Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
File: KoyNUYbIdxRVvhMbDHz9ZufThlU.mft (raw, json)
Hash identifier: z0LQNr34F4WqPmCsEZ4jXs5mWtPMc+2shdBbVCbqx9A=
Subject key identifier: BD:7A:F4:0C:7D:32:09:4B:6C:5F:CC:C0:FB:07:30:0E:FC:0C:3B:15
Authority key identifier: 2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
Certificate issuer: /CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Certificate serial: 01967F7D15DA49197696CF1BE206281C961A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
Manifest number: 031A
Signing time: Tue 29 Apr 2025 03:00:26 +0000
Manifest this update: Tue 29 Apr 2025 03:00:26 +0000
Manifest next update: Wed 30 Apr 2025 03:00:26 +0000
Files and hashes: 1: KoyNUYbIdxRVvhMbDHz9ZufThlU.crl (hash: B3l80HHqlXD4TZrS8woz7dUqo5uw669aElz2ynr54KM=)
2: _L4_714o--k52AHUTKE5ELIZMFQ.roa (hash: ji6+L6kBm6VqOpTZxUmb7EEqHaNzozcu4JNvhJv1V2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 03:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:15:da:49:19:76:96:cf:1b:e2:06:28:1c:96:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a8c8d5186c8771455be131b0c7cfd66e7d38655
Validity
Not Before: Apr 29 03:00:26 2025 GMT
Not After : Apr 30 03:00:26 2025 GMT
Subject: CN=bd7af40c7d32094b6c5fccc0fb07300efc0c3b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:53:b1:1a:ad:bf:ae:6b:9c:4f:c7:2f:67:66:
8e:8b:8e:cd:fa:2c:ea:3d:da:db:db:7d:1b:8e:e3:
28:27:96:01:d0:fb:6b:7d:11:3a:8f:91:e3:4b:44:
d4:04:de:ec:6a:32:d3:88:ce:fa:bc:e0:d1:84:c3:
18:e0:5a:09:a2:71:41:46:33:0e:58:0c:b0:a0:61:
81:f4:38:4a:56:52:ad:45:cc:b2:0b:af:ef:2e:bc:
85:48:d1:c7:04:d8:d2:b0:3a:4d:38:a8:95:49:f0:
64:19:8b:b7:d3:f8:52:52:61:07:82:9d:9f:a0:19:
8d:79:64:7d:85:22:3c:db:0b:b3:5a:f4:f3:06:c8:
85:b7:8b:69:1a:f0:b5:42:1b:00:e8:5c:02:18:51:
ea:cf:2c:bb:82:82:55:db:ea:9b:0f:60:0e:32:15:
1f:6d:f6:3a:80:b8:e9:2d:19:ea:08:70:1b:31:7e:
6f:73:ab:1b:cc:54:e6:c6:d6:19:1b:37:89:61:22:
42:40:40:c0:f5:91:b4:3e:52:e1:fa:75:e5:ec:69:
23:0d:f8:9a:19:d3:ef:24:49:0d:9c:bb:f4:53:2a:
b2:07:6e:75:0e:8b:54:32:47:9c:aa:03:4b:bc:67:
46:fd:ee:dd:11:fc:99:41:22:b3:44:b7:c7:dd:fa:
cd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7A:F4:0C:7D:32:09:4B:6C:5F:CC:C0:FB:07:30:0E:FC:0C:3B:15
X509v3 Authority Key Identifier:
keyid:2A:8C:8D:51:86:C8:77:14:55:BE:13:1B:0C:7C:FD:66:E7:D3:86:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KoyNUYbIdxRVvhMbDHz9ZufThlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3496d1-332c-433b-9980-269a51dd8d38/1/KoyNUYbIdxRVvhMbDHz9ZufThlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c5:dc:c5:5d:5d:9f:b4:5e:fb:b1:37:82:d4:77:66:80:f3:
a2:e8:83:b6:ef:d4:f5:1c:87:fd:d2:14:24:d5:8b:a7:c2:b9:
f5:f2:0b:4f:fb:00:c9:65:82:2d:18:72:18:39:3d:92:71:d6:
9d:d3:87:28:ad:52:52:fc:ce:c9:1e:00:59:40:9f:4b:d0:25:
fa:35:ad:98:60:ac:4a:bb:ea:9a:85:02:59:be:04:6a:eb:52:
e8:b4:64:be:ca:ac:35:12:31:ad:fb:df:d7:a6:98:75:02:7c:
c5:6b:c6:53:ac:b5:f5:98:22:2c:17:b4:6f:56:6f:b1:17:96:
58:10:eb:9d:7a:d9:49:54:40:ba:e3:8c:d7:1d:2a:a0:2a:d3:
ae:f4:0b:43:e5:33:19:89:ea:55:60:1c:64:66:3f:80:12:85:
c7:a0:2d:19:b5:a8:4d:33:8f:50:c5:c2:ad:29:a2:ca:59:c8:
dd:a5:1d:fb:a4:db:02:07:29:b6:2c:79:ee:8e:eb:b3:0c:5b:
ea:4a:76:b2:f7:b6:7f:cb:20:06:8a:a9:62:ca:43:60:fb:0d:
db:41:39:2b:d8:bc:33:3f:9f:4d:1a:d5:ec:32:81:3e:94:03:
4b:16:bc:cc:30:37:0b:c2:b9:9f:43:3c:71:eb:76:7c:ea:b8:
f0:1b:e0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:29:12 2025 by rpki-client