Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
File: kWg1p4YCMde8FkjUX46Vf1FQWyg.mft (raw, json)
Hash identifier: wWHwu3OGMvGKsqc72J968gX5fp6vDrQC6rtQh/R+6/I=
Subject key identifier: 47:33:79:BF:96:96:F8:15:39:48:C6:FF:22:8C:E8:CE:71:D5:AC:8F
Authority key identifier: 91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
Certificate issuer: /CN=916835a7860231d7bc1648d45f8e957f51505b28
Certificate serial: 019681347DF64C5FCA9207447645E57A5922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
Manifest number: 02F3
Signing time: Tue 29 Apr 2025 11:00:22 +0000
Manifest this update: Tue 29 Apr 2025 11:00:22 +0000
Manifest next update: Wed 30 Apr 2025 11:00:22 +0000
Files and hashes: 1: kWg1p4YCMde8FkjUX46Vf1FQWyg.crl (hash: yL+juxt7InMw5u+S05OMUAuctfyJwe3ES0PhG818q0E=)
2: wrpYuCoTA0QDqUx1_Pjj2R81Fzo.roa (hash: EwlJIDraNdoBBYvI+7Xd9v0lh6FgCXu/F5yckTradM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 11:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:81:34:7d:f6:4c:5f:ca:92:07:44:76:45:e5:7a:59:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=916835a7860231d7bc1648d45f8e957f51505b28
Validity
Not Before: Apr 29 11:00:22 2025 GMT
Not After : Apr 30 11:00:22 2025 GMT
Subject: CN=473379bf9696f8153948c6ff228ce8ce71d5ac8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a2:ac:c3:bd:ff:7b:c9:ef:e0:04:0c:47:26:
03:c5:f5:d7:37:b4:90:28:3d:99:20:17:db:b7:d0:
84:ce:fb:87:26:9f:99:e2:87:8e:86:5a:0d:af:60:
23:c3:8b:54:f8:6c:c9:d9:57:b5:da:6d:9a:04:93:
1e:1e:9d:e8:fe:b4:ea:b9:8f:4d:d1:66:77:2d:eb:
91:1c:4e:3b:47:02:a7:9d:9e:01:f8:ce:da:df:fc:
9c:2b:af:6a:3a:fc:3d:3e:69:79:70:89:ab:4c:d6:
83:a4:f5:62:99:06:28:3c:dc:aa:ee:b7:42:2c:0f:
8b:8f:82:db:d3:c8:21:bd:3d:f1:b2:d2:ab:08:7b:
ee:e0:81:db:a0:75:bc:c7:3c:99:1f:4e:23:56:27:
ae:46:55:10:ce:95:cf:61:42:9b:d5:c4:08:51:73:
c9:86:b8:a5:61:18:da:ad:ea:b0:f4:d5:78:5f:99:
ce:72:b8:21:0e:38:83:73:66:31:66:06:74:59:26:
2c:9e:eb:a0:ec:1f:a2:3e:c3:f6:7b:e1:b9:00:1d:
2a:3e:44:f4:31:50:56:53:43:0c:59:98:1e:a0:eb:
dd:a1:c6:7d:1c:5c:4a:9f:8b:f3:7b:09:08:d0:f8:
64:f8:2a:a9:f6:c7:da:6e:01:4b:95:34:d0:a6:ae:
e7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:33:79:BF:96:96:F8:15:39:48:C6:FF:22:8C:E8:CE:71:D5:AC:8F
X509v3 Authority Key Identifier:
keyid:91:68:35:A7:86:02:31:D7:BC:16:48:D4:5F:8E:95:7F:51:50:5B:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kWg1p4YCMde8FkjUX46Vf1FQWyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/eeb177-36b9-43d3-9cfa-4debb1afa997/1/kWg1p4YCMde8FkjUX46Vf1FQWyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bd:85:04:b7:65:79:62:f6:42:90:0e:e8:4b:4b:5b:98:ab:
0c:a9:f4:47:9a:e4:0f:69:9c:75:91:8c:2d:b0:9d:de:20:cb:
63:f8:44:22:c5:1d:f9:72:8c:87:93:ae:db:c5:cd:25:00:6a:
06:f5:6c:63:bd:bf:f2:c5:07:9e:d1:76:2d:0f:68:0c:5a:2e:
75:72:6a:01:2e:69:ba:bf:81:81:b2:fd:84:88:98:a7:a1:78:
16:72:f2:55:87:99:67:44:98:94:09:83:ed:93:a4:1f:5d:58:
b6:77:23:de:6f:bc:72:40:16:49:50:13:88:a7:74:71:12:3c:
9c:04:00:ca:18:45:0e:2c:73:c5:b0:e9:5b:f0:6e:aa:b6:0c:
49:5d:73:da:08:72:46:39:8f:b3:ad:59:a5:ba:36:40:ad:06:
5e:e6:89:0d:f5:10:83:7b:c6:3b:61:59:15:a6:ac:33:5f:3f:
20:da:ef:06:04:ed:05:a3:74:9c:4f:94:5b:fb:29:79:ee:77:
63:d1:a4:c8:a8:10:e5:eb:e6:6a:d8:a2:af:cb:83:a8:ba:12:
74:e0:df:a8:9a:61:00:d4:5f:1e:46:35:37:e9:f8:f4:90:e3:
d3:0a:87:44:0b:bf:81:19:d6:62:da:5b:d5:15:80:5e:98:ed:
cc:e6:f3:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:42:00 2025 by rpki-client