Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
File: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft (raw, json)
Hash identifier: sQUG+DF7WzEiknDc6D6sZjL4Nnm9IQNFRbjTlH76/V0=
Subject key identifier: B5:2E:05:44:F4:E0:4A:6A:32:B7:D9:43:EE:EF:2A:2E:B8:17:3A:17
Authority key identifier: F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
Certificate issuer: /CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Certificate serial: 0196BB5B2761BCE997649C015A7AAD5967FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
Manifest number: 032C
Signing time: Sat 10 May 2025 18:00:35 +0000
Manifest this update: Sat 10 May 2025 18:00:35 +0000
Manifest next update: Sun 11 May 2025 18:00:35 +0000
Files and hashes: 1: 1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl (hash: ldIGc3GTmUgIq2vPzZ7ofLx2ChqN02vAg2mWZifIk/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 14:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:27:61:bc:e9:97:64:9c:01:5a:7a:ad:59:67:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a61c2d4973897000e56acb3c843f2034aa56a0
Validity
Not Before: May 10 18:00:35 2025 GMT
Not After : May 11 18:00:35 2025 GMT
Subject: CN=b52e0544f4e04a6a32b7d943eeef2a2eb8173a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:d6:55:e9:d5:af:4b:2c:d4:3b:d4:7c:c4:
15:f3:bf:6e:cf:f4:0a:14:dd:9c:e7:5f:c4:10:ee:
f5:1d:3d:ca:84:d9:e5:a8:f3:e2:3b:f2:f3:65:65:
66:12:9c:78:c1:43:bb:6b:ab:72:a9:25:c4:5c:64:
82:d6:f5:9c:fe:26:ef:9c:e1:27:39:79:10:f9:08:
ea:27:52:c4:60:68:4e:ff:d7:16:d4:a5:8b:dd:e1:
27:65:7e:26:f2:11:d9:8f:a1:f8:60:b1:37:f3:96:
0b:61:f7:5c:a1:92:ed:45:ed:ae:61:74:fa:9b:0b:
cd:e2:9a:0e:96:57:77:47:07:eb:69:c7:f3:1e:d4:
cf:55:cd:7a:3e:b7:e4:46:2f:6b:0a:0a:d0:8a:8d:
e4:da:4e:06:05:6f:eb:5a:6d:03:fc:30:f6:69:12:
99:ae:5d:b9:ac:e1:df:25:a3:9a:13:73:b8:1d:1c:
42:b3:b6:13:be:c6:e8:9e:ac:6a:94:b6:1f:06:f1:
64:81:fe:1e:d1:e4:7f:75:da:34:fa:97:2c:ae:5c:
85:6c:a5:dc:68:7f:14:ab:bb:a2:74:51:cb:a8:13:
95:86:aa:13:07:59:72:1e:2d:6d:00:ed:0e:26:10:
b6:98:70:10:d9:df:ed:f0:d1:c3:4c:0a:39:df:2b:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:2E:05:44:F4:E0:4A:6A:32:B7:D9:43:EE:EF:2A:2E:B8:17:3A:17
X509v3 Authority Key Identifier:
keyid:F8:A6:1C:2D:49:73:89:70:00:E5:6A:CB:3C:84:3F:20:34:AA:56:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/15a067-6916-4385-a292-2782ecee0e92/1/1-KYcLUlziXAA5WrLPIQ_IDSqVqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:1a:6e:44:88:9c:bc:6c:5d:d7:a9:8b:72:8d:38:99:ab:
04:4a:2e:be:a5:98:7a:3b:1e:14:82:dc:4a:5e:13:a8:7b:15:
60:7d:46:ac:f4:42:b3:1a:5f:c5:68:d6:f8:dc:ce:a9:b3:6c:
52:f9:a4:d8:0c:03:6a:85:eb:e1:84:1b:a1:ce:97:4a:27:93:
b9:8a:bb:ce:30:a5:78:8b:38:8a:c9:c1:94:ca:e7:46:2c:7a:
49:b1:6b:55:fc:6c:4d:4a:ed:39:cb:c7:79:1c:d0:48:e8:eb:
2b:b0:a8:07:01:58:d6:92:53:ac:56:04:81:b2:3f:a2:22:e4:
63:48:de:f1:50:74:99:8e:f0:f0:8c:16:f1:08:1a:85:fd:7d:
41:cd:9d:79:1b:b7:ca:06:37:ec:b9:ca:bb:eb:4f:0c:de:ff:
1d:e9:0a:8b:96:3f:12:8b:88:75:0b:20:94:d6:c3:6e:5c:13:
6c:1f:e9:56:5f:75:cd:c5:e3:cb:96:11:d2:7c:10:47:1c:86:
3d:6f:fb:21:ab:62:3c:a8:84:6e:8b:7c:01:1b:2c:89:e1:e9:
06:5f:50:06:c8:56:9c:bd:61:f3:f0:8e:c1:a5:61:1d:6f:46:
98:2c:94:84:44:8e:a4:07:b1:14:5a:96:bd:95:13:a6:8d:83:
d5:b0:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 00:04:56 2025 by rpki-client