Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
File: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft (raw, json)
Hash identifier: WqbFLNHQ6Pw0wwLrSYoYFdGze4oRHih8hk+3yI61qrw=
Subject key identifier: 6C:A1:31:55:A7:33:44:8E:14:F4:A7:0B:8D:42:FE:F7:FD:3A:8C:4C
Authority key identifier: 29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
Certificate issuer: /CN=294b5bbbe17467476e2282888221887df549f4b9
Certificate serial: 0196BF6F1227C0D838AF3A2D3F9D79EBB713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
Manifest number: 14C6
Signing time: Sun 11 May 2025 13:00:49 +0000
Manifest this update: Sun 11 May 2025 13:00:49 +0000
Manifest next update: Mon 12 May 2025 13:00:49 +0000
Files and hashes: 1: HJiIfDvFo_sDLMJ5OE82mYFpyHQ.roa (hash: P459lfA3vTZFDKOU1GovB2qolTUez89TIhHTMpHxZQo=)
2: KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl (hash: Rt3XfhTKY4J6CPeWZc4EODm0SSW1k0zVnJR9NuzAQSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bf:6f:12:27:c0:d8:38:af:3a:2d:3f:9d:79:eb:b7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294b5bbbe17467476e2282888221887df549f4b9
Validity
Not Before: May 11 13:00:49 2025 GMT
Not After : May 12 13:00:49 2025 GMT
Subject: CN=6ca13155a733448e14f4a70b8d42fef7fd3a8c4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6d:9a:0e:81:63:79:2c:62:45:32:a1:ac:71:
02:36:d9:fd:2b:fb:44:c4:54:5d:06:62:e7:4b:ff:
c0:c6:b4:13:bb:10:60:68:56:8e:ed:96:11:63:44:
17:de:eb:51:60:a8:8e:6d:f3:30:ac:bd:3c:1b:6e:
38:0b:bb:e9:32:2a:cb:a6:48:53:79:24:25:fe:81:
af:13:94:66:64:c7:f0:98:aa:4c:60:68:fc:84:f5:
2b:0e:e2:80:e4:c3:3d:70:b4:15:b4:d0:24:b5:e0:
56:0d:73:d7:d8:e1:25:cb:64:d9:a1:12:ae:1c:08:
ed:e2:fa:9d:1f:31:91:18:bc:e6:d3:f4:67:39:1c:
c2:d5:0d:c4:c2:75:69:b5:16:e7:39:53:02:d1:a0:
42:fb:91:84:42:74:14:ec:c0:0c:0b:4c:8d:5a:77:
7a:16:9c:10:28:5c:6d:6f:05:b7:52:09:46:cf:60:
5e:91:3e:b8:47:38:33:96:a4:18:47:95:1a:f3:39:
92:f1:d3:1d:0a:35:79:ac:4f:9e:e6:27:6c:61:6d:
f2:6c:9b:52:e9:7b:78:86:6c:37:b5:26:c8:cf:71:
dc:42:e9:5f:96:0e:f6:eb:d1:86:32:8c:5f:a7:28:
d8:f6:82:15:35:25:4b:d6:9f:a7:c4:ef:fe:12:09:
f1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A1:31:55:A7:33:44:8E:14:F4:A7:0B:8D:42:FE:F7:FD:3A:8C:4C
X509v3 Authority Key Identifier:
keyid:29:4B:5B:BB:E1:74:67:47:6E:22:82:88:82:21:88:7D:F5:49:F4:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d36783-4d5b-425e-949f-c41d86098df7/1/KUtbu-F0Z0duIoKIgiGIffVJ9Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:67:25:f1:ed:a2:7a:23:1d:fc:81:7a:e1:e5:c0:f6:11:9d:
a3:04:03:37:e0:c0:1f:81:eb:fa:8a:c9:91:5d:d2:35:6d:32:
f4:dc:41:d3:47:13:da:50:c0:af:6b:47:06:ef:49:36:44:f9:
b9:fa:03:b0:fc:4e:de:ba:80:b7:54:7a:6a:69:9f:37:47:f9:
b5:2c:68:2a:89:4a:af:fa:ce:1e:20:10:59:ab:95:74:e8:49:
c3:0f:d7:76:20:46:e7:5b:0f:2d:d8:90:76:eb:9a:4d:df:74:
9d:15:6a:21:6c:81:b3:56:95:24:58:40:f7:bf:6c:2b:9e:2f:
08:26:44:7d:c8:4e:03:1f:fb:15:fc:46:e0:d9:8a:12:6c:53:
09:b5:b7:d6:19:b1:c1:54:bc:99:b1:32:0a:da:b9:de:25:d3:
95:72:ff:27:b7:7f:28:60:e9:5c:e7:98:07:e8:bf:b7:f1:61:
8f:9c:6b:3d:02:e9:11:8a:b4:f6:f5:90:c4:c3:dd:69:dc:3d:
74:1a:12:1a:50:cf:71:13:e6:00:2f:dd:1f:e5:93:63:81:44:
0d:91:cd:95:e2:23:18:d8:4c:92:9b:ad:93:77:e2:c3:5c:75:
50:98:2a:8a:d6:25:07:7a:dd:1d:2a:6f:f7:54:2f:70:64:65:
03:d0:17:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 20:14:20 2025 by rpki-client