Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
File: KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft (raw, json)
Hash identifier: FpEFcrVHYMbbC2FrtZ/lKfGLASRAlUYSUq9EFx5KJWw=
Subject key identifier: 33:19:25:41:0D:74:B4:97:B3:54:95:A8:20:D8:B3:00:BC:6D:C4:10
Authority key identifier: 2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
Certificate issuer: /CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Certificate serial: 0196771EA20E1F120EF389F3C2285A47F37F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
Manifest number: 08F9
Signing time: Sun 27 Apr 2025 12:00:18 +0000
Manifest this update: Sun 27 Apr 2025 12:00:18 +0000
Manifest next update: Mon 28 Apr 2025 12:00:18 +0000
Files and hashes: 1: B-4mThf4e-80zWpEOjTSvUoatyg.roa (hash: iLGZvkSCMs5F+PZw6Uabdz+fABoTG9YghxbSRDf22wI=)
2: KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl (hash: k/QxtPE6DYgoN197o9849JyRXhdlwjcoBiYyY4Tcw34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:1e:a2:0e:1f:12:0e:f3:89:f3:c2:28:5a:47:f3:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa17ed407432c418b1c9eaf61fd1ca1cbff6a74
Validity
Not Before: Apr 27 12:00:18 2025 GMT
Not After : Apr 28 12:00:18 2025 GMT
Subject: CN=331925410d74b497b35495a820d8b300bc6dc410
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b8:17:76:3f:1d:8d:33:42:ca:82:38:53:97:
c5:2e:60:c5:5d:31:fd:ec:b5:ca:f9:22:9d:86:5d:
b3:0a:c7:49:d7:a8:1a:c9:b9:cc:dd:26:0e:ec:5f:
ab:1e:40:90:a7:4f:3e:35:6a:72:44:d7:86:25:51:
e5:a1:64:b5:05:ac:f7:62:46:d6:0b:17:55:94:38:
43:7b:42:f3:b2:89:22:c0:d7:4f:3a:e3:33:f5:34:
5e:9c:c6:c3:86:de:ab:41:52:2c:0c:2b:13:98:3d:
f6:67:a0:20:67:ba:07:7e:3c:c8:25:fc:60:de:c9:
fb:1d:16:f3:e8:32:1d:a8:dd:0b:08:22:9d:86:f3:
a9:bf:4d:7b:41:5c:d9:06:41:d4:f4:ce:3d:28:02:
cc:ba:a7:6c:4c:17:86:17:ac:f9:0e:ad:df:cc:f5:
92:a6:cd:2f:a4:8c:7c:a1:30:f1:8e:81:7a:96:15:
0f:16:91:06:38:05:60:0c:3a:81:d7:2e:01:92:e5:
d0:f8:51:7c:ef:aa:b1:6a:88:fc:95:14:15:ff:81:
69:dd:de:89:b3:d5:55:6c:86:67:95:9e:3a:07:7e:
be:28:be:2f:a6:5e:9a:59:ec:8f:0a:22:7b:bd:83:
92:37:87:a8:e6:5e:bd:ef:11:5f:be:bc:a2:9e:af:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:19:25:41:0D:74:B4:97:B3:54:95:A8:20:D8:B3:00:BC:6D:C4:10
X509v3 Authority Key Identifier:
keyid:2A:A1:7E:D4:07:43:2C:41:8B:1C:9E:AF:61:FD:1C:A1:CB:FF:6A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqF-1AdDLEGLHJ6vYf0cocv_anQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/54d437-a277-41bd-988f-950f0a0101a9/1/KqF-1AdDLEGLHJ6vYf0cocv_anQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:44:39:28:48:1e:05:b2:76:7c:bc:9e:35:9c:45:5b:46:99:
a3:eb:4b:71:91:9f:8e:65:50:8b:35:cb:5f:2c:09:34:c0:e8:
77:77:38:e3:cb:d0:ae:a1:0f:7a:5f:2a:ce:00:56:48:39:0f:
a4:d7:d0:c2:d8:7b:40:05:09:cf:c8:55:c2:72:d0:02:15:8f:
9c:7b:49:0f:2f:2e:7f:87:4d:04:f5:0b:0f:eb:90:01:24:2b:
a0:89:17:03:8e:47:b6:5f:d5:5b:e7:35:43:fa:e6:8f:0e:8f:
08:08:22:00:53:ea:34:31:bd:bd:09:c0:77:75:20:42:77:9e:
3c:ef:93:28:0f:14:42:c5:da:d9:0b:76:5a:2a:b5:51:fe:6a:
d3:08:f4:86:4f:ed:e6:31:d2:77:99:49:7b:07:e9:71:5d:43:
d4:f4:df:f1:ee:b7:ac:fa:e5:56:b4:d6:fd:d0:51:77:22:27:
97:9a:86:e2:12:ea:64:c4:20:4f:9b:b8:24:0e:05:91:9b:73:
de:eb:8c:70:bb:77:ed:3c:9b:29:91:f1:9b:ad:2e:ac:05:7a:
aa:d7:fc:ff:ea:c8:80:a9:84:ad:e7:3f:af:3c:cb:02:67:b2:
11:a2:82:f7:1c:25:c5:97:14:12:d7:2f:f3:fd:6f:bc:52:f2:
e6:d4:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:17:27 2025 by rpki-client