Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
File: KCnrZkUGuGv6H3Avax_7SEzCyxI.mft (raw, json)
Hash identifier: T8WpHNDHg5B4r2GTxDt+bUeV1FxJcgZ3+MyEH0KH3Es=
Subject key identifier: CB:98:A2:A8:6A:65:5B:04:92:03:43:27:32:D4:D3:CB:CB:5B:80:E3
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 01967D21506095A0DE9F6834921840E36829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
Manifest number: 0E0E
Signing time: Mon 28 Apr 2025 16:00:57 +0000
Manifest this update: Mon 28 Apr 2025 16:00:57 +0000
Manifest next update: Tue 29 Apr 2025 16:00:57 +0000
Files and hashes: 1: 3YY6GiMAHoxwyM3tSzQ_rLqI6Qk.roa (hash: LKb1pDdE0gPQ1/qoBSBh29z3OF0TSjmwJB0/pkVjbww=)
2: KCnrZkUGuGv6H3Avax_7SEzCyxI.crl (hash: JxrUBoe/zuvc56QA9GzDHIdA8LysLbdFJqGaE/Wn/0w=)
3: qVZvmvoLKS31NPSfpMQJyaGRrqk.roa (hash: SULs7/ySz/dcjuHf4saElB1X8gAKzCb6LN3XcIMxsQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:21:50:60:95:a0:de:9f:68:34:92:18:40:e3:68:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Apr 28 16:00:57 2025 GMT
Not After : Apr 29 16:00:57 2025 GMT
Subject: CN=cb98a2a86a655b049203432732d4d3cbcb5b80e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:30:2d:4f:6a:2a:ad:42:75:cf:e2:1d:ff:77:
fd:86:e7:15:ec:a6:b7:05:eb:4f:3e:fe:05:3e:97:
e8:ed:61:69:56:c3:c8:51:66:cd:e0:34:d6:1d:02:
5f:0e:ce:ce:13:9f:5b:dd:5b:08:9c:88:fb:5d:41:
1d:e7:b2:b5:09:02:71:44:38:d9:25:44:fb:b1:4f:
28:4e:bc:3f:3a:b5:fb:e2:ef:7e:1e:f2:c7:58:16:
b8:87:1c:97:d2:b1:73:8e:2a:e1:cf:c3:fd:4b:6b:
db:80:ec:ac:13:8b:6a:e9:c9:c0:4a:52:d9:40:9d:
c0:04:7e:30:d8:75:d1:54:87:70:0a:9e:b3:08:f2:
17:d3:e7:65:f3:4d:48:83:00:53:ea:49:52:84:7f:
4e:fb:14:4b:9c:dc:9d:cb:99:30:b5:18:7a:f0:a8:
e4:6e:7e:52:66:fb:20:1f:ac:89:80:2c:56:49:98:
10:c1:8e:7d:cb:5a:38:3b:a3:45:48:a8:64:bd:50:
a8:f8:4d:3a:ea:8f:88:78:ff:12:c2:d5:3d:92:d7:
d6:e6:9e:67:4e:e4:46:3e:af:cc:26:e3:11:7d:31:
3d:69:6f:e9:ee:5a:e3:ea:12:93:69:02:73:51:a9:
5e:2f:36:22:77:ac:87:fb:03:f2:21:df:ca:1d:a7:
7d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:A2:A8:6A:65:5B:04:92:03:43:27:32:D4:D3:CB:CB:5B:80:E3
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:81:2a:0d:a4:4b:2c:9f:0e:45:6f:9d:11:ce:fc:0f:69:17:
6a:fc:e6:ed:56:02:9e:10:4a:b5:de:69:c1:90:eb:64:f2:05:
8b:08:44:ca:b7:a4:0c:ff:8a:ca:46:21:da:bf:3d:b4:64:a8:
b2:d3:78:7a:11:39:77:eb:60:b1:3b:b5:c8:46:47:26:d6:33:
df:f1:12:e1:b1:c1:f6:5b:a7:27:61:8b:58:15:26:6c:8a:5b:
99:69:93:de:42:14:b1:45:2d:09:c0:13:fd:18:4d:0c:bd:4f:
51:3c:5a:1b:94:f3:ec:39:ba:89:b7:e5:ac:88:b1:93:1d:fb:
38:b5:6a:15:76:68:10:10:81:d2:f1:c6:ad:00:e5:c0:34:97:
52:22:4d:65:2c:6b:8d:8b:ff:08:c9:aa:35:6e:81:24:c3:9a:
af:b5:81:96:0a:36:34:95:e7:7c:5d:b9:b6:ae:26:7f:42:51:
bb:2a:61:ff:9c:4f:31:45:27:c9:62:b4:d4:ac:93:12:49:da:
0a:a1:80:7e:c3:83:5d:af:5e:9d:86:f5:dd:ae:60:aa:50:43:
91:3e:0d:9d:5a:c7:39:02:64:61:f5:b0:c7:56:19:f6:2a:db:
15:75:00:97:f7:54:43:83:50:ce:5e:32:60:5a:3f:c1:39:e1:
9d:fc:26:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:54:21 2025 by rpki-client