Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
File: KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft (raw, json)
Hash identifier: mdzRUtzZ5sdxkK6xpNz+zz9vb+HGhuyV4KGuq8v1iBM=
Subject key identifier: 50:50:B0:EF:63:E4:68:9F:AE:4E:B1:9A:67:EB:37:D1:38:71:DB:1B
Authority key identifier: 28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
Certificate issuer: /CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Certificate serial: 0196C382312980E6D638B861E0F7DB3E1EF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
Manifest number: 1539
Signing time: Mon 12 May 2025 08:00:11 +0000
Manifest this update: Mon 12 May 2025 08:00:11 +0000
Manifest next update: Tue 13 May 2025 08:00:11 +0000
Files and hashes: 1: KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl (hash: EIUZkpXUPK775cCNi1oUU10T4JJW14wZDfEiCmnJ8qg=)
2: VL0JqwmqF16Z9vYeG0MjePH-HaI.roa (hash: pSsEMVRtkWy4MtHaQ+2yZDRrd+dgM8mCSpJI0iLDlbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:31:29:80:e6:d6:38:b8:61:e0:f7:db:3e:1e:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=281a0bbf52d8d2d48594343a55409fc10bb7b71a
Validity
Not Before: May 12 08:00:11 2025 GMT
Not After : May 13 08:00:11 2025 GMT
Subject: CN=5050b0ef63e4689fae4eb19a67eb37d13871db1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d2:c7:9f:9d:f9:fd:ac:72:f4:60:ec:3e:76:
a0:6a:93:40:4b:7d:1f:24:b0:28:7d:3c:9f:90:2f:
94:e1:e6:65:66:5c:f8:4b:96:3d:51:d2:60:0c:b4:
2f:5e:ed:25:1a:fc:c8:c7:66:b8:60:e5:97:44:15:
d5:a1:3d:4d:77:23:19:7f:33:c7:d2:1a:e4:c8:a3:
3e:9b:e9:bd:69:49:e3:ca:72:ee:fb:7b:84:6d:3b:
2f:f0:0d:e0:4d:13:65:07:04:07:43:6b:4b:5c:5d:
86:d4:27:03:a5:e7:97:26:00:5d:01:e4:17:85:56:
1e:19:5c:ee:82:e2:e3:ce:91:12:13:97:f3:3a:f5:
7d:a4:df:56:1a:98:5c:5f:1c:f7:d0:9e:36:69:ca:
3f:47:a2:3b:54:19:1a:b8:e6:27:9c:03:80:6c:04:
cd:47:a8:8e:e3:c6:ca:0c:99:01:61:82:21:d2:e9:
34:02:d3:12:02:a6:8d:62:a3:b2:11:a4:64:ca:af:
79:87:7d:39:3b:b0:07:ea:46:88:84:01:79:ab:3e:
e8:a1:8c:4b:43:be:b3:88:60:22:51:e9:7c:21:46:
8b:71:29:cd:ee:df:5a:37:6f:ca:21:ac:f6:77:99:
22:e3:b7:2d:cb:f3:b4:b0:6e:19:61:6c:85:50:d6:
19:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:B0:EF:63:E4:68:9F:AE:4E:B1:9A:67:EB:37:D1:38:71:DB:1B
X509v3 Authority Key Identifier:
keyid:28:1A:0B:BF:52:D8:D2:D4:85:94:34:3A:55:40:9F:C1:0B:B7:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBoLv1LY0tSFlDQ6VUCfwQu3txo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/3f5154-63d8-4a4b-9a48-1c9c4a1bbd43/1/KBoLv1LY0tSFlDQ6VUCfwQu3txo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:c4:63:05:9e:bf:42:4f:9d:3e:98:bb:30:77:70:ea:11:4e:
3a:33:75:41:31:ac:d3:21:0a:6d:08:83:0a:2c:45:ad:62:7d:
ca:ea:dd:04:2e:ac:24:61:c5:88:d6:c0:0d:34:76:c0:53:06:
5f:a7:40:3c:d3:8f:a5:be:30:d2:f8:ca:43:af:ce:b7:2f:c9:
1d:17:c7:6d:7a:28:7f:12:4d:94:8a:92:36:9f:cd:cf:ba:8b:
69:fb:cf:95:e6:13:da:fa:40:c0:8f:bd:50:c3:94:db:3b:29:
86:48:b3:25:d5:8d:f9:77:c3:56:34:1c:4e:a1:18:b6:62:86:
68:98:d3:88:a5:2d:c4:cd:69:1f:d4:2a:4a:f7:5f:0a:a5:2e:
56:ec:b3:ae:45:a9:40:c0:3b:4b:2f:cf:25:c5:fa:cd:39:25:
2b:78:e5:54:79:15:02:bb:1a:2f:9c:16:a9:cf:78:49:bf:f5:
54:65:6b:89:84:2e:d1:0b:f5:61:6f:56:c4:ab:57:dc:98:ff:
35:fb:30:8b:97:dd:fd:03:f2:fd:5f:a8:12:b0:52:a7:b9:1a:
d5:47:67:4d:84:73:8c:8b:39:25:df:92:0f:8a:19:90:13:05:
85:ef:ba:1a:d8:20:86:71:ba:83:40:08:3c:59:f0:7e:f1:0f:
db:c3:0c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:16:00 2025 by rpki-client