Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
File: KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft (raw, json)
Hash identifier: V5wLoYSDJHCMJxic4eYc7DWJk09ARNxs4nGb45cevW0=
Subject key identifier: 6C:AF:51:EF:DA:57:11:EE:37:9C:44:A2:06:20:4F:70:63:3D:CC:83
Authority key identifier: 28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
Certificate issuer: /CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Certificate serial: 0196C5A87D4E2DEED7A9E418B02E2A98BE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
Manifest number: 070E
Signing time: Mon 12 May 2025 18:01:15 +0000
Manifest this update: Mon 12 May 2025 18:01:15 +0000
Manifest next update: Tue 13 May 2025 18:01:15 +0000
Files and hashes: 1: 5v35qWKD8NjR5CYJwsa3ZCJmcaE.roa (hash: 8EnKiqZmxqaxCmZk9qwGpftXBFsMv4XGXaWZ2Oqridk=)
2: KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl (hash: eEGggqbtWc8KC0MJC0RAJR/d2WByXdGwvXWviilQgWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:7d:4e:2d:ee:d7:a9:e4:18:b0:2e:2a:98:be:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=282b2cb977153baad1dd99eec14ce0ca46e2219f
Validity
Not Before: May 12 18:01:15 2025 GMT
Not After : May 13 18:01:15 2025 GMT
Subject: CN=6caf51efda5711ee379c44a206204f70633dcc83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:cb:81:d8:40:21:e6:63:f5:9a:df:71:72:
b7:33:ec:11:7b:a6:09:0f:49:56:e6:55:2d:cb:f2:
5f:28:9d:6d:46:4d:0f:54:ef:87:27:95:2b:34:eb:
80:d1:f2:b1:9f:94:87:4d:fc:a4:78:d1:f2:8c:12:
34:07:ef:d1:ba:50:ca:d3:b4:5a:98:1b:1b:2a:81:
59:89:0a:12:96:3b:36:cc:fb:4a:45:62:91:ad:46:
50:4b:5e:78:89:41:5d:f7:20:31:29:b4:3e:d1:02:
b3:db:92:ac:02:41:57:e0:bf:a0:fa:c6:eb:d7:ec:
9c:c0:29:78:f2:5a:9a:40:86:15:73:93:70:58:72:
3a:bb:f3:6c:c7:88:c3:a7:e8:9d:91:bd:f7:e6:cd:
99:67:b3:83:ce:2f:94:64:1e:59:43:8a:a5:0b:9e:
b4:08:04:b1:eb:dd:8c:7f:ca:46:93:b8:cc:f9:a7:
15:4b:07:b1:9e:dd:e7:ea:57:72:cf:3c:19:4c:f7:
27:51:3e:65:99:d5:40:57:70:3b:f4:0d:f4:95:34:
74:84:0d:60:00:12:44:f9:47:58:48:81:84:a7:b1:
ee:b2:b4:6d:28:67:55:95:56:61:b4:70:25:ca:3b:
85:b9:b2:79:d2:67:1a:ba:4c:c1:81:eb:b0:67:0a:
30:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:AF:51:EF:DA:57:11:EE:37:9C:44:A2:06:20:4F:70:63:3D:CC:83
X509v3 Authority Key Identifier:
keyid:28:2B:2C:B9:77:15:3B:AA:D1:DD:99:EE:C1:4C:E0:CA:46:E2:21:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCssuXcVO6rR3ZnuwUzgykbiIZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/0b0b33-98a1-4818-ad18-95f27d3e8abb/1/KCssuXcVO6rR3ZnuwUzgykbiIZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:db:1a:4f:d2:ed:e6:eb:b2:85:4f:04:5d:ec:06:1d:42:0a:
16:07:74:0e:1b:b9:0f:e1:37:8b:fa:cf:e1:0c:71:c3:b7:37:
ea:b2:54:ea:a6:0b:e6:f9:42:5e:57:14:0d:61:9c:8c:62:a2:
0a:70:17:ba:34:b7:32:7a:27:e7:32:0a:20:ac:d7:92:e5:46:
5c:c8:b1:fc:2d:13:94:4c:dc:b1:be:db:6e:ca:8f:b2:ba:f3:
85:92:7d:41:85:fc:5c:ea:dc:ac:7d:bf:dc:52:e2:9e:02:de:
b0:29:0b:1d:f4:95:32:63:d5:57:f3:da:2d:0f:30:7e:08:f6:
f9:24:55:39:b0:d6:12:04:c6:ad:6b:ca:c0:4e:d6:79:8c:09:
63:97:f5:5c:bd:0b:92:cf:ea:fa:a5:80:7a:15:65:fa:e8:ec:
43:85:d1:c6:2c:bc:b2:5d:ad:c1:ac:8f:35:68:5b:0e:12:5a:
1e:3b:7a:61:55:99:bf:ec:23:a0:b0:70:5e:1c:23:f0:24:76:
59:d0:c2:ae:c6:08:ef:4b:02:02:24:65:e3:3f:cc:b7:2d:bc:
46:d3:b9:5d:15:80:ed:30:38:cb:2f:48:e2:54:7a:71:72:02:
c1:37:52:1f:f3:93:43:e6:57:b7:f9:ee:2f:c5:af:26:5f:de:
f0:d2:fc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:59:35 2025 by rpki-client