Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: iGHwmifbpwiqEJn+9t4v24taGPdBbMaxjSVy3rMxsZg=
Subject key identifier: B8:D3:F3:20:CF:B8:9B:A4:29:E1:36:01:F2:D9:30:08:58:F7:46:AA
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 0196759E624E13786BF39F0E34ADBBBDD8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 0F08
Signing time: Sun 27 Apr 2025 05:00:36 +0000
Manifest this update: Sun 27 Apr 2025 05:00:36 +0000
Manifest next update: Mon 28 Apr 2025 05:00:36 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: Gk5CEXplyQDfu+J/tU8K7k9lfwXRIjYaLplyPWGbz00=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:9e:62:4e:13:78:6b:f3:9f:0e:34:ad:bb:bd:d8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: Apr 27 05:00:36 2025 GMT
Not After : Apr 28 05:00:36 2025 GMT
Subject: CN=b8d3f320cfb89ba429e13601f2d9300858f746aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e9:ac:cf:5a:d3:7e:51:ac:f2:66:bf:56:b2:
98:d0:09:b5:d8:dc:03:e8:db:0b:34:6c:e9:fd:e3:
4e:8a:40:3f:b1:29:f4:28:12:4a:23:19:5a:f1:af:
47:2d:e0:a2:fa:b5:a5:e8:b3:a5:3b:0b:a2:63:6f:
65:91:b2:70:c0:3c:81:09:e1:b6:07:a0:75:8c:2e:
c2:84:7f:75:42:1b:38:e3:f1:0f:49:2b:ba:fe:a6:
66:03:a1:ba:6d:9d:c5:c7:f7:09:86:a0:54:a8:2e:
21:61:2c:8b:4c:65:92:b9:25:6e:37:04:4d:83:16:
f4:38:95:30:1e:99:dc:b8:1d:af:01:bd:87:af:66:
1f:ec:7c:c9:d1:d3:80:5d:7f:69:b2:f0:08:c8:73:
84:ef:16:70:6e:7e:c5:c0:c7:4c:a4:0f:fa:1b:5b:
4f:a3:12:b4:bd:38:f2:f0:36:80:0d:38:40:10:64:
25:c8:9b:da:a7:82:98:0c:3a:4a:c0:f1:53:73:70:
5c:08:7a:3f:e1:46:43:34:ca:4c:e9:32:97:30:a3:
07:36:01:f3:58:ba:10:ad:ae:32:80:ab:61:e7:19:
19:fa:59:44:a5:46:d5:f3:43:bf:db:87:4e:a1:8f:
9e:ff:3e:13:e2:6f:da:83:5e:a3:85:6e:cd:24:2c:
8c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D3:F3:20:CF:B8:9B:A4:29:E1:36:01:F2:D9:30:08:58:F7:46:AA
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:35:dc:c6:d4:9c:00:fe:e5:83:67:74:55:c2:75:3f:5c:fa:
63:81:cb:72:1c:90:12:1d:62:a5:e9:3c:88:1d:c9:a9:eb:89:
6c:f4:e4:a0:b4:50:46:6e:f5:73:a4:ac:d2:85:35:60:7f:3c:
c1:40:25:a0:d3:5b:2f:dc:a9:35:63:8f:d6:62:21:2c:84:b9:
c3:35:96:af:40:a4:9b:9c:d1:05:7b:0f:d5:b5:77:83:5f:38:
eb:d5:69:00:d6:da:4f:08:f7:f5:20:09:16:c9:17:f8:37:a9:
ac:e0:87:80:1a:2c:9c:f5:3c:8e:64:99:35:38:67:8c:01:0b:
90:77:87:6e:b7:d7:0d:f6:6c:04:8a:39:0f:7a:7f:0b:e0:fa:
44:7d:72:f9:35:ed:01:20:d3:15:00:d9:af:50:08:15:a5:c7:
d4:f7:ac:a9:e7:27:c4:8c:6e:75:24:57:71:ea:b1:65:f3:af:
7c:cc:c9:7d:8c:b4:9f:13:f6:0c:1a:d5:eb:32:ed:67:1a:e7:
c3:4f:83:2a:2f:44:50:5a:1a:2c:ca:0e:54:6f:64:0e:e3:3e:
28:c4:dc:42:e9:07:c0:99:20:37:ba:8c:10:19:2a:da:3e:a0:
cc:3e:58:65:65:39:2c:53:e7:81:3a:13:1f:dd:09:80:ec:20:
c2:eb:a8:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:08:15 2025 by rpki-client