Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
File: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft (raw, json)
Hash identifier: aQT/B+ZBAIylNsd/6vbGAT/K6A6pSTI1mg7luWNzbBc=
Subject key identifier: F8:27:36:4A:AE:98:2B:C8:06:FB:33:93:3D:8A:F7:89:BE:F6:6C:AC
Authority key identifier: 29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
Certificate issuer: /CN=29d59e889f99aefdde5e949fe8079d337b57f447
Certificate serial: 0196A0F6C705AF64D125284ED07D6F40B299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
Manifest number: 1113
Signing time: Mon 05 May 2025 15:00:49 +0000
Manifest this update: Mon 05 May 2025 15:00:49 +0000
Manifest next update: Tue 06 May 2025 15:00:49 +0000
Files and hashes: 1: KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl (hash: b429ur291F56T17/sW9M6yTIHxse0/2iwKIua8Tn9Rs=)
2: if3bRvhywq0-AQAvqAMvn9zf2xA.roa (hash: e1PwQotXLXaCqhVV0IcDbX0I5jTk19F7wuKZ3aHr5MQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:c7:05:af:64:d1:25:28:4e:d0:7d:6f:40:b2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d59e889f99aefdde5e949fe8079d337b57f447
Validity
Not Before: May 5 15:00:49 2025 GMT
Not After : May 6 15:00:49 2025 GMT
Subject: CN=f827364aae982bc806fb33933d8af789bef66cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:76:10:a5:92:b8:12:1a:40:d3:6f:e4:3b:
7b:ef:7d:76:02:71:b1:b3:61:fb:75:a8:a5:66:2b:
ac:92:05:8d:49:e4:e3:f8:38:5d:7f:01:a1:e1:b1:
3f:18:34:cb:93:b4:02:89:fd:79:fd:9e:bb:17:37:
f4:e6:f8:d5:b2:42:a0:8c:62:75:ac:42:94:84:9d:
88:6a:b6:70:51:1e:34:0a:e3:02:cf:e8:3b:99:02:
1e:d6:c3:51:2b:d9:e9:e7:46:5e:0a:b8:48:ce:3d:
b3:e0:24:9f:cd:c0:a2:61:a3:ef:85:e0:a1:3d:37:
f1:85:7c:7a:15:20:10:4a:dd:8c:13:97:db:7b:d5:
e7:7e:4b:2f:4f:78:f9:85:01:54:66:83:f3:e4:fe:
d4:25:c7:6a:6b:d2:f8:19:b8:f1:2b:7f:99:ad:4d:
d8:ca:da:ee:e0:63:ae:93:75:d4:93:ba:3e:d1:a4:
e0:77:ea:6a:b7:ff:27:72:ba:e2:ff:4c:b0:0c:6e:
71:da:49:86:17:42:65:01:c4:24:49:3b:be:9a:ef:
0d:6a:81:f7:06:d4:35:17:0d:18:a7:51:ff:c0:5b:
72:21:7e:7c:04:84:78:a9:b0:03:50:46:ef:ec:23:
38:71:f4:4d:45:a4:5d:fc:ee:66:41:11:38:42:83:
f6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:27:36:4A:AE:98:2B:C8:06:FB:33:93:3D:8A:F7:89:BE:F6:6C:AC
X509v3 Authority Key Identifier:
keyid:29:D5:9E:88:9F:99:AE:FD:DE:5E:94:9F:E8:07:9D:33:7B:57:F4:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/c4bdae-09f0-4334-853e-3626b8ffd1e5/1/KdWeiJ-Zrv3eXpSf6AedM3tX9Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e3:be:18:7f:d7:54:ab:2a:f7:11:c0:00:5a:b8:36:9b:d3:
a7:f2:5d:fb:39:0a:ec:98:4a:43:dd:cd:b1:ae:16:72:07:0a:
f6:a8:5c:e5:64:89:0f:88:75:83:91:ee:af:31:1b:d0:35:fd:
95:cb:b3:15:d3:45:20:58:c5:b2:64:01:76:7c:62:2f:9b:9e:
59:4e:7b:3d:ab:44:70:54:c0:2d:dd:1e:34:06:73:b5:86:36:
3b:86:de:34:2a:da:25:34:73:37:4b:ef:56:26:0a:92:74:72:
c3:61:22:87:69:5b:d2:61:11:9c:5f:fc:58:e7:de:6d:f3:cc:
69:8b:a6:09:03:7d:da:99:55:7b:93:d0:f1:48:fd:65:23:5b:
27:07:5e:b4:b3:b7:35:d1:79:5f:3e:19:f0:a4:26:c1:18:39:
a9:ab:bf:b9:c4:9d:4d:c7:ac:64:d2:05:f2:63:47:45:ab:1c:
55:9a:40:cb:5a:12:d1:3d:9c:e7:1f:3a:14:b0:38:1a:96:8d:
5e:11:6a:fd:38:6f:34:10:7b:a6:fb:b3:96:04:de:29:61:19:
6b:b8:84:cc:92:ca:04:91:ad:12:a6:95:b7:b0:72:95:dd:91:
38:03:e3:04:0c:1f:ad:50:cf:a9:a9:12:93:0f:18:08:b4:88:
83:20:a7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:09:47 2025 by rpki-client