Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
File: KcmwQBb28CGDMHwX32MKAonsW7U.mft (raw, json)
Hash identifier: Qu+Glvjic/GUwSq1ZNc80Kgb/g3vzdwLOq0n+GXx2ow=
Subject key identifier: 12:0B:3C:19:D7:E7:89:A0:2F:F7:3D:C1:7A:DF:C0:86:AE:0D:14:11
Authority key identifier: 29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
Certificate issuer: /CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Certificate serial: 019677560D47DD00B0FB14E4E6CA1D42EAF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
Manifest number: 0D71
Signing time: Sun 27 Apr 2025 13:00:50 +0000
Manifest this update: Sun 27 Apr 2025 13:00:50 +0000
Manifest next update: Mon 28 Apr 2025 13:00:50 +0000
Files and hashes: 1: KcmwQBb28CGDMHwX32MKAonsW7U.crl (hash: bHE/11yLM5IVOQxDzxN6YNRay9Fu4mBtXqRpnQg6zHA=)
2: UdEEZQE09FsGfYOWUhVww5xs81M.roa (hash: 6mSyURdhs/eGBTOXFJi0QulmUdFyZbb3K6nx0/FAyzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:56:0d:47:dd:00:b0:fb:14:e4:e6:ca:1d:42:ea:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c9b04016f6f02183307c17df630a0289ec5bb5
Validity
Not Before: Apr 27 13:00:50 2025 GMT
Not After : Apr 28 13:00:50 2025 GMT
Subject: CN=120b3c19d7e789a02ff73dc17adfc086ae0d1411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:75:5c:23:81:08:a8:28:ad:c3:40:3c:b4:b3:
5c:47:b4:90:15:a9:8d:40:8f:15:cb:b5:d7:e0:af:
43:f5:55:f0:75:36:8b:d9:07:1c:08:10:db:eb:83:
aa:76:ed:00:be:4d:a3:10:58:14:d6:64:12:5a:89:
e2:49:4c:e2:df:ac:80:14:9d:8d:6d:51:aa:1f:e1:
e9:81:51:9d:d6:c3:5c:55:d9:56:b3:3c:cf:73:55:
c6:3d:25:9b:3c:37:8e:c2:08:8c:60:8e:59:8c:db:
98:46:86:4d:84:8c:fd:a6:88:aa:1f:66:af:7d:b1:
b8:b1:fe:70:ed:f1:dc:97:fd:b9:e2:dc:fe:a8:a3:
c3:e1:e6:20:2a:bb:50:c8:50:df:e4:90:d8:86:a4:
75:51:b7:0a:39:8d:97:bc:ef:48:51:bc:db:20:55:
66:89:50:60:03:5e:96:3e:80:a0:43:10:21:cb:f6:
cb:5e:f9:98:1d:29:3c:4f:58:de:f5:b0:b1:b4:20:
b6:01:2b:34:6c:2e:c3:c3:5e:ab:99:ee:3c:8c:23:
e1:cd:95:6b:34:1a:0f:ab:12:23:63:bd:71:0a:78:
8a:29:f6:f2:2b:5e:7e:c7:8d:05:13:ed:61:4e:b0:
42:b4:e0:13:aa:fd:8d:01:0c:c6:9e:09:44:8b:fe:
67:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:0B:3C:19:D7:E7:89:A0:2F:F7:3D:C1:7A:DF:C0:86:AE:0D:14:11
X509v3 Authority Key Identifier:
keyid:29:C9:B0:40:16:F6:F0:21:83:30:7C:17:DF:63:0A:02:89:EC:5B:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcmwQBb28CGDMHwX32MKAonsW7U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/551847-332d-4e27-b47a-1d591bbd4060/1/KcmwQBb28CGDMHwX32MKAonsW7U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:06:27:a1:f7:3c:ce:fb:4b:fb:51:27:5f:59:3d:6a:43:ec:
c4:30:40:a2:15:b1:11:c0:db:2e:a2:a9:55:73:70:e1:e5:2d:
dd:11:72:29:52:b7:34:e8:fe:a6:51:2f:de:3c:b4:27:5a:5b:
61:a9:d8:bf:7c:c5:68:23:eb:c5:cc:48:db:10:d9:5c:7d:12:
8b:73:7a:70:17:57:80:d6:36:d7:db:87:76:3c:32:67:de:05:
5d:50:c0:fc:f4:d2:b2:a9:3f:76:a3:25:2e:df:40:63:a6:a9:
ab:10:95:da:ca:2c:93:99:02:7f:ca:84:92:b3:e2:07:b7:6a:
c9:c7:24:ea:a3:22:4c:bb:33:b8:91:e3:22:d7:ae:42:e1:24:
7c:1e:bb:84:17:f0:39:a7:66:81:9f:67:d9:09:31:94:3e:dc:
b8:fb:85:30:33:e6:b5:e2:9a:79:f7:41:71:1a:fc:01:98:2b:
55:0c:3b:63:2e:15:ec:7f:29:6b:36:f6:50:87:bb:26:de:ec:
ff:4e:0a:fa:a7:00:4b:c6:66:e3:72:5c:f0:48:2d:00:51:7f:
83:13:ba:bc:b9:ed:2b:0f:d3:47:59:a3:cc:32:ae:8b:41:e2:
c1:e4:b9:28:cd:35:cd:85:5c:c3:e0:8c:9e:92:d6:80:71:c4:
31:68:9b:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:40:20 2025 by rpki-client