Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
File: _KrlFMX5lAORQ1YU15QEvuEgmzs.mft (raw, json)
Hash identifier: jvUgiV4Om1m8VCRZGF/Ua+vnMl+0kOXP/Kbza815q2Q=
Subject key identifier: 25:41:57:DF:98:94:13:81:8B:89:E3:94:48:09:D3:87:F5:F5:D0:90
Authority key identifier: FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
Certificate issuer: /CN=fcaae514c5f9940391435614d79404bee1209b3b
Certificate serial: 0196CA605DCABE2ED19FCF130E2BABCEF169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
Manifest number: 06E2
Signing time: Tue 13 May 2025 16:00:35 +0000
Manifest this update: Tue 13 May 2025 16:00:35 +0000
Manifest next update: Wed 14 May 2025 16:00:35 +0000
Files and hashes: 1: _KrlFMX5lAORQ1YU15QEvuEgmzs.crl (hash: 8UMHqwJN73eULd+UwOjnmKSl97X9uhlSvJve0Y6RxRI=)
2: x6k0RFp7Tx1S2sYvTKRUnwMB54o.roa (hash: Kj0Dd36Z9ZII60RmdvUVufyE+PZ0m6JPvwn/WhUbw7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:5d:ca:be:2e:d1:9f:cf:13:0e:2b:ab:ce:f1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcaae514c5f9940391435614d79404bee1209b3b
Validity
Not Before: May 13 16:00:35 2025 GMT
Not After : May 14 16:00:35 2025 GMT
Subject: CN=254157df989413818b89e3944809d387f5f5d090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:d2:40:e2:c7:2b:29:77:b2:da:7b:5c:46:
40:5b:4a:f6:a9:46:9b:4a:84:40:60:0e:3c:0c:2e:
37:e3:66:1b:13:25:1d:f7:6a:2a:90:94:36:be:f7:
09:71:05:ef:55:ed:30:4d:74:cb:0d:05:49:9c:e3:
85:65:f7:b9:3a:20:eb:e8:f3:75:f7:57:dc:a3:cb:
02:b7:12:b2:a6:9d:18:c2:5f:90:0c:b8:8c:d6:f3:
17:03:83:01:2a:73:84:db:f3:54:ab:cc:af:17:17:
3a:e3:c2:50:77:d2:4e:33:2a:ad:af:2d:d9:31:09:
fa:cc:46:0d:f7:43:4d:e4:04:8c:a3:23:d6:e1:55:
d8:95:71:0f:7c:7c:05:11:52:62:9e:6d:34:44:74:
87:8b:15:cb:13:a0:04:22:9d:cb:07:98:67:3c:49:
07:b4:8d:20:18:ee:37:6d:9a:ba:6b:dc:a1:f0:38:
f6:c1:ea:5f:5f:df:ac:13:d4:93:e3:af:ac:39:00:
0d:07:74:5c:df:ae:06:78:6b:a8:4c:76:63:a3:0b:
42:57:35:2c:54:c1:99:21:05:2c:11:68:de:42:83:
bb:36:0a:13:76:d2:66:f1:17:cc:08:74:e9:46:21:
65:d4:cc:c0:47:54:8a:11:41:4a:31:b3:90:25:ee:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:41:57:DF:98:94:13:81:8B:89:E3:94:48:09:D3:87:F5:F5:D0:90
X509v3 Authority Key Identifier:
keyid:FC:AA:E5:14:C5:F9:94:03:91:43:56:14:D7:94:04:BE:E1:20:9B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KrlFMX5lAORQ1YU15QEvuEgmzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/562e1d-952a-4fea-9e4a-67a98e256cc7/1/_KrlFMX5lAORQ1YU15QEvuEgmzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:c4:dd:a8:f7:17:d1:0f:1c:02:c0:0f:72:49:1c:64:df:10:
0b:1a:7b:95:e6:13:5a:11:ab:e4:d6:7e:bf:53:94:af:f1:60:
3f:c2:97:d5:6d:4b:7b:97:ed:59:ef:0f:d3:bc:43:9b:0d:f5:
c6:44:50:c4:b9:71:e7:7b:b7:69:cd:a1:95:bf:ca:f0:38:47:
c7:37:15:48:c5:2f:b2:f7:ce:10:93:ec:6a:03:2c:d0:1d:32:
9b:a3:8a:70:76:1e:6f:06:1e:d5:be:c3:aa:f8:1e:b0:75:38:
8e:af:ca:b1:9f:f9:14:6d:56:dd:c9:91:6e:9d:12:86:49:0a:
39:5c:52:b3:7e:ef:ba:55:7d:ad:3f:b6:8d:ae:20:b2:1c:80:
9f:72:9f:75:4f:ff:12:ac:15:fb:35:32:e9:46:48:51:bb:7f:
6c:0a:5c:15:45:18:57:0c:55:36:a4:69:6b:c2:cb:27:59:0f:
9c:76:ed:ed:d5:67:f9:c5:7e:14:c6:02:0b:6f:6e:09:71:71:
4e:96:bd:fd:9d:e3:94:e7:a5:b8:31:34:04:36:03:3e:7f:04:
45:fa:19:1f:a9:3c:96:42:5e:c8:6d:19:c3:71:31:53:2d:5b:
a3:58:77:a5:50:29:ff:e4:e0:fc:b7:89:2f:66:14:5b:c0:02:
d7:1b:1c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 23:59:01 2025 by rpki-client