Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
File: KcFw2YteNdfVFTdnHGBApRUYhLw.mft (raw, json)
Hash identifier: UGfSpHYj2Q0XxX7ZDKW0LsLv9JD8cTJzQP4VsUGH9Mc=
Subject key identifier: A2:25:A4:2D:84:7A:31:17:3B:1A:7E:B4:9F:BC:AD:CE:D3:C4:A3:54
Authority key identifier: 29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
Certificate issuer: /CN=29c170d98b5e35d7d51537671c6040a5151884bc
Certificate serial: 0196A0F6926841AA021A58A08D40AAC1F425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
Manifest number: 1525
Signing time: Mon 05 May 2025 15:00:35 +0000
Manifest this update: Mon 05 May 2025 15:00:35 +0000
Manifest next update: Tue 06 May 2025 15:00:35 +0000
Files and hashes: 1: 3ZJjipNvCnffHlBZEGLPYL1cd6o.roa (hash: 59Oe/VE87ztmqQyIvIAIji5wjLpRLRfwhyLcTm5yzDc=)
2: KcFw2YteNdfVFTdnHGBApRUYhLw.crl (hash: Zmx889yRa4uP9g4sHnNV4Lkce2KTRF/J24edUZDYSj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:92:68:41:aa:02:1a:58:a0:8d:40:aa:c1:f4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29c170d98b5e35d7d51537671c6040a5151884bc
Validity
Not Before: May 5 15:00:35 2025 GMT
Not After : May 6 15:00:35 2025 GMT
Subject: CN=a225a42d847a31173b1a7eb49fbcadced3c4a354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c4:10:4f:4a:e3:7b:b2:90:98:9b:fe:72:d9:
e8:98:b7:e7:5f:16:c3:a0:3d:69:00:0e:b7:16:6d:
62:eb:e1:1b:c0:47:03:81:84:23:90:7b:71:b8:a7:
e4:3c:65:32:87:b1:15:3c:2f:07:6b:22:61:9a:e6:
f1:9a:c2:89:f7:a4:3a:cc:c7:1c:4a:c3:ff:19:7a:
6d:97:9b:f5:95:d2:51:72:86:38:cd:be:5a:00:1b:
39:f7:83:99:0c:42:a6:3e:03:d7:35:c3:73:bd:78:
ab:4b:9a:31:a9:7c:66:af:2b:cd:d4:7d:da:9d:f3:
69:c1:b2:a6:00:fa:2c:ef:30:a0:c1:e8:96:4b:07:
57:6b:cf:86:b0:2c:9c:3c:d8:3e:20:78:c0:13:f3:
60:2f:79:88:86:6a:d7:33:2d:d3:bc:dd:59:e9:4f:
56:83:8a:9e:02:b3:39:f3:b3:3f:5b:5a:a4:15:33:
c6:69:b3:d7:2f:9e:71:b2:15:34:d9:6b:2e:64:8d:
12:a6:fa:bd:58:2b:4f:02:17:12:85:2a:b9:ac:8e:
c1:76:a0:4b:6a:1c:71:3f:2a:c4:ae:89:7d:fa:7c:
66:d8:8f:52:f7:67:23:de:51:0d:33:ea:fd:28:a1:
27:01:4d:63:4e:67:a1:2a:fb:3f:b3:db:5d:dc:6f:
08:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:25:A4:2D:84:7A:31:17:3B:1A:7E:B4:9F:BC:AD:CE:D3:C4:A3:54
X509v3 Authority Key Identifier:
keyid:29:C1:70:D9:8B:5E:35:D7:D5:15:37:67:1C:60:40:A5:15:18:84:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KcFw2YteNdfVFTdnHGBApRUYhLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/e25a3c-def6-4228-a10b-c45e949e9cd6/1/KcFw2YteNdfVFTdnHGBApRUYhLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4c:61:05:0d:ec:d0:13:45:cb:1d:1d:66:32:08:00:56:7a:
2a:af:9b:df:7f:75:84:d2:3d:e2:57:29:c4:19:5d:97:a1:64:
37:0e:a4:24:83:cd:dd:d4:ba:f3:9f:9f:d7:3e:8e:68:0f:c1:
3b:31:41:e7:79:06:2f:cd:6f:49:ae:f2:19:17:6d:5b:81:7c:
b9:aa:f3:e3:8c:04:77:18:51:20:eb:71:db:6d:6c:59:1a:4d:
fc:13:20:5d:87:39:fa:f5:c2:78:1b:71:ce:04:f4:c3:11:71:
9f:88:c8:fe:e9:6a:60:2e:67:45:d9:74:3b:da:0b:04:ae:c4:
ad:c6:80:6e:5c:d6:b9:95:88:9d:68:d8:95:e8:1c:8c:c0:29:
2d:30:43:db:0b:74:f3:c2:1d:b8:9d:1b:7e:a3:09:34:d8:d4:
09:5d:da:64:07:7a:a8:7c:15:90:a2:7e:3b:dc:bc:03:25:27:
15:8c:3e:96:29:b1:7c:06:25:a6:b5:9c:cc:c5:df:d8:54:44:
35:dc:fb:7e:45:95:bb:3f:18:47:0f:89:48:04:68:23:1e:b5:
ef:6b:98:4f:6b:f7:e4:5b:85:66:82:18:56:37:f9:0b:3a:2f:
0a:43:a5:1d:1c:48:85:52:0d:9c:bb:d1:5f:33:63:81:e5:1c:
91:b0:df:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 21:20:15 2025 by rpki-client