Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
File: kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft (raw, json)
Hash identifier: ewOXsd+bE4K1JEFIDSqAHtirGKbcdDt0U8OnAvc+/rY=
Subject key identifier: 24:5F:A9:EE:5C:19:29:FF:90:54:68:5F:57:92:B9:C9:15:1E:E7:05
Authority key identifier: 92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
Certificate issuer: /CN=92ec295476ca1d934db04d00244fc5079b9c9748
Certificate serial: 0196BC6E325E61C25D443F21141A24B0B6F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
Manifest number: 1144
Signing time: Sat 10 May 2025 23:01:00 +0000
Manifest this update: Sat 10 May 2025 23:01:00 +0000
Manifest next update: Sun 11 May 2025 23:01:00 +0000
Files and hashes: 1: kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl (hash: 8bMtnw2LSYgZDAftE6TiQfbat/sg7azQnsKAXt2mMW4=)
2: sZ85FeVfKS3RqKqG5NUDvn--qlo.roa (hash: gTaYc3X+G3Jkjg5kUdF0n9TPsOguK/WjYif95eZGzOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6e:32:5e:61:c2:5d:44:3f:21:14:1a:24:b0:b6:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ec295476ca1d934db04d00244fc5079b9c9748
Validity
Not Before: May 10 23:01:00 2025 GMT
Not After : May 11 23:01:00 2025 GMT
Subject: CN=245fa9ee5c1929ff9054685f5792b9c9151ee705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:10:51:e5:0f:be:56:34:27:59:e9:a1:c5:f7:
b7:97:12:06:55:8d:aa:92:0d:1a:e3:50:48:8e:e2:
4b:cd:ca:11:52:c3:b2:13:df:51:7f:e0:87:1e:19:
ce:a6:b3:18:5a:30:b0:27:22:5f:ec:00:97:4c:0a:
94:4d:df:87:9e:ae:dc:70:b7:b2:0d:56:db:8c:82:
da:be:bb:f8:df:3b:20:eb:c5:82:83:4e:41:f5:a3:
47:5f:7e:bd:0b:3a:8a:68:4d:b5:53:ea:f6:fc:57:
69:cb:1c:c3:d9:57:c5:ee:3a:ac:88:d0:c2:aa:da:
3f:64:16:0d:6a:36:1b:64:e9:71:80:58:6a:dc:68:
4d:76:5f:16:40:ad:ff:64:64:60:10:67:2d:d6:f4:
af:54:54:4a:e2:e1:1b:4f:30:17:42:12:ac:51:07:
fa:d7:4f:a2:2b:3b:fa:54:2f:cb:4e:4b:4e:08:4b:
f0:4a:48:48:b5:97:ec:d0:1b:82:17:28:aa:ca:69:
bf:72:8a:d2:8c:42:4f:ad:82:4b:25:bc:0f:7c:c4:
9e:15:61:36:6c:96:64:71:27:db:a6:fe:9f:fc:73:
40:c7:9a:36:dc:8a:41:08:9e:56:c2:ea:a8:99:83:
0e:11:b5:4b:46:53:b0:6d:43:3c:4f:2e:01:47:68:
6a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5F:A9:EE:5C:19:29:FF:90:54:68:5F:57:92:B9:C9:15:1E:E7:05
X509v3 Authority Key Identifier:
keyid:92:EC:29:54:76:CA:1D:93:4D:B0:4D:00:24:4F:C5:07:9B:9C:97:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kuwpVHbKHZNNsE0AJE_FB5ucl0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/58394a-8cf6-4b11-becb-3ba69131458b/1/kuwpVHbKHZNNsE0AJE_FB5ucl0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:f3:57:24:69:33:f6:da:6c:de:4d:3e:da:91:09:e3:61:8d:
fa:3a:5f:f2:4e:94:be:be:4a:7e:3e:44:b8:97:1b:f7:0b:46:
3b:5f:68:b8:d6:35:b8:cb:87:d7:70:84:d0:f3:69:c9:32:05:
23:d9:d5:78:70:bd:9d:01:f0:8c:a0:e3:93:c3:6e:13:2f:7a:
24:10:fb:dc:24:dd:42:ca:90:28:8e:9a:1d:80:e7:94:c3:8d:
30:f4:d1:5e:06:63:4a:b9:9c:d7:d6:e9:24:fb:5a:95:3d:10:
c4:a7:82:5b:0c:bc:e3:45:9d:7d:c1:dd:94:2a:b0:a3:3c:08:
18:4c:0d:8a:41:a6:aa:08:38:d0:a9:e4:86:11:a5:34:4b:d0:
cb:83:c6:7a:65:53:4d:29:50:e0:d7:39:fc:5a:75:e5:af:35:
e3:71:41:c0:9c:d0:b2:9e:77:e5:ba:38:e2:ed:23:56:59:cb:
71:fb:85:6d:6c:aa:9d:e3:2c:50:ab:4b:29:53:e4:43:a0:aa:
cb:b8:70:46:05:75:e6:5c:a3:26:ea:f2:f1:36:64:05:b5:28:
4c:3d:bd:ac:ed:e4:cb:f6:fa:43:ae:c3:73:be:b4:29:70:b0:
38:b2:82:0f:f4:0c:35:bc:ce:3f:2f:ba:d8:f3:e6:df:47:9f:
aa:9d:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:13:51 2025 by rpki-client