Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
File: KVdFdunOo46j9u6ybIMnUooKG_8.mft (raw, json)
Hash identifier: TFlXRvq+PMON4Bzmnv2jHHyYn3wIwT+TE1wGoTOcX/Y=
Subject key identifier: 59:AB:14:39:56:26:EE:CF:FE:B4:CF:31:8A:86:9C:1A:04:66:A3:DE
Authority key identifier: 29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
Certificate issuer: /CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Certificate serial: 0196ACC3C62B20F62260E8F49AD04E22CB92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
Manifest number: 057C
Signing time: Wed 07 May 2025 22:00:33 +0000
Manifest this update: Wed 07 May 2025 22:00:33 +0000
Manifest next update: Thu 08 May 2025 22:00:33 +0000
Files and hashes: 1: KVdFdunOo46j9u6ybIMnUooKG_8.crl (hash: b7nMP1sb1ImEx9vT1Y7uXKB+bjLEpbo9+TvNOupFmHk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:c3:c6:2b:20:f6:22:60:e8:f4:9a:d0:4e:22:cb:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29574576e9cea38ea3f6eeb26c8327528a0a1bff
Validity
Not Before: May 7 22:00:33 2025 GMT
Not After : May 8 22:00:33 2025 GMT
Subject: CN=59ab14395626eecffeb4cf318a869c1a0466a3de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:69:b1:62:e3:cf:23:81:b0:a3:d6:a9:0b:fe:
aa:5c:ec:0b:a8:26:64:75:4e:2a:35:d4:9f:ca:23:
bf:9a:a7:b6:14:0e:53:12:87:e1:9d:6a:5a:f1:a4:
68:92:8c:9c:f3:11:19:66:a9:a0:6c:bf:7e:b2:3d:
37:67:21:cd:3a:ca:f9:e8:04:f5:46:dd:c8:23:71:
41:67:01:ba:04:31:65:e2:40:fa:fc:4b:eb:08:a0:
fe:fa:a1:20:97:91:79:fd:02:99:77:88:6e:05:3e:
0b:b3:47:f5:ed:8d:05:59:27:4b:09:3c:12:0a:5e:
02:de:11:bc:08:d3:f7:f1:ae:cc:6d:42:2c:f6:50:
d6:b6:47:ad:5e:4f:ac:db:59:3a:be:e9:e0:5d:a8:
65:a1:89:02:b9:cd:37:28:27:3c:ae:18:93:fc:5f:
85:41:64:f0:5c:8a:de:8b:7d:f9:7d:f3:02:30:3e:
26:57:f3:f9:a7:3e:19:d6:86:66:f6:b7:e1:f9:3b:
63:b0:96:3a:e2:2f:92:6a:73:32:2f:da:2b:e3:24:
d3:78:14:37:59:cc:18:6b:7b:ca:1f:93:16:ff:ac:
ca:89:66:ea:9e:10:c0:9e:e6:02:cd:f4:e6:35:5b:
c3:d5:88:c4:1d:d4:8a:1a:d2:61:b5:ce:f3:dc:e6:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:AB:14:39:56:26:EE:CF:FE:B4:CF:31:8A:86:9C:1A:04:66:A3:DE
X509v3 Authority Key Identifier:
keyid:29:57:45:76:E9:CE:A3:8E:A3:F6:EE:B2:6C:83:27:52:8A:0A:1B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVdFdunOo46j9u6ybIMnUooKG_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/bd0556-3f33-46de-9291-3b34420d90d2/1/KVdFdunOo46j9u6ybIMnUooKG_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:03:a9:d9:e5:7f:03:ee:f0:7d:84:d3:35:0e:38:7a:47:d3:
e3:db:e6:f3:6f:d5:07:60:a7:80:5d:70:be:67:fd:65:da:02:
d6:96:d7:52:cf:1f:03:ca:93:d1:bd:fb:de:4c:3b:f6:7c:9b:
a8:ee:32:0c:2c:85:dd:61:e6:0e:99:7c:68:44:09:6f:a8:5f:
5d:66:5f:80:5e:60:02:8c:eb:a2:02:31:c2:99:1e:0b:76:ce:
37:31:83:10:ce:f7:06:ac:35:d8:31:95:6b:33:5d:60:43:f8:
d0:a6:94:26:dc:d1:e3:02:f9:85:1a:4d:b9:0b:1d:92:68:f2:
89:be:ca:d4:21:e7:37:86:ce:47:0b:67:73:4e:8a:35:91:4a:
45:43:26:89:bb:be:58:6a:c1:78:aa:9c:b4:b2:9f:d2:96:cd:
e7:15:77:56:c9:13:5f:24:f6:cb:0b:ba:c0:65:6c:a5:61:ed:
e6:8d:01:5e:70:39:fe:a2:f5:1a:a2:b0:a5:f3:45:27:de:8b:
f9:fe:82:ee:e9:89:2e:27:8b:cb:c8:ec:6b:a3:01:23:62:ce:
13:3f:da:7e:48:d0:be:9f:94:b0:a2:bc:57:4a:78:a2:6b:f4:
97:de:4a:f0:61:ee:d0:59:43:82:b9:80:df:13:e0:b9:88:56:
4d:24:2d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:00:02 2025 by rpki-client