Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
File: KUv7SsSIYBHwbZ3E79RVMyZO14g.mft (raw, json)
Hash identifier: Smg7cgOsEYYDlz8zaBw2U8MWIkMsLYGDUqLouNu+jvI=
Subject key identifier: 62:41:F6:B2:BA:14:E3:7C:C1:86:B1:EF:8B:77:9D:17:56:FE:3C:7A
Authority key identifier: 29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
Certificate issuer: /CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Certificate serial: 01969E2C6BFCE972ED3E2889EC6EDEFC9BDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
Manifest number: 0F1D
Signing time: Mon 05 May 2025 02:00:33 +0000
Manifest this update: Mon 05 May 2025 02:00:33 +0000
Manifest next update: Tue 06 May 2025 02:00:33 +0000
Files and hashes: 1: KUv7SsSIYBHwbZ3E79RVMyZO14g.crl (hash: at3TOVAhGxwC/Dq3L6yE1+/flGASfcWk1O3wS5jiloY=)
2: vUzTxQRZNE5WBxRpFY_1BvR6nb8.roa (hash: 4IGQdOA0rNIT3SYgWTgAAmM5+gTsF90wOn17b+OWr8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:6b:fc:e9:72:ed:3e:28:89:ec:6e:de:fc:9b:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=294bfb4ac4886011f06d9dc4efd45533264ed788
Validity
Not Before: May 5 02:00:33 2025 GMT
Not After : May 6 02:00:33 2025 GMT
Subject: CN=6241f6b2ba14e37cc186b1ef8b779d1756fe3c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:04:06:44:67:96:0e:81:31:b4:c3:11:4d:cd:
5b:69:26:b7:11:64:91:7a:eb:c7:82:d2:f9:3a:e5:
ca:26:b1:a2:04:85:4d:b9:ef:8f:dc:18:14:65:bb:
39:7a:4d:61:1c:e0:8c:91:65:18:e8:21:92:c9:ac:
4a:38:2f:fa:f0:5b:4f:d6:05:be:0b:b1:2e:0f:20:
94:30:23:3c:e8:01:8f:4f:b2:c8:70:e7:a2:6f:fb:
1e:61:4d:c9:ee:1b:7a:09:f8:90:8c:fb:34:d0:3d:
7c:fb:87:dc:3c:85:e2:c4:c3:43:54:f3:99:68:bb:
1c:a0:a2:85:ed:bc:78:57:a9:1d:c2:2f:41:c3:7e:
58:c1:98:04:b4:be:0c:57:44:66:39:b4:54:31:9a:
c0:fd:73:b0:c9:d4:0a:44:82:02:e6:87:c2:1e:b4:
c4:a8:4b:1f:ba:fa:7d:08:fc:ce:52:4e:b9:74:43:
9f:7b:bd:68:e2:85:20:a4:5c:55:71:72:39:c2:83:
08:5f:1a:48:80:8f:3e:d0:c9:7a:ce:d1:24:39:ed:
3b:d2:c1:cc:6e:3c:1e:c6:ef:92:60:b3:25:23:92:
b7:89:7b:0e:4a:3a:43:89:fc:7b:b5:3c:3c:61:f3:
c0:b0:09:1f:58:a0:eb:ca:ad:e8:76:f6:41:03:a7:
99:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:41:F6:B2:BA:14:E3:7C:C1:86:B1:EF:8B:77:9D:17:56:FE:3C:7A
X509v3 Authority Key Identifier:
keyid:29:4B:FB:4A:C4:88:60:11:F0:6D:9D:C4:EF:D4:55:33:26:4E:D7:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUv7SsSIYBHwbZ3E79RVMyZO14g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b0da06-1ba7-49f0-a569-909fe7c80d98/1/KUv7SsSIYBHwbZ3E79RVMyZO14g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:7d:8b:f6:2b:2f:74:80:c3:a5:37:2d:c3:50:5b:8b:69:40:
b3:9d:3c:ae:15:05:9d:37:17:4e:d0:e2:f7:6e:66:7a:60:04:
93:8e:29:ef:bd:e5:b9:24:d2:d3:38:96:91:9a:ec:c8:b1:a9:
05:90:b1:a1:e3:e8:7e:ae:16:07:f7:d0:69:47:bd:f8:5f:ef:
ae:20:09:37:d8:17:be:b3:18:99:8f:30:74:06:a1:6c:a4:a4:
e5:6a:4c:cd:11:76:a6:4b:98:b3:51:05:d1:98:b7:df:d0:f7:
6b:1f:ef:e0:19:a8:6e:fe:3c:78:06:5d:0c:06:d7:f7:cd:c2:
eb:59:7b:5a:da:10:41:7e:a4:b3:af:2b:dc:21:33:df:a6:b6:
cd:c6:6a:f6:85:4f:ef:2d:a1:78:b4:ef:6b:46:60:e8:49:73:
a8:a6:6b:1b:3e:0a:81:8c:bc:f0:51:5c:e0:85:9b:9d:c3:7e:
b0:dc:45:87:17:e4:dd:4e:2d:80:9c:ce:c6:5f:46:da:8b:d6:
ef:19:a2:0a:92:67:7a:7f:b9:79:39:b4:ea:6c:9f:1c:45:43:
a4:e6:35:93:f6:f6:76:4f:bd:bd:48:39:64:dd:f1:a9:6f:c4:
8e:88:20:a5:7e:17:e8:95:3d:f9:5a:23:97:63:36:d9:5e:2a:
bf:d4:1d:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:48:06 2025 by rpki-client