Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
File: KwFArTlBTE6rAqxVQitEFj7TSw8.mft (raw, json)
Hash identifier: 5B3PjQwR5qV+DyWg7+B1aaK8zGJf2Lm5bLWNUEHNAkM=
Subject key identifier: 84:67:DB:AC:7D:C0:E2:28:9B:8D:9D:AE:E8:F3:2A:0F:73:50:7B:02
Authority key identifier: 2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
Certificate issuer: /CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Certificate serial: 0196948474B62E2973A654B9EBB7CF0DABF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
Manifest number: 0275
Signing time: Sat 03 May 2025 05:00:30 +0000
Manifest this update: Sat 03 May 2025 05:00:30 +0000
Manifest next update: Sun 04 May 2025 05:00:30 +0000
Files and hashes: 1: KwFArTlBTE6rAqxVQitEFj7TSw8.crl (hash: 7MGbtN5PBEIMyvxHC/FlKRosFvzUKjmMSeV3tdecVkI=)
2: OsS2avf_SCsvTL1pRqTL_5n-su8.roa (hash: q2VY8Sbvggao2o4h3H+VtLne6bMzXujw9hwcUuBVuOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:94:84:74:b6:2e:29:73:a6:54:b9:eb:b7:cf:0d:ab:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b0140ad39414c4eab02ac55422b44163ed34b0f
Validity
Not Before: May 3 05:00:30 2025 GMT
Not After : May 4 05:00:30 2025 GMT
Subject: CN=8467dbac7dc0e2289b8d9daee8f32a0f73507b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2f:01:9e:5c:e0:5b:93:4a:08:00:31:74:6a:
fb:28:51:d2:be:27:01:57:fd:e3:1c:7b:dd:a2:e3:
c6:49:39:64:02:2b:bf:99:f1:2c:f6:cb:e0:a9:8c:
e1:b9:7a:1d:53:91:a1:96:75:97:e1:9c:98:83:9c:
d8:16:86:11:76:6c:9e:04:e1:c5:a7:d6:19:4a:74:
d1:77:5b:0d:d5:0d:43:7e:4a:5c:33:0e:98:dc:39:
00:e1:ee:c9:89:f2:f3:49:16:23:ab:d8:69:4e:51:
38:6d:0a:1f:0f:6c:60:22:08:4f:8d:2e:c5:f5:ea:
a9:a3:c6:d2:38:7a:5b:9a:29:40:22:ff:18:5f:6a:
2e:96:94:dc:76:8e:4d:e4:a7:e1:e1:54:2a:95:57:
0a:1a:d9:a7:08:00:f5:34:44:8f:a3:b4:a6:4e:df:
b9:c1:29:72:cb:a0:67:c7:a0:f0:21:69:d3:d8:22:
dd:de:4e:8a:73:18:7c:ad:93:46:95:24:db:ac:66:
77:de:33:c9:46:b7:35:7b:bd:e2:05:85:1f:4e:63:
a7:2c:0f:3e:d7:86:cb:91:5f:96:1e:10:2a:92:dd:
c8:7b:10:b8:70:4e:cf:8d:5b:51:90:5d:54:b7:8e:
a7:5d:53:00:7e:35:01:4c:8b:4c:49:26:bd:ac:cb:
c9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:67:DB:AC:7D:C0:E2:28:9B:8D:9D:AE:E8:F3:2A:0F:73:50:7B:02
X509v3 Authority Key Identifier:
keyid:2B:01:40:AD:39:41:4C:4E:AB:02:AC:55:42:2B:44:16:3E:D3:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwFArTlBTE6rAqxVQitEFj7TSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/89c3e4-b613-49ec-ae25-2e75228f9261/1/KwFArTlBTE6rAqxVQitEFj7TSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b5:a7:bc:4c:d7:21:d6:46:17:96:12:1c:80:65:a7:d4:98:
90:eb:45:83:77:e2:3c:02:1e:49:ea:8e:65:21:4c:15:86:3b:
fa:e0:c2:b4:a9:d2:08:cc:ec:8a:cb:7a:ef:89:5b:66:0e:cf:
b8:26:a1:51:26:7a:44:56:98:78:35:e3:aa:25:43:ba:b9:ca:
8e:af:12:2e:4a:96:cf:41:0b:75:4d:a3:9b:b6:69:df:7d:77:
7b:cc:2e:73:36:23:63:94:b5:00:24:b3:7a:7a:7a:f8:b9:81:
a9:f8:ed:40:c5:cc:7e:b2:c4:6d:da:af:fe:e7:32:19:5d:05:
4c:20:89:c2:5a:d5:e5:66:5c:9f:25:95:d4:94:e0:65:85:da:
81:4c:ac:92:2f:b3:67:50:eb:9d:4d:62:0b:31:16:65:49:c2:
11:b3:ac:cd:4a:1c:de:c4:3b:30:41:50:b0:9b:23:1f:c1:2c:
65:72:02:d0:79:5a:9c:5a:55:df:e2:23:4f:52:8c:5e:cf:55:
bc:60:01:d5:3f:1f:e4:91:95:c5:6f:52:7b:0a:e9:ca:be:20:
c2:c9:99:89:68:1e:a2:5c:13:8f:4e:48:a8:1e:51:37:3e:3b:
de:4d:74:45:45:94:dd:40:c4:c2:d5:0b:64:04:cf:74:51:fb:
da:76:05:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 07:23:34 2025 by rpki-client