Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: 3ylg2uSqBDi+zBW4m1/Ljy5AnISE3nEesgDNDXKcu8Q=
Subject key identifier: 34:ED:F1:A9:4C:F4:4E:36:53:21:91:97:3D:40:B5:64:E0:AD:57:D7
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 0196BE25417A0A34226ECEDC83C68036FD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 1532
Signing time: Sun 11 May 2025 07:00:34 +0000
Manifest this update: Sun 11 May 2025 07:00:34 +0000
Manifest next update: Mon 12 May 2025 07:00:34 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: /Mvd/xD7fXZH02vk5Xs4kuAMMlkGZ5MBeqCtvLU6/tA=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:25:41:7a:0a:34:22:6e:ce:dc:83:c6:80:36:fd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: May 11 07:00:34 2025 GMT
Not After : May 12 07:00:34 2025 GMT
Subject: CN=34edf1a94cf44e36532191973d40b564e0ad57d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:48:7c:a0:4e:91:30:f7:61:3c:e2:b8:ad:4b:
ff:69:48:19:94:64:f6:fd:c3:36:a2:98:92:a7:9a:
e9:c8:46:1a:c7:0a:39:59:01:56:54:36:a5:5f:bf:
c7:02:21:5e:59:b9:43:bf:b1:3a:e7:16:61:b8:1a:
d2:e0:05:a7:43:9f:45:79:9c:4b:54:7c:b8:e5:2c:
44:eb:4e:c5:00:3a:f5:e6:4b:67:33:c6:4b:45:04:
32:94:06:be:4b:d6:c5:c5:0c:dc:82:5c:60:2f:94:
a0:90:46:a8:3e:59:97:be:81:5f:99:d8:b5:0e:79:
7a:cc:ac:29:05:48:d9:6d:28:a9:cc:44:4e:0e:15:
5a:58:02:17:b1:9d:aa:b5:14:2e:74:89:18:0e:97:
c6:83:66:53:85:52:fe:72:82:91:15:40:b0:40:b7:
ec:94:0c:ee:c6:da:26:bd:19:a8:ab:33:0e:69:8a:
7c:c6:5a:6c:77:87:90:6e:06:c1:70:c5:be:37:8e:
8c:48:06:3e:60:b4:e5:bc:97:9b:ed:b5:93:85:4b:
64:15:d4:d1:03:b1:7e:81:a1:f7:cb:ef:f8:33:4c:
bc:d1:dd:74:cd:df:43:d4:10:d8:51:3b:a4:45:34:
a1:ab:89:be:ed:48:3b:94:4c:d8:5a:75:a8:56:76:
d2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:F1:A9:4C:F4:4E:36:53:21:91:97:3D:40:B5:64:E0:AD:57:D7
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:21:77:97:b8:48:12:32:bb:93:e2:fb:a5:f3:47:8b:d9:5f:
16:82:3f:04:1d:3c:f8:c8:09:25:df:c9:fb:01:a6:00:4a:b4:
1d:d0:40:87:cd:6f:00:a6:c6:77:b6:b4:0a:46:e8:55:77:37:
3e:60:eb:99:7c:8c:79:ca:18:27:ab:29:54:e2:3c:7e:c7:fa:
61:7b:d8:49:0e:44:c6:85:47:20:30:52:7e:77:47:81:0b:48:
cf:16:a1:1b:b7:48:41:97:a4:fe:46:f6:45:e3:78:fe:c4:5f:
22:80:5d:3c:50:ab:e6:5f:d5:d4:61:b8:84:88:83:3f:00:cd:
f3:b0:7a:da:44:de:c7:13:f9:e6:84:3a:fb:19:40:88:91:08:
29:f9:43:13:99:53:74:79:f9:1a:0e:bd:75:15:99:eb:16:91:
a4:af:9c:fa:c4:77:03:09:ee:68:51:aa:86:50:25:e5:b0:ce:
bc:0e:b2:70:f3:86:3c:6b:5d:d7:ba:8c:d2:0b:54:1f:8d:0f:
5a:66:0c:48:16:4e:e1:32:19:b7:81:02:01:e2:7f:2e:7b:fc:
28:3f:e4:c0:9e:6f:0c:1f:ff:cd:3c:0b:56:63:93:dd:aa:e3:
06:01:8e:20:e0:f6:df:59:5d:c8:6a:51:a2:8f:78:71:5c:ce:
a8:56:c8:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 13:49:03 2025 by rpki-client