Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
File: Kf49-nfrAgHIVtHh6_AyvMixJNg.mft (raw, json)
Hash identifier: RQB7bFUPbxFCrfe/mscZ1J5jrqXFwFPqgm14XOHEXrc=
Subject key identifier: E5:12:EC:0B:94:30:B2:58:4A:DF:FD:5C:19:F7:13:82:C6:E5:81:EE
Authority key identifier: 29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
Certificate issuer: /CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Certificate serial: 0196C34C2CE781F0796E98515DAFE37C86FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
Manifest number: 14C9
Signing time: Mon 12 May 2025 07:01:11 +0000
Manifest this update: Mon 12 May 2025 07:01:11 +0000
Manifest next update: Tue 13 May 2025 07:01:11 +0000
Files and hashes: 1: Kf49-nfrAgHIVtHh6_AyvMixJNg.crl (hash: UBcuP7AIyUCu9xelaZ03yOBFmqGCLvVEopv81qlqMl8=)
2: m11OWXhefXzJ44FLBlsWKfsOtOo.roa (hash: djUPPyQWxYPvFQMatObPciTtNbLwqpNgMtWLRjYVwc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4c:2c:e7:81:f0:79:6e:98:51:5d:af:e3:7c:86:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe3dfa77eb0201c856d1e1ebf032bcc8b124d8
Validity
Not Before: May 12 07:01:11 2025 GMT
Not After : May 13 07:01:11 2025 GMT
Subject: CN=e512ec0b9430b2584adffd5c19f71382c6e581ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:85:99:9c:31:11:9d:f9:46:e8:8a:78:97:
93:4c:de:14:29:6d:73:90:86:ba:4d:e2:52:af:8b:
ee:75:88:4b:7e:7b:f3:5b:fa:b7:ac:44:44:c0:36:
f5:f6:fa:a7:27:00:86:c2:60:43:4f:b2:fb:31:98:
c2:61:29:0d:45:5e:1a:3c:78:c6:6c:c4:21:48:bc:
91:50:86:ce:b5:88:ec:03:6b:3b:d6:4d:95:b7:30:
52:a2:01:9f:03:2d:ae:ca:fe:b5:b6:90:9a:e3:77:
e8:16:b8:b7:1d:5b:d3:c1:c3:af:63:b5:1f:96:e0:
46:2d:82:54:58:7d:3f:89:27:6e:0e:3c:fd:c2:5b:
0c:73:b3:20:82:ad:ac:da:fc:d6:05:6d:39:e8:4a:
95:26:ec:57:80:ad:46:2e:1a:ab:17:ca:93:81:89:
eb:4b:ee:ca:ed:ff:fc:71:4e:28:54:e5:05:d7:84:
0a:1a:56:44:f2:ba:dd:74:83:48:f2:7b:61:7a:58:
c8:c0:5a:ef:b1:16:69:5e:84:f0:21:74:6a:4f:54:
f5:bd:3e:b9:dd:96:73:c8:51:83:79:da:9f:a2:9e:
44:30:f1:5f:93:a4:d8:da:9d:f6:1e:e7:6a:39:22:
88:1c:db:16:d9:86:e2:63:4e:61:e4:f9:cd:fc:cd:
16:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:12:EC:0B:94:30:B2:58:4A:DF:FD:5C:19:F7:13:82:C6:E5:81:EE
X509v3 Authority Key Identifier:
keyid:29:FE:3D:FA:77:EB:02:01:C8:56:D1:E1:EB:F0:32:BC:C8:B1:24:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf49-nfrAgHIVtHh6_AyvMixJNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/bf2430-32b0-493c-acbe-bebec2336d48/1/Kf49-nfrAgHIVtHh6_AyvMixJNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e8:af:c3:08:2b:73:60:41:83:5a:e7:b2:7f:56:d8:3a:37:
bb:41:7b:92:78:2d:c7:a6:7d:e8:48:6e:41:90:d6:a5:6d:90:
5c:d1:b3:e9:25:cd:b3:57:e1:0e:fc:f4:2b:79:fe:61:dc:59:
e3:0d:89:48:12:b8:f8:26:58:1a:78:2a:a5:62:81:5e:b3:9b:
a0:43:41:0a:dd:8d:1a:a9:ea:e6:e4:e5:8f:72:39:d8:92:80:
d3:e8:57:c6:7d:ad:e7:3c:2f:9c:ef:62:a3:01:60:ac:32:71:
af:ee:90:ff:29:b3:99:22:01:ef:5f:53:29:e7:45:6b:3d:40:
8a:24:26:7d:7d:a9:a9:33:72:76:6c:8f:1a:0b:6f:91:56:3a:
0f:d1:40:d2:d6:c7:77:4c:f9:e6:75:b5:d4:38:e5:71:27:e3:
3d:03:b8:6c:94:e5:63:11:49:e0:12:c1:99:31:33:6c:b0:ac:
73:1d:0c:ce:e0:bf:de:98:81:c7:1d:0c:80:c1:1e:fd:4b:4f:
3c:8d:57:4b:3e:d8:fa:40:b8:f6:b7:8e:1a:95:e7:5b:33:02:
e1:84:d9:47:56:37:5b:f3:ad:13:fd:08:03:44:4b:f5:7c:65:
94:fa:37:d5:39:7d:b8:94:a6:19:f5:a0:6e:0b:d8:58:34:cd:
c0:12:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 15:04:37 2025 by rpki-client