Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: dl37WX2kXAZjhxYWtd135Qq+ISQioWODr5IhtXJ797Y=
Subject key identifier: 43:66:FD:8C:0D:A7:4F:88:5B:76:C8:79:F7:27:83:4F:73:A3:E2:E4
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 01969183C76E11C9997D571262E1A6311687
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 1520
Signing time: Fri 02 May 2025 15:00:54 +0000
Manifest this update: Fri 02 May 2025 15:00:54 +0000
Manifest next update: Sat 03 May 2025 15:00:54 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: V2MT8+I2G4hJF+0AkAY9G87OtlrDsK4jEdEhLJ3psxk=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 14:24:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:91:83:c7:6e:11:c9:99:7d:57:12:62:e1:a6:31:16:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: May 2 15:00:54 2025 GMT
Not After : May 3 15:00:54 2025 GMT
Subject: CN=4366fd8c0da74f885b76c879f727834f73a3e2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7e:a2:de:33:3d:b0:b4:dc:55:07:07:82:cf:
b5:f9:1b:2a:aa:73:c3:58:f6:27:9e:6f:a1:56:81:
d3:f9:6d:b0:91:9d:18:43:4d:64:c0:9a:6a:0c:a7:
40:e7:a2:e3:f4:65:e4:0a:b7:b9:b9:ac:1f:43:cc:
14:31:87:a9:74:56:92:f0:23:9d:94:6e:89:c8:fc:
05:ed:88:a9:03:25:fc:d8:ad:88:2c:16:f4:85:8d:
15:49:b5:f3:72:70:c4:52:1e:41:7d:64:67:67:28:
74:ce:20:bc:f7:f1:27:83:62:4d:c8:f0:52:35:ae:
52:4d:8a:f5:45:a0:be:c0:70:62:23:fd:34:f1:a9:
bf:4a:6e:c8:26:2e:06:47:82:71:f1:05:ae:7b:0d:
1e:5f:0b:29:61:5b:70:e6:95:3b:f7:7d:c9:08:28:
e3:c6:9d:fc:d6:7f:4d:d2:90:51:c8:f0:33:49:28:
21:f3:97:6a:4f:ab:52:97:9c:56:14:f1:a9:50:c2:
d1:71:ab:99:44:c2:71:74:28:4c:2c:64:fa:e5:9f:
b3:33:b9:07:34:06:aa:f2:b0:99:40:3f:66:18:14:
e6:5a:30:3f:23:ab:27:e9:d0:96:e3:cb:96:2f:02:
bc:8a:73:59:ea:21:46:f7:e8:a4:f8:1f:a8:74:a3:
43:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:66:FD:8C:0D:A7:4F:88:5B:76:C8:79:F7:27:83:4F:73:A3:E2:E4
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a8:18:9d:c5:d8:af:e5:59:f0:2f:a4:a0:87:ad:37:9f:68:
9a:95:b0:03:46:31:54:7f:5c:e8:69:04:27:4e:18:b2:14:35:
5d:c4:df:98:25:8f:02:32:ee:15:8c:cc:8d:09:e9:b5:a7:15:
02:bb:03:9c:28:c8:98:b9:b3:c9:50:2b:bd:b9:15:4c:1a:be:
7d:69:ef:01:fe:7b:96:e6:f0:12:64:80:16:7b:04:b5:21:88:
25:e7:d7:6a:15:d1:91:37:26:3c:2a:bd:b1:c5:96:9a:2d:4c:
0a:b7:5f:99:e3:c0:2a:b0:88:f4:6e:e7:24:73:cb:6d:f9:33:
99:04:ec:de:be:a6:cf:7f:38:7b:0e:ca:79:21:39:46:22:d3:
cd:f4:7f:a5:ea:74:4f:ed:c9:05:fb:05:f1:b4:9f:86:c2:b9:
e5:d2:5b:19:9e:e0:8f:84:5f:59:a5:6d:86:45:6b:b5:ff:45:
2c:39:de:ad:7a:d8:c0:17:73:42:22:2c:9f:67:df:34:3c:9e:
0b:93:0e:8a:ac:a4:df:14:d7:5b:5a:20:95:e3:7a:3d:0f:b0:
05:8e:74:55:3c:ec:38:65:87:f6:eb:5c:d7:42:b9:2d:02:6d:
99:d7:0c:88:5b:61:df:3a:65:3f:7b:37:bf:74:0b:72:76:84:
89:bc:a3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 23:23:15 2025 by rpki-client