Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
File: KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft (raw, json)
Hash identifier: sUheJREKkV7KkSVpFBOxAbHTs/eVUPYnVMyvIVsrrEs=
Subject key identifier: 90:50:FB:2F:AC:31:98:B5:2C:15:39:C6:FF:5C:43:34:AC:D5:A5:1C
Authority key identifier: 28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
Certificate issuer: /CN=28bbb54e37826c0390b04379279f8e06cff3a234
Certificate serial: 0196AA3121E686F1A7ED808FB09A74262ED6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
Manifest number: 0443
Signing time: Wed 07 May 2025 10:01:08 +0000
Manifest this update: Wed 07 May 2025 10:01:08 +0000
Manifest next update: Thu 08 May 2025 10:01:08 +0000
Files and hashes: 1: KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl (hash: dwhairthhDjdNNRcKpFRWbSRTpVy94ygPpXZhj2cLz8=)
2: N3FIvLoAi-SrbWKri-QxAJXERl0.roa (hash: oePUnAR/4Fy7x02aEJQp05kRfdkIvxnqMAYzYP5D1B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:31:21:e6:86:f1:a7:ed:80:8f:b0:9a:74:26:2e:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bbb54e37826c0390b04379279f8e06cff3a234
Validity
Not Before: May 7 10:01:08 2025 GMT
Not After : May 8 10:01:08 2025 GMT
Subject: CN=9050fb2fac3198b52c1539c6ff5c4334acd5a51c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:04:ec:bd:73:c5:5f:1e:5c:ae:3d:6b:ad:d4:
0d:64:f2:7c:9b:65:73:75:18:8d:df:9f:7a:cd:99:
3d:75:67:8e:54:81:1b:8b:e7:50:70:a7:c4:66:8a:
48:0a:d2:dd:c2:2d:86:99:09:d2:6e:7b:08:f3:1d:
ff:3c:95:59:29:1f:11:44:c1:b9:2a:f1:09:42:9b:
76:05:93:77:6e:56:d7:83:c4:ac:2e:7a:2b:14:7a:
ce:2b:ee:4e:54:dc:ca:da:40:37:94:a8:b4:23:72:
d1:f5:30:76:40:8e:96:da:17:f6:b1:39:76:72:e5:
ef:f4:b9:12:07:22:de:34:36:f3:ad:b5:9d:c7:ce:
59:97:65:f4:c3:b3:13:e2:9f:58:df:cc:17:ba:1c:
be:82:09:89:78:46:c3:19:de:63:1c:42:79:fe:f9:
22:b9:84:24:f8:9a:a5:3c:da:a4:39:2f:72:01:ba:
2b:cb:1e:31:b6:e9:e9:5f:3d:04:2f:36:03:47:27:
ac:8e:88:52:2b:a7:36:3b:de:57:8a:9c:a4:95:7e:
42:67:67:40:29:56:b0:e0:02:41:9f:0d:0f:a8:21:
7b:69:c1:c3:3d:0c:6b:00:d4:9f:39:26:75:4d:94:
0b:77:79:de:3d:10:0b:ed:87:1f:9e:4b:7a:6a:07:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:50:FB:2F:AC:31:98:B5:2C:15:39:C6:FF:5C:43:34:AC:D5:A5:1C
X509v3 Authority Key Identifier:
keyid:28:BB:B5:4E:37:82:6C:03:90:B0:43:79:27:9F:8E:06:CF:F3:A2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLu1TjeCbAOQsEN5J5-OBs_zojQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/fe7296-ec8c-4163-a554-78c017762f9f/1/KLu1TjeCbAOQsEN5J5-OBs_zojQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:58:b9:3b:40:55:9b:0c:f6:d4:24:69:4f:6f:78:a5:5a:9b:
2a:fb:25:1e:48:9d:7f:fb:7c:46:e8:ce:ec:60:4c:c1:aa:1d:
28:3f:ab:bf:f0:8d:05:9b:1a:b6:3c:9e:6f:0a:55:90:31:c6:
59:f9:d9:6b:e5:4d:80:f8:f1:8f:7f:23:62:be:5c:4c:12:7c:
b2:3c:0b:fe:20:ae:bd:d8:78:e4:10:56:92:86:7d:bd:28:d2:
d0:34:bf:88:73:fc:b1:a9:06:06:03:7f:22:28:38:a6:b7:b0:
a4:92:d8:c8:18:c3:15:1a:ff:03:42:4a:8e:25:0f:2b:bc:a4:
ce:c2:05:e2:ff:91:eb:93:b6:60:f4:32:4d:3c:4b:ac:24:cd:
37:17:c8:37:5e:6f:92:c1:1c:47:d1:4b:c0:c1:95:25:67:1b:
c5:ee:91:a4:5e:52:42:7a:02:bd:b9:2f:62:4d:8b:57:40:52:
d1:85:e2:f0:e6:2f:69:9f:9c:32:a3:4c:28:99:8d:68:76:96:
5d:f3:a9:d3:a2:74:fa:d4:23:97:1b:dd:5d:f5:88:a2:14:28:
d7:21:b7:3a:6c:f0:17:ca:aa:eb:9a:74:f7:00:69:66:7b:f6:
6e:8d:c7:95:22:f0:4a:d5:f6:46:ae:0c:af:f8:2f:db:fa:0b:
f2:8a:ed:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 12:56:27 2025 by rpki-client