Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: +IQkKho+8zr+/TvmNWmwyfYls7rI1iUPqcdXQsNbffw=
Subject key identifier: 77:42:0F:C3:AD:54:C3:0F:0A:1E:70:8C:18:07:E9:52:2A:76:29:E3
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 0196865AFF0A18501C2D2B910CED512018EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 0F55
Signing time: Wed 30 Apr 2025 11:00:32 +0000
Manifest this update: Wed 30 Apr 2025 11:00:32 +0000
Manifest next update: Thu 01 May 2025 11:00:32 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: NXgg86bMalh4tcPl0DESsdqxIY8+7R9apn0wu4wlFxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:86:5a:ff:0a:18:50:1c:2d:2b:91:0c:ed:51:20:18:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Apr 30 11:00:32 2025 GMT
Not After : May 1 11:00:32 2025 GMT
Subject: CN=77420fc3ad54c30f0a1e708c1807e9522a7629e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:1f:a6:4c:03:2e:b9:97:76:67:1b:23:c7:ff:
68:77:e5:53:92:4d:02:44:03:51:c9:c3:38:7f:23:
c1:b7:86:c6:91:79:b8:09:8b:be:4c:b5:b2:5b:f9:
20:18:c7:6c:0a:19:f4:af:8d:cd:9d:1c:83:f3:77:
8e:df:da:6f:57:1a:5e:27:8d:58:0c:e5:8d:88:58:
a0:31:a4:4b:f5:b4:4d:32:65:96:4e:80:2f:cc:19:
c4:f0:d5:78:8f:d3:8b:39:69:cc:7e:e2:7e:99:4b:
9d:07:99:f4:13:00:1f:d3:40:bc:a2:49:0f:75:bd:
be:cb:1b:57:e3:6a:fc:de:d5:d7:07:b0:2e:53:83:
7b:6c:52:28:3e:32:0c:07:57:94:45:be:e5:5f:23:
73:e9:66:8f:45:05:3e:fd:ee:51:66:5a:16:a1:95:
9c:8d:b1:8c:50:07:2a:c6:07:a2:f1:16:9d:b9:0b:
19:b1:33:bc:02:66:3b:92:31:d2:b2:73:be:50:42:
da:fa:1a:1c:74:ea:07:03:00:f3:81:a0:8b:df:7a:
2d:0d:82:e5:6b:67:a3:db:49:30:3d:65:ee:40:54:
cf:9f:79:44:18:2f:1a:df:42:d3:1e:54:2e:e4:ca:
9d:e9:ec:49:8f:9c:0c:a8:ad:bf:e5:23:d1:1c:ca:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:42:0F:C3:AD:54:C3:0F:0A:1E:70:8C:18:07:E9:52:2A:76:29:E3
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:15:8b:aa:4d:50:28:82:4c:b6:fa:70:aa:56:b0:5d:25:1d:
31:01:de:1b:01:66:a0:65:9e:00:3d:b0:c6:2b:4e:ff:a4:51:
82:cc:63:b4:b1:72:8f:a0:46:50:9c:e9:0b:a9:05:a8:0c:f7:
3f:79:de:77:7b:f0:35:bf:00:8e:ef:18:57:d6:b4:71:68:d8:
3b:aa:92:b6:87:b3:6e:7e:89:6f:39:d8:31:83:dd:7a:6a:75:
43:72:87:0c:6b:e3:a2:a7:82:cf:8b:a4:4b:f7:25:98:6b:8d:
77:02:50:3e:77:7b:c5:2a:53:df:96:71:6d:f9:37:54:5f:86:
21:5e:45:5e:51:d4:71:09:12:ea:e9:9a:22:06:af:68:72:82:
64:63:d3:bb:d4:58:37:0b:e3:21:46:b3:d3:90:28:7f:21:75:
86:60:4e:5d:bf:87:ec:26:1d:06:6b:bf:31:99:e5:86:5b:2c:
c5:f0:2c:c4:70:af:b1:e1:2a:0f:a4:10:9c:38:b8:40:35:05:
7b:65:0d:ca:4e:d1:c4:fa:90:f1:e0:7e:9d:3b:0f:69:7f:e2:
58:ae:24:33:8a:95:21:1f:31:8a:92:99:4f:e1:56:33:3b:9d:
63:6b:8a:18:e8:14:d9:8d:76:ef:1e:ca:17:2e:1c:16:27:5b:
c9:94:3f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:53:52 2025 by rpki-client