Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: 6EBdVocZLrkf6rQ3TjUAXZnmwv1pvNTTaLD/hMPj7ew=
Subject key identifier: 4A:72:EF:20:14:DA:FE:B8:3E:39:A5:20:86:E1:C4:FD:4D:47:FA:15
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 0196CA60712B625C115E1C1911CAD1323326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 16:00:40 +0000
Manifest this update: Tue 13 May 2025 16:00:40 +0000
Manifest next update: Wed 14 May 2025 16:00:40 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: OXF/aJ0lm7SRJSPgS2mjkgF7l7u+ya7qX9VpaI9oewc=)
2: W9bI_JNQHDDt7Tw4mN0K9_OAUEo.roa (hash: H3aapZtXnHfhVIDiayaGFZvNcV7JScFiYfbfDkzVZMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ca:60:71:2b:62:5c:11:5e:1c:19:11:ca:d1:32:33:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: May 13 16:00:40 2025 GMT
Not After : May 14 16:00:40 2025 GMT
Subject: CN=4a72ef2014dafeb83e39a52086e1c4fd4d47fa15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:09:52:ed:45:9c:02:db:32:1c:29:f5:47:18:
75:1c:c1:c5:7a:33:f8:f6:68:fe:09:ee:b1:bf:3d:
e4:31:b3:cc:e5:9e:cb:82:77:41:5e:5d:92:d3:fa:
9b:4d:fc:65:d8:3c:49:2b:74:0c:2b:c4:15:bb:1f:
aa:f4:25:24:c4:8b:ea:46:10:90:38:e3:e6:3e:1d:
63:7b:8b:25:54:ac:29:6b:7e:c1:75:d2:4c:aa:81:
d0:b5:2c:36:63:f3:94:c5:c6:94:a4:12:f9:32:1e:
29:91:70:c9:e3:6b:d8:9c:b7:aa:c6:8d:65:8e:c0:
27:31:08:43:24:d7:75:a0:ac:15:d4:32:08:6d:0b:
37:08:9a:6a:7e:64:a8:33:4b:29:a2:bc:85:53:df:
66:a1:ab:4b:f0:69:57:06:47:86:67:bd:b3:dc:f2:
e4:32:77:47:27:ee:57:af:1d:a9:2d:20:ae:5d:87:
a6:0b:52:bc:c4:0e:ef:2e:3b:9b:de:b9:a4:7c:bc:
72:9c:b5:2d:ae:b1:f7:d9:3a:82:75:fb:df:5e:d2:
ed:79:8f:95:91:be:bb:57:3d:7a:25:70:69:6b:3b:
7e:25:ee:df:d7:70:e4:8a:19:0e:a2:3e:d2:d0:46:
50:46:f2:25:ca:d7:17:1b:67:f0:94:39:86:26:50:
94:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:EF:20:14:DA:FE:B8:3E:39:A5:20:86:E1:C4:FD:4D:47:FA:15
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3a:c2:aa:18:91:af:32:f8:2b:44:c4:c5:0e:a5:b7:42:c1:
b3:e3:54:ff:78:3a:83:a6:25:05:4d:db:e7:0f:cc:23:dc:8b:
81:e4:33:94:1f:0d:54:22:0b:53:ca:bd:d5:3a:b3:3d:6b:ec:
b2:11:9e:8f:5a:3b:83:31:cf:7f:7f:f0:ae:5d:57:f2:c5:59:
d9:b3:33:d8:a5:56:f0:26:58:1f:02:8b:a5:05:cc:a6:b5:8d:
6e:ee:ce:3c:f5:d6:8d:91:cc:a5:a7:4d:ae:9e:43:bc:31:55:
6c:d5:50:4d:1b:05:70:4a:88:4e:31:d2:fe:ce:3f:28:d7:5b:
0e:db:71:5b:40:de:3f:4d:f9:4d:88:14:5c:dc:15:a3:b5:d0:
3f:74:03:9b:22:25:1b:66:df:0c:be:0e:6c:16:6f:c8:0b:58:
94:5d:47:9e:21:6a:d1:4e:b4:c2:71:34:e0:1f:2f:45:93:ce:
4e:75:73:7b:6f:af:d4:3e:2d:d2:18:95:46:b9:3b:04:91:a1:
0c:4d:26:97:36:ab:23:f0:e3:fa:8e:40:79:6f:ac:83:c9:1c:
f9:23:0c:6a:0b:72:8e:02:d0:fb:1a:1e:c2:54:bd:e3:dd:54:
4b:9a:33:07:5b:c8:9f:e3:71:91:a7:0b:3c:9c:a4:06:b0:34:
09:1f:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 22:59:24 2025 by rpki-client