Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
File: Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft (raw, json)
Hash identifier: 3r1kwAYLNTIS5SeH82Qp31nWXvHRsZSfLXTnChq+a6Y=
Subject key identifier: B0:1C:3B:BE:13:E3:45:56:C7:72:4F:14:68:23:15:BF:C0:EE:2F:C1
Authority key identifier: 2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
Certificate issuer: /CN=2a7df35d41b4062c10fc118189de47da27096db8
Certificate serial: 0196B40F25D3260F9A1E37B8C0B428E323E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
Manifest number: 0614
Signing time: Fri 09 May 2025 08:00:13 +0000
Manifest this update: Fri 09 May 2025 08:00:13 +0000
Manifest next update: Sat 10 May 2025 08:00:13 +0000
Files and hashes: 1: Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl (hash: /NTGQqSAzyWroPPt9IZYoj26LOE2f4uU3LK9TubHwNM=)
2: Wky7GIO48q5Am7lt9_maGgpqgJU.roa (hash: zVs1sI4WsKaD65jBAnhtkrYGwGsMw1WHVF/3i95RTn0=)
3: fEeq-E1sxHOFQUJWiqwG8VrB7mI.roa (hash: /r8rCHZ/j6Q+/dPG2IPSlLzNTFQayT8a7Qiqlbqm++I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:25:d3:26:0f:9a:1e:37:b8:c0:b4:28:e3:23:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7df35d41b4062c10fc118189de47da27096db8
Validity
Not Before: May 9 08:00:13 2025 GMT
Not After : May 10 08:00:13 2025 GMT
Subject: CN=b01c3bbe13e34556c7724f14682315bfc0ee2fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d6:61:0f:05:11:dd:67:4a:db:e0:74:41:3d:
ab:81:0c:8a:dd:fa:93:f9:d5:bb:b6:e4:95:e8:a5:
8b:1a:ca:3d:c1:29:93:a5:36:82:cd:61:cc:73:23:
3a:12:15:72:b9:f0:88:2c:59:9b:1a:58:be:a1:21:
59:51:55:4c:48:14:2d:e7:e6:81:50:e3:f6:6d:90:
b2:65:2b:d9:d5:ec:1d:f5:92:d1:69:2f:96:c0:a8:
c9:3c:93:da:45:ce:0a:7f:ec:8d:a1:07:38:f4:9c:
28:57:8f:9a:0d:c4:1e:42:c0:27:0a:40:54:9b:d1:
a9:6b:d9:7c:92:64:43:70:32:c4:a5:7e:2b:ed:28:
ef:bc:9c:bd:61:f0:b1:37:6d:a8:be:94:4f:2d:6f:
b3:2e:07:30:76:33:cb:97:44:cc:b0:d5:ca:77:e6:
72:18:62:44:45:a9:2c:74:13:8a:86:54:56:13:6e:
82:36:37:72:0f:2e:55:79:42:63:8c:9a:16:25:6b:
9e:ae:77:17:a7:72:c6:d2:d2:20:da:2d:8a:9f:c0:
b6:b8:9f:9f:3c:6a:df:7c:b8:7f:c7:ef:9c:a5:94:
57:6e:a1:fb:ce:ee:b9:eb:3c:58:cd:c0:35:0e:92:
12:da:2b:07:9d:9c:70:7b:d8:80:8c:79:80:5e:22:
c3:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1C:3B:BE:13:E3:45:56:C7:72:4F:14:68:23:15:BF:C0:EE:2F:C1
X509v3 Authority Key Identifier:
keyid:2A:7D:F3:5D:41:B4:06:2C:10:FC:11:81:89:DE:47:DA:27:09:6D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kn3zXUG0BiwQ_BGBid5H2icJbbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ed334c-d797-425a-93a1-a9cc89d44b25/1/Kn3zXUG0BiwQ_BGBid5H2icJbbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:cb:b1:f9:a9:35:5c:85:24:6e:a7:01:01:3d:3c:3a:61:fa:
18:f6:59:db:06:b2:84:d8:bf:d3:14:ab:4a:e2:43:db:1a:61:
50:73:ea:d0:d5:2d:e9:5f:b9:e0:7d:67:b6:56:0b:f6:df:f6:
82:17:64:e4:1e:a6:5d:db:8d:a2:a0:b6:f6:85:f7:e6:1e:95:
40:75:e6:f1:dc:d5:85:ad:65:a6:a4:60:cc:0c:8a:63:8a:5e:
f1:e3:c5:a5:37:ba:4e:6e:2f:4c:c2:8f:51:6b:9d:8c:67:e3:
d4:6b:20:ab:7e:27:2e:44:6a:30:82:5b:de:8e:f2:ea:1e:ca:
c9:41:0d:0e:d3:25:7e:e4:c9:83:1e:8e:d9:1c:ae:eb:aa:ad:
55:aa:55:6e:0f:23:83:87:d0:ae:04:f0:13:1a:2d:22:c0:d0:
b7:c9:33:a0:9d:c7:4d:72:c6:15:32:4b:73:45:a2:8b:1c:74:
e2:c0:49:db:64:f7:83:9b:4f:52:c1:ea:e6:07:d6:ea:14:aa:
5f:bf:3a:29:43:b0:88:73:eb:50:81:2e:db:ab:94:49:f5:4c:
7e:57:dd:60:ed:3a:c5:0b:25:cf:6f:92:bc:f7:24:ed:40:a0:
a5:9a:1e:1a:6d:2f:98:d2:98:0a:54:9d:57:64:d4:07:e3:b4:
8c:67:6d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:09:15 2025 by rpki-client