Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
File: kERLB53wCKfHy-KPy6Xb4GIOjhc.mft (raw, json)
Hash identifier: p4IJ3Vi2L5+04GFt2RNB82pYVN/D0owZwdd10Z/3zOs=
Subject key identifier: 33:F8:25:CC:AD:E4:FC:6A:3D:BF:2A:FC:F6:42:5F:28:0C:4B:96:A4
Authority key identifier: 90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
Certificate issuer: /CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Certificate serial: 0196C238E6CCAF0995738099A9A95A733A83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
Manifest number: 13A9
Signing time: Mon 12 May 2025 02:00:31 +0000
Manifest this update: Mon 12 May 2025 02:00:31 +0000
Manifest next update: Tue 13 May 2025 02:00:31 +0000
Files and hashes: 1: kERLB53wCKfHy-KPy6Xb4GIOjhc.crl (hash: 7sOVBF/Q4Q955D7tER/mKZndluKbtnadKCUuSlBi2FE=)
2: o9Mrd_Zp-119sDj-V8VZv-bH4Po.roa (hash: T/Zr25wueuSL7uIuxkLz/YPHfupfyL0OiqXaAJQQ9Uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:38:e6:cc:af:09:95:73:80:99:a9:a9:5a:73:3a:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90444b079df008a7c7cbe28fcba5dbe0620e8e17
Validity
Not Before: May 12 02:00:31 2025 GMT
Not After : May 13 02:00:31 2025 GMT
Subject: CN=33f825ccade4fc6a3dbf2afcf6425f280c4b96a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:50:39:fa:2b:ef:50:84:df:78:af:e4:70:43:
5d:b1:02:51:26:a7:62:22:13:ea:41:70:ac:aa:3b:
97:b6:fd:3e:5b:ec:89:a4:a7:fd:05:a1:ab:40:14:
8d:dc:9a:d7:59:b4:39:45:41:54:fa:37:6b:e3:6a:
31:23:36:c4:2b:94:b6:2c:1c:e4:4d:fa:9d:ed:c9:
ef:b3:22:b6:18:0e:f7:12:d5:46:7b:3b:fb:ce:f9:
52:46:72:6a:55:3a:e1:bc:f4:c3:4c:48:6b:77:4b:
2f:84:b4:03:c5:28:21:db:3c:1d:a5:4c:ad:33:f0:
c8:1a:4e:12:1b:ce:ef:56:3b:f7:ca:da:4b:51:cc:
ad:5e:a2:4c:e1:22:de:4f:80:a5:a1:27:20:2c:a8:
9c:17:43:48:e0:dd:40:18:a1:2a:af:1f:db:3b:99:
f0:3e:7e:f4:79:78:a6:b4:46:7c:a3:66:81:14:ce:
0b:e9:4e:8a:b9:e9:19:65:d1:38:69:9c:79:ee:01:
e6:79:8c:70:71:a0:ae:06:cf:b7:68:c1:c8:dc:e8:
83:4a:6f:e2:a9:9d:43:65:c9:cd:97:0a:eb:b5:29:
68:f7:d7:67:46:e3:25:86:58:6b:0e:3b:ee:13:d3:
cd:4e:36:bf:20:6c:03:33:5c:36:8b:11:12:d6:70:
b0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F8:25:CC:AD:E4:FC:6A:3D:BF:2A:FC:F6:42:5F:28:0C:4B:96:A4
X509v3 Authority Key Identifier:
keyid:90:44:4B:07:9D:F0:08:A7:C7:CB:E2:8F:CB:A5:DB:E0:62:0E:8E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kERLB53wCKfHy-KPy6Xb4GIOjhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/24ec8e-1cc6-45e3-9063-99149867dbf7/1/kERLB53wCKfHy-KPy6Xb4GIOjhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:7a:cc:38:e5:72:28:af:5c:8f:6b:26:e9:9c:2c:70:19:57:
78:85:8d:b2:08:de:2b:29:27:f9:e5:7f:30:b1:01:de:4d:a0:
90:5c:e1:5c:8b:6b:b6:15:47:79:1f:13:08:54:bd:56:49:a4:
72:59:f7:3b:9f:db:4b:50:7f:2e:40:90:eb:33:bc:98:e8:93:
a1:18:3b:cf:28:f0:40:2a:68:12:a7:f9:4d:d1:5e:9c:af:1d:
e1:ae:31:cf:bd:9b:38:23:ed:db:f9:0a:bb:bf:e9:d6:c7:f9:
b5:51:2f:41:a7:85:79:43:1c:ef:b7:53:25:ad:bf:23:73:2d:
a2:cb:62:20:22:63:66:84:1c:bb:4d:7f:11:da:13:18:b1:fa:
7c:0e:df:94:06:09:fd:0f:fb:20:68:70:a1:57:58:71:0e:ee:
c1:56:2b:3a:82:57:8a:56:2a:c1:66:03:8f:a4:be:b3:a1:17:
e9:a6:14:31:f5:5a:2e:05:21:ba:54:40:de:87:dc:88:c3:7a:
42:51:b6:5a:8d:96:a5:16:f2:e2:66:49:86:e6:1b:1a:a0:73:
a3:22:56:17:51:26:d0:7c:6d:14:3d:a0:b8:ec:d8:33:d7:f4:
e9:bf:b4:73:d0:70:fb:68:a4:b6:c4:a3:78:91:8f:37:a7:81:
a9:59:0c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:02:30 2025 by rpki-client