Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
File: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft (raw, json)
Hash identifier: hHNZqYXQxxdaHsnIGUzPfFlsRMprOBwugOqnA3HwlDI=
Subject key identifier: A8:11:B2:AF:E1:3D:37:4C:D0:5F:92:BE:AC:AE:02:62:70:C9:A0:AD
Authority key identifier: 28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
Certificate issuer: /CN=2858d2f131715cbaf3cdd920645924f53508e067
Certificate serial: 0196A80B74212206A1104BE23306CFA5FEA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
Manifest number: 09C8
Signing time: Wed 07 May 2025 00:00:44 +0000
Manifest this update: Wed 07 May 2025 00:00:44 +0000
Manifest next update: Thu 08 May 2025 00:00:44 +0000
Files and hashes: 1: Gxa8ZTehusQ__zJKE-EIDPUx7f0.roa (hash: D3bg8s9LSpHww0XiOamb2fTNkB0scUvbSEDIBYdOll4=)
2: KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl (hash: rOe3swCZOPJDW1pFj2Gg/+R0aMYntXn9uEYDe/IJauM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:0b:74:21:22:06:a1:10:4b:e2:33:06:cf:a5:fe:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2858d2f131715cbaf3cdd920645924f53508e067
Validity
Not Before: May 7 00:00:44 2025 GMT
Not After : May 8 00:00:44 2025 GMT
Subject: CN=a811b2afe13d374cd05f92beacae026270c9a0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:15:e3:40:53:0a:5d:35:00:5e:58:be:62:
0c:15:c5:ff:ee:31:c8:f3:41:2a:59:71:0f:dd:6e:
bc:8f:5c:2b:15:0c:48:30:73:49:56:25:91:e9:fd:
00:a9:3b:8b:5f:f4:73:c6:ad:07:05:25:c9:60:8d:
f8:98:d1:45:3f:43:c6:05:98:43:35:99:33:b1:68:
4d:c8:25:4a:7c:e4:b7:d2:31:96:67:e1:87:2f:23:
c5:3a:fa:bc:da:26:2d:86:1a:ea:9a:7d:1a:13:ad:
5e:0d:b3:a6:ef:30:92:06:66:98:15:30:19:57:bc:
91:dc:01:46:16:33:0a:00:fe:a0:a9:ad:dd:08:b3:
8e:b5:be:6b:ad:34:c9:51:31:3e:07:38:ec:a2:fe:
68:70:59:01:02:7b:2f:86:99:fa:2e:67:e5:6b:53:
a4:a1:01:cb:d0:ce:8b:bc:ca:5f:6b:83:a7:f0:b2:
6e:a0:e7:6b:66:af:20:7a:7f:91:a5:ae:d3:3b:04:
e7:92:7c:e9:bf:b7:16:95:9e:10:57:9a:3a:e5:32:
c5:e2:92:5e:25:25:ee:e9:59:f4:74:e8:08:35:77:
20:cd:53:1c:0e:9e:76:40:1a:e9:89:62:9a:69:06:
95:b9:ab:9c:d9:dc:d8:91:c1:88:90:2d:b7:ed:49:
73:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:11:B2:AF:E1:3D:37:4C:D0:5F:92:BE:AC:AE:02:62:70:C9:A0:AD
X509v3 Authority Key Identifier:
keyid:28:58:D2:F1:31:71:5C:BA:F3:CD:D9:20:64:59:24:F5:35:08:E0:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/75dbc4-ae22-4971-9ef5-a3f355beeedd/1/KFjS8TFxXLrzzdkgZFkk9TUI4Gc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:de:27:fc:0f:bc:68:52:12:aa:c0:3c:7c:5a:6d:10:30:4b:
c8:50:61:85:ee:77:f6:96:9d:90:23:58:0a:ec:97:06:80:c8:
34:3f:90:97:ac:35:3f:e4:d6:ce:44:2f:23:3c:2a:f1:41:15:
07:ec:a2:ab:77:5e:2a:16:17:81:f9:04:d9:78:6c:f4:bc:09:
fd:1c:e1:62:2c:82:de:b1:47:d1:b7:61:09:cc:70:89:9e:31:
b2:b8:44:fa:e6:98:a8:0a:6a:7a:73:43:5a:de:7b:f1:48:96:
a7:d0:b3:30:38:52:7c:5e:77:3e:3c:b1:96:f2:06:58:3f:43:
dd:c0:9a:24:60:75:f7:97:98:42:42:b7:36:d9:cc:57:c8:96:
1a:52:0b:99:9c:91:8d:95:8c:f3:39:c1:83:bf:6b:b9:5c:b9:
bb:95:3b:5d:0c:e6:42:d9:01:d7:89:74:85:0a:10:c2:7c:07:
fe:31:49:e7:e6:c4:39:52:19:71:a9:f4:fd:ea:41:0e:26:25:
85:e0:b7:65:ec:b3:a9:bc:5f:77:09:c3:e2:a0:7f:2d:78:98:
3c:fe:21:cb:b5:fc:33:77:25:20:78:8c:d5:31:fb:bd:43:1e:
c3:34:51:77:4d:67:62:db:19:b2:16:2b:52:cd:7d:a2:8d:6d:
1c:b2:11:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:24:27 2025 by rpki-client