Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
File: KUoc22jxVM-VQYowjILY2lB3UQk.mft (raw, json)
Hash identifier: L0SK/rAKjh3nvuJNhIWQ56trzvJDNlYsYPv4SOZ1BOU=
Subject key identifier: A4:55:B2:8F:E9:B9:69:6D:DB:CC:81:BC:CD:90:B9:37:A9:9A:7E:C6
Authority key identifier: 29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
Certificate issuer: /CN=294a1cdb68f154cf95418a308c82d8da50775109
Certificate serial: 01967AC49759DBAF7AF77E3106511EE3E767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
Manifest number: 11A6
Signing time: Mon 28 Apr 2025 05:00:26 +0000
Manifest this update: Mon 28 Apr 2025 05:00:26 +0000
Manifest next update: Tue 29 Apr 2025 05:00:26 +0000
Files and hashes: 1: KUoc22jxVM-VQYowjILY2lB3UQk.crl (hash: XRreqljrm52tlUDjn/NTzrwUnUECAG/LyM0MK21TYRA=)
2: KZGod_BqVRdmwfNvBiSAHniE4gQ.roa (hash: 6XoOJiv494XxgxSZpKNQsumj729QUswWc6xs9n2QuB0=)
3: M1t61zFriLUhV6w-rpKhVc5pbtI.roa (hash: SMrR4aeWQHwd+VhRNHme2dIKoEpbr73IPaO3PrfJOhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c4:97:59:db:af:7a:f7:7e:31:06:51:1e:e3:e7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294a1cdb68f154cf95418a308c82d8da50775109
Validity
Not Before: Apr 28 05:00:26 2025 GMT
Not After : Apr 29 05:00:26 2025 GMT
Subject: CN=a455b28fe9b9696ddbcc81bccd90b937a99a7ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:16:c9:51:ea:4a:2c:b1:16:b8:39:38:ed:cc:
c8:0a:4e:aa:82:bd:47:aa:dc:4f:9a:32:18:9c:b5:
7b:ea:28:fa:fd:08:19:de:90:0d:72:58:57:ba:a9:
f9:97:3c:16:12:55:01:34:fe:b5:ec:82:d4:f3:39:
87:68:51:41:fe:5c:09:7a:ab:5f:1b:38:3e:25:3e:
8d:ec:ab:73:b1:6c:35:fb:4a:f9:50:04:3d:b6:18:
2c:a2:4a:07:2f:3d:84:a8:27:fc:71:b9:c8:89:b4:
d5:66:e6:fd:81:7b:40:00:de:47:f8:a7:cb:dd:d0:
ea:e6:60:b6:69:a6:96:1a:42:d5:cd:fa:db:a4:84:
95:7f:b7:b5:86:8b:e2:78:7e:0f:6b:f5:be:d3:65:
e3:5f:63:4b:70:60:e1:b8:33:ef:d4:58:be:aa:cb:
5e:ce:7a:23:e6:67:28:6a:a6:f9:1d:2a:cb:a3:07:
d1:db:f4:d0:6e:02:05:9b:70:68:26:a5:96:52:6e:
0a:f3:80:48:70:27:ea:63:c7:81:bc:7a:08:65:ab:
b4:49:96:d6:e1:c0:3c:21:a8:4f:aa:9d:aa:48:b0:
07:25:0e:d4:46:b7:44:50:19:9f:1e:cd:af:50:35:
a8:b8:a8:fe:b3:23:9a:dc:31:27:85:a6:d0:35:54:
7d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:55:B2:8F:E9:B9:69:6D:DB:CC:81:BC:CD:90:B9:37:A9:9A:7E:C6
X509v3 Authority Key Identifier:
keyid:29:4A:1C:DB:68:F1:54:CF:95:41:8A:30:8C:82:D8:DA:50:77:51:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUoc22jxVM-VQYowjILY2lB3UQk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/04f474-e3b5-4595-a044-657e41c63ca9/1/KUoc22jxVM-VQYowjILY2lB3UQk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d3:52:0d:93:31:1d:16:25:b0:90:25:64:02:ab:a4:a3:04:
95:59:80:37:9f:43:78:65:02:f7:c8:54:a9:92:d1:67:eb:64:
59:f3:5e:5a:8a:87:b9:4c:42:2f:2a:b3:31:0c:4c:c9:76:d6:
da:f1:a7:34:c0:91:ba:ad:2f:79:46:94:2d:48:67:ca:d1:0e:
8c:5f:ba:31:77:8f:6c:c7:35:94:45:81:70:c9:57:82:fe:d6:
dc:ae:c9:70:ea:93:f0:14:f5:30:c0:4d:e6:5c:da:21:df:c8:
95:4f:cd:d4:1a:7a:1f:7c:32:7c:a4:d6:56:17:bd:e8:a7:8a:
75:a0:b1:b6:9b:98:e0:13:8f:4e:51:38:c1:49:e5:24:b0:27:
5a:7e:67:96:33:91:93:61:b3:3c:be:40:61:72:ae:0c:a6:ec:
dd:f0:c2:9e:a8:00:4f:bb:ed:54:8a:6a:c3:a4:48:87:de:5e:
a6:3b:6d:ff:8f:47:14:53:a9:8e:d1:c2:fe:c2:77:79:5d:60:
e3:93:d9:c7:19:d3:20:26:a4:21:f1:21:b2:e6:9f:c0:3c:e4:
59:67:f5:c8:64:63:77:32:e3:4e:fa:08:fe:3e:4b:18:ef:d4:
52:b9:36:9e:4f:cc:2e:0d:1a:69:b5:21:9e:52:7e:f0:44:3a:
c7:8e:ea:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:03:43 2025 by rpki-client