Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
File: k0UD3V9q0KYOe0A6WmQq3kYZljw.mft (raw, json)
Hash identifier: 5FC0f7lm/4TfMpcH9M/9cFIjjVMU2oMp0nlUqsMK7tY=
Subject key identifier: 98:24:8F:9F:75:68:DF:0D:45:0C:9E:2F:13:37:46:B1:7A:FD:5E:1B
Authority key identifier: 93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
Certificate issuer: /CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Certificate serial: 0196C871BBED7C15FDFC1833052B3C8F56B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
Manifest number: 1038
Signing time: Tue 13 May 2025 07:00:18 +0000
Manifest this update: Tue 13 May 2025 07:00:18 +0000
Manifest next update: Wed 14 May 2025 07:00:18 +0000
Files and hashes: 1: k0UD3V9q0KYOe0A6WmQq3kYZljw.crl (hash: Wcn1k5AxkkHlNH14mffDQa1rmjgUp5UAQPqoV/bTytA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c8:71:bb:ed:7c:15:fd:fc:18:33:05:2b:3c:8f:56:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=934503dd5f6ad0a60e7b403a5a642ade4619963c
Validity
Not Before: May 13 07:00:18 2025 GMT
Not After : May 14 07:00:18 2025 GMT
Subject: CN=98248f9f7568df0d450c9e2f133746b17afd5e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:09:68:f8:4c:fd:9e:c8:70:6c:f3:45:64:55:
4b:0c:92:1e:61:da:87:9b:44:da:08:2c:bf:bd:45:
85:ed:aa:88:ee:3c:e0:c4:08:37:87:e3:d7:7a:98:
ff:5d:b6:f6:cd:01:66:6e:e8:2e:bd:6c:55:72:ac:
23:64:49:23:a2:29:1d:bc:7d:96:ab:e7:c1:8e:9b:
ec:1b:f5:1d:81:1f:87:01:cc:af:f8:a0:2f:c8:4a:
70:76:a7:e6:10:3c:45:f4:8f:20:12:ed:fc:f9:8f:
40:20:ee:32:db:00:95:e4:8c:1a:f7:60:1f:c8:7a:
46:39:ee:91:be:33:92:b6:d0:40:5f:b4:a1:fe:0e:
c6:f1:ba:a1:c3:f0:68:ca:e9:ca:fa:86:d7:0b:d2:
dc:23:ef:ec:77:d3:26:78:8d:f6:ed:2c:41:c7:0c:
39:57:69:85:7b:bc:12:5a:bd:7e:0f:4c:d5:07:01:
a5:ac:dd:9b:45:24:4b:43:14:0d:24:ae:1a:7f:3f:
8c:d8:56:2e:d5:8a:43:da:83:59:5c:e4:74:27:48:
4a:de:9c:11:73:98:f4:b6:6a:fe:c7:3a:d9:ac:af:
da:19:bd:2e:cc:3a:f2:bf:25:77:9f:07:46:a1:00:
17:26:04:00:0b:d1:26:f4:83:11:29:77:a8:66:e4:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:24:8F:9F:75:68:DF:0D:45:0C:9E:2F:13:37:46:B1:7A:FD:5E:1B
X509v3 Authority Key Identifier:
keyid:93:45:03:DD:5F:6A:D0:A6:0E:7B:40:3A:5A:64:2A:DE:46:19:96:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k0UD3V9q0KYOe0A6WmQq3kYZljw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/11742a-8cd0-4237-b26d-c6ea08875737/1/k0UD3V9q0KYOe0A6WmQq3kYZljw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:a1:14:8f:5f:15:2a:4e:f2:be:da:0a:bf:f5:6d:0c:db:13:
54:f0:31:63:d9:7f:f4:c8:a0:15:02:d1:c6:08:90:57:f2:6b:
3a:23:4a:bb:f8:e1:f5:59:6e:bc:fd:dd:0d:63:f9:a3:96:a8:
41:94:39:33:1b:6c:cb:e8:7c:f5:50:10:87:3f:1f:65:6e:c3:
40:cb:ea:ab:a8:fc:70:01:92:e6:af:ba:5a:23:8b:e2:2e:1e:
e2:dc:07:4b:08:f8:75:47:96:58:9f:fa:e7:d3:e4:bf:9b:de:
e5:84:6a:bd:c2:2d:e2:b6:5c:4b:e7:ec:28:35:03:0e:df:91:
c1:69:bb:a4:46:9f:ad:6b:02:08:13:8c:37:db:f1:04:91:b2:
94:eb:3e:2a:e2:57:9b:3e:a2:ed:11:28:31:b1:4c:b1:1e:0b:
1a:da:d1:e4:30:68:00:42:ad:02:eb:d3:0e:f6:8d:8f:78:e5:
93:61:7d:b6:b9:5a:9c:3f:cf:3f:75:ec:11:b0:f2:ad:f3:42:
78:c9:1a:be:6e:53:a5:57:37:b7:7a:8e:6d:92:ff:f0:fa:46:
34:b1:73:4f:53:22:38:7e:89:da:52:68:eb:ae:44:69:70:42:
ff:92:9e:74:03:a2:4d:75:0f:f7:00:3c:d5:ac:fb:13:16:dc:
7c:9e:02:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 10:33:42 2025 by rpki-client