Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
File: K_CgGXhoxtjDTdFrP0TezF5CNvU.mft (raw, json)
Hash identifier: SP/sLendznFTi6rQN1CH8HWQSMZENzMHg02FRHbw5co=
Subject key identifier: F3:F4:F2:79:51:E6:B6:2F:D4:8B:E8:56:BC:E9:B1:8E:04:64:DE:2B
Authority key identifier: 2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
Certificate issuer: /CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Certificate serial: 0196854801DD74F89A290AB8676265AE0542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
Manifest number: 0CCF
Signing time: Wed 30 Apr 2025 06:00:10 +0000
Manifest this update: Wed 30 Apr 2025 06:00:10 +0000
Manifest next update: Thu 01 May 2025 06:00:10 +0000
Files and hashes: 1: K_CgGXhoxtjDTdFrP0TezF5CNvU.crl (hash: jUsppl4nGvzNitSZWt068p3tmPYyDwxMGy+noHmeMz4=)
2: cwewYqqUz_DTY7N101NBNvby5-A.roa (hash: 12Ilbr32JYBfPHCal30nzRY5XUe8GWiDmB7OIucWhgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:85:48:01:dd:74:f8:9a:29:0a:b8:67:62:65:ae:05:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bf0a0197868c6d8c34dd16b3f44decc5e4236f5
Validity
Not Before: Apr 30 06:00:10 2025 GMT
Not After : May 1 06:00:10 2025 GMT
Subject: CN=f3f4f27951e6b62fd48be856bce9b18e0464de2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:cb:89:67:12:0e:b9:cd:b3:cb:8c:81:98:
8b:6b:75:29:15:86:e1:c2:39:f0:5d:52:32:95:85:
a3:99:4a:57:24:a8:86:05:d4:79:14:25:36:04:81:
0b:95:3f:4f:2d:c0:c1:9d:8f:42:e5:63:7d:79:b3:
b0:6e:25:1b:cd:49:86:94:bc:7a:aa:84:54:30:ff:
4f:2a:6d:86:91:a5:f2:a8:6a:0d:f6:a1:35:0c:40:
76:fd:7a:10:b9:d8:b9:d7:7b:3b:56:c8:50:52:d4:
e9:62:7b:45:5d:63:fa:36:35:b6:78:a2:5e:39:83:
d6:c4:66:ee:fd:78:8b:d5:24:fe:1b:1d:5a:34:ec:
c5:0b:7f:31:d6:56:d2:6a:45:f8:60:15:6a:ae:58:
5c:6b:a0:40:31:a5:43:2c:0d:60:27:8e:e6:a7:bd:
8d:3e:a8:f0:26:b1:27:49:83:fb:46:25:72:d8:6d:
9b:31:37:3c:8d:aa:69:df:eb:f7:13:9c:50:89:a9:
a9:17:de:2e:45:85:3f:c4:d9:70:01:ef:48:7d:04:
32:ed:2a:5c:2d:09:59:d3:66:8a:02:d5:32:da:57:
56:31:f2:30:a4:00:00:94:b8:ee:02:cf:84:81:04:
f7:78:7d:e3:59:09:0a:69:db:2c:10:ff:c5:29:d9:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F4:F2:79:51:E6:B6:2F:D4:8B:E8:56:BC:E9:B1:8E:04:64:DE:2B
X509v3 Authority Key Identifier:
keyid:2B:F0:A0:19:78:68:C6:D8:C3:4D:D1:6B:3F:44:DE:CC:5E:42:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_CgGXhoxtjDTdFrP0TezF5CNvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/40d220-621d-46fb-ac9c-48b8366ff23e/1/K_CgGXhoxtjDTdFrP0TezF5CNvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:36:62:1e:54:e5:54:36:ce:7b:89:ae:8d:25:05:78:7e:b2:
76:d2:b2:ca:ed:23:32:a7:0e:99:fc:0b:a9:52:83:82:ec:4e:
c1:59:54:e7:de:c1:dd:26:f1:34:11:78:d4:50:93:fc:4f:17:
51:24:e9:5f:f1:0d:05:d4:fa:db:eb:d1:2e:32:6d:a5:1a:f6:
2b:8a:5d:c1:2a:e0:2e:db:79:16:d0:b9:e9:01:a8:70:da:6d:
90:b5:30:d8:3c:e6:3e:10:bf:cf:f6:bd:f3:8a:40:36:b2:dc:
f2:ab:ec:b3:24:e4:c1:6c:34:2d:4c:e7:fc:1e:a7:1c:b0:b9:
53:9e:04:5f:30:8c:c7:e3:21:e8:36:b4:d2:f6:b9:0e:92:d7:
6f:f4:20:2c:83:36:65:87:a7:6b:57:f9:c6:ad:c8:a2:47:5a:
e5:f2:b0:04:6f:83:8e:23:de:04:b5:d7:a3:9c:6c:2c:6a:75:
2a:53:a9:65:22:73:26:2f:2f:e7:3b:6b:87:88:dc:11:13:77:
73:47:f3:78:d6:c7:67:7b:a0:c7:37:7f:fe:36:ff:1e:25:c3:
b3:ba:2f:dd:00:fb:39:9d:9c:b7:01:eb:6f:4e:22:92:79:0c:
dd:8a:b4:6d:f6:ca:3f:db:76:b6:86:31:8c:a9:da:2d:b2:d3:
be:5a:3b:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:07:14 2025 by rpki-client