b2:c4:b1:e6:ed:b6:07:ba:af:1d:68:9a:e3:a5:
af:44:25:41:1e:1f:d2:fb:38:d4:71:c4:83:01:41:6f:5a:d2:
32:a0:9b:53:48:92:33:70:48:00:e2:33:b2:b4:e5:fb:16:4b:
e8:8d:4a:35:9e:52:19:8d:95:cf:ee:78:b0:a4:89:15:c8:05:
3d:04:7b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:43:32 2025 by rpki-client