
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
File: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft (raw, json)
Hash identifier: uC9qsKL186hO1fRdIa59/oKtMazuyNjQKUc1920fUPs=
Subject key identifier: CC:3A:07:63:F2:EC:66:AB:F6:0F:82:19:FF:94:2C:79:35:90:1C:05
Authority key identifier: 2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
Certificate issuer: /CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Certificate serial: 019676B14B151773EF30BA6D7343311541C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
Manifest number: 02D8
Signing time: Sun 27 Apr 2025 10:00:52 +0000
Manifest this update: Sun 27 Apr 2025 10:00:52 +0000
Manifest next update: Mon 28 Apr 2025 10:00:52 +0000
Files and hashes: 1: K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl (hash: EOKk0Yzy1/jcaw0nUPeEhfdc/5Mu7q7M98UC2ggc5FA=)
2: sWNNpgMtdwo9DAGm3hQEfuzD9Oo.roa (hash: vP2EAWCKtEv68Ix4O5DKWgGMPVW5lFga8QKrSKSQB2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:4b:15:17:73:ef:30:ba:6d:73:43:31:15:41:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b73aa8437bc6723519d0f320bf1f1704141a53d
Validity
Not Before: Apr 27 10:00:52 2025 GMT
Not After : Apr 28 10:00:52 2025 GMT
Subject: CN=cc3a0763f2ec66abf60f8219ff942c7935901c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:10:52:3d:f7:21:8f:5e:4e:85:44:eb:5c:15:
0b:d1:18:35:8a:bb:d0:bf:2c:1d:e4:81:94:4b:5e:
78:aa:fc:c9:61:d4:0d:05:62:51:31:18:91:45:c2:
b6:e2:89:a7:50:8b:58:f3:4b:12:cf:04:75:ad:6d:
1a:b7:bd:58:2b:51:34:f4:98:37:9e:4b:b0:6c:91:
c5:93:42:bf:67:85:d3:c4:e9:ab:f1:fe:84:7c:12:
de:0b:a8:cc:a8:9a:6c:a7:4c:a2:d5:da:7c:23:d7:
b7:db:e8:74:78:e4:0e:9d:88:8f:a4:2b:5b:33:c0:
4b:df:8a:3f:e1:9a:62:f3:ee:ff:8a:fe:7c:60:30:
99:af:28:55:e7:5c:91:af:e2:9e:c5:e6:62:33:86:
e3:3c:60:4a:0b:e4:ad:45:34:eb:13:bc:bf:d0:e6:
bc:4d:94:45:dc:2a:e7:ac:22:e3:0e:78:c2:7e:f3:
77:f2:a2:84:57:90:b6:1b:70:7c:2f:7d:1e:e8:6f:
27:a8:29:67:bc:fe:f8:e2:2b:0b:26:b2:86:d7:89:
cf:fb:92:2e:58:c9:a8:4f:86:70:07:2b:70:0a:04:
18:d2:bb:10:18:7a:d2:4c:72:92:09:58:ff:3f:02:
bb:65:1e:92:da:90:bb:6e:06:a7:6e:3c:4d:38:11:
5e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3A:07:63:F2:EC:66:AB:F6:0F:82:19:FF:94:2C:79:35:90:1C:05
X509v3 Authority Key Identifier:
keyid:2B:73:AA:84:37:BC:67:23:51:9D:0F:32:0B:F1:F1:70:41:41:A5:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/b0ca94-0f1b-488f-9723-521fce6b64d9/1/K3OqhDe8ZyNRnQ8yC_HxcEFBpT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:ca:a1:36:bf:a5:3c:38:70:6d:72:aa:c9:09:fc:cb:ca:ee:
84:cf:1a:a4:db:92:1d:40:f7:72:9f:09:22:c0:95:69:fc:64:
8c:09:da:cf:2b:60:62:3c:b5:77:c3:d9:3d:55:b6:d7:24:e4:
de:1f:01:76:e3:88:6e:4a:d1:8b:c1:a0:b9:14:e1:7f:3e:6e:
c6:a0:8e:d8:61:ca:62:39:c9:85:77:dc:3c:40:ab:be:07:f0:
ba:23:65:e0:f2:f2:bb:95:c2:b1:ed:cb:41:63:1a:84:a1:ec:
33:03:8a:00:36:83:8d:36:7c:91:e8:54:04:01:93:8d:51:5a:
aa:f8:80:91:dc:3b:7b:ef:72:68:9c:e7:0d:fd:8c:9f:01:d2:
d5:5e:dc:62:6b:61:96:5c:59:30:cc:aa:f4:89:15:4a:d6:f3:
29:75:c9:e4:eb:25:26:c5:6f:64:19:76:78:df:45:68:52:82:
df:01:9f:10:6e:07:5c:5a:dc:19:e3:b8:b7:cd:f6:2a:bc:32:
5a:3b:92:ee:ef:39:c6:01:6f:33:e9:31:2f:95:95:a9:f9:e6:
26:1b:44:4a:29:30:99:24:b1:92:f1:08:f8:30:d9:92:d9:a3:
2d:42:06:a4:0d:e8:32:62:f6:c1:e2:25:7c:95:7b:20:fa:c9:
55:e1:da:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 14:17:48 2025 by rpki-client