Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
File: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft (raw, json)
Hash identifier: QD1zSNA9hpBqWCR1jz+YXJNnEZvIOpnvHDh7OGjeORk=
Subject key identifier: F1:34:86:08:F2:7F:4E:C0:6C:4D:F1:36:CC:4C:23:6C:40:7C:3B:5F
Authority key identifier: 29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
Certificate issuer: /CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Certificate serial: 0196DD4221E0D1EDC3378B755E241AFC069F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
Manifest number: 0629
Signing time: Sat 17 May 2025 08:00:20 +0000
Manifest this update: Sat 17 May 2025 08:00:20 +0000
Manifest next update: Sun 18 May 2025 08:00:20 +0000
Files and hashes: 1: KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl (hash: 63YUfUn3qi/lWNvKERax4hfURQjE0mJisA+2QPYPdcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:42:21:e0:d1:ed:c3:37:8b:75:5e:24:1a:fc:06:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2962e6a1334c9ca9c93ed57ff4ad72d99ce91ad0
Validity
Not Before: May 17 08:00:20 2025 GMT
Not After : May 18 08:00:20 2025 GMT
Subject: CN=f1348608f27f4ec06c4df136cc4c236c407c3b5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:2b:9d:f9:fb:b4:bf:1b:8f:32:ca:53:b5:
be:99:f7:d9:a0:6c:27:7c:62:9b:8b:bf:9f:9a:2f:
05:e4:30:6c:55:e7:42:d3:8a:10:0e:73:ab:9a:8a:
31:40:8f:fc:2f:0f:0c:36:72:0b:51:6e:84:82:a4:
85:58:d8:7f:7a:c9:0b:ec:1a:6a:d6:9b:50:fd:35:
48:f8:05:68:c8:bd:40:6c:1a:ba:3e:8f:dc:38:45:
41:a8:5a:ca:6a:cd:2a:66:15:4d:ac:a9:bc:5a:22:
4d:57:92:1b:87:f7:8c:7c:b0:90:30:34:fc:0a:15:
a0:96:c8:0b:f3:73:cc:2d:6e:47:eb:f9:76:4d:29:
d3:0b:b9:4b:3f:79:1e:28:53:3c:73:43:34:17:88:
af:5f:43:bf:9d:e8:db:59:e6:94:b1:cf:33:31:0e:
87:0b:60:f8:5b:82:10:9f:62:48:ec:7b:99:f3:2d:
b4:ca:f0:45:1c:b8:67:33:02:ee:7d:0d:5a:10:2c:
f5:23:05:a0:8e:61:91:42:bb:b6:c3:16:53:8b:86:
f9:a5:f5:62:08:2a:3a:83:ff:ed:d1:29:03:72:91:
ae:80:6c:c7:0e:dc:05:0c:3d:e1:f3:f7:f5:b1:af:
26:ce:a1:c8:8f:b4:2d:5b:94:46:b2:78:12:20:be:
f4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:34:86:08:F2:7F:4E:C0:6C:4D:F1:36:CC:4C:23:6C:40:7C:3B:5F
X509v3 Authority Key Identifier:
keyid:29:62:E6:A1:33:4C:9C:A9:C9:3E:D5:7F:F4:AD:72:D9:9C:E9:1A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/bde818-c0ed-4924-8d7b-6ec40c85a2ae/1/KWLmoTNMnKnJPtV_9K1y2ZzpGtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:68:52:b2:da:98:5d:db:18:64:ab:99:48:ab:7e:fd:17:a0:
71:af:24:48:b7:43:1f:0a:0e:bd:6d:73:58:91:50:c7:b0:54:
34:f2:8b:6f:9c:f8:a6:bd:41:f0:76:68:22:29:2c:3e:dc:90:
cb:a9:56:32:d0:e3:b9:55:a4:3a:65:f4:0b:63:08:44:c7:bc:
1c:10:ea:ea:42:d5:23:0f:4a:29:f8:e3:e6:2a:6b:e9:fb:4e:
fe:51:b5:b1:ad:f4:ce:22:b6:14:f8:ad:31:8d:ba:b6:83:e9:
42:c6:e0:f2:bf:0c:ce:c5:9c:23:1f:f7:36:f1:96:84:1c:d9:
37:12:49:5f:6a:8d:82:7f:ff:15:51:85:d5:bc:25:6d:3d:d3:
dc:9f:8c:b4:1d:01:f2:80:1c:41:55:71:2e:96:13:5f:30:b5:
84:ae:44:82:98:59:b7:30:cc:61:c3:0f:ab:9d:5f:2e:73:c8:
e7:4e:7a:8c:bc:9f:34:5d:52:aa:77:66:1a:a6:4f:f5:07:f5:
e6:3a:71:a1:ef:1a:67:16:9e:53:d2:df:dc:4f:07:f9:83:08:
ba:d0:3e:42:24:28:e1:a1:fd:0c:45:8c:1d:83:30:79:30:98:
66:f2:a3:bd:39:1e:53:1e:0e:1b:00:7a:4e:c8:5f:b6:6f:05:
4a:28:0f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:45:24 2025 by rpki-client