Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
File: KD3ro7EwXJpI03S6Rzab8fgn7gg.mft (raw, json)
Hash identifier: v798UZ3AHcXLJpgAFLCSbjRmUuC/YzafZpIH4wwsGO4=
Subject key identifier: 51:34:D2:37:F5:AA:D8:A0:D9:07:BF:F0:04:3B:EF:6E:FE:C5:31:84
Authority key identifier: 28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
Certificate issuer: /CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Certificate serial: 01969F75F89371E2F0408015EF2CEADA28F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
Manifest number: 0872
Signing time: Mon 05 May 2025 08:00:30 +0000
Manifest this update: Mon 05 May 2025 08:00:30 +0000
Manifest next update: Tue 06 May 2025 08:00:30 +0000
Files and hashes: 1: KD3ro7EwXJpI03S6Rzab8fgn7gg.crl (hash: A4CesY8AsgQNEfyxubeJ8wjHvNhDpxyF0cngX9ILHZs=)
2: hy1vd6FMybZThTm3SvjJ_hE7qn4.roa (hash: vLPWUWT2tszs2HUF2XNEiqkWjYMRC5uDHz+kbz1YJLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:75:f8:93:71:e2:f0:40:80:15:ef:2c:ea:da:28:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=283deba3b1305c9a48d374ba47369bf1f827ee08
Validity
Not Before: May 5 08:00:30 2025 GMT
Not After : May 6 08:00:30 2025 GMT
Subject: CN=5134d237f5aad8a0d907bff0043bef6efec53184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:c0:80:92:e9:80:aa:ef:e5:74:c0:d3:78:
ac:7e:80:1b:b3:f4:35:c5:de:66:04:6d:de:0c:0e:
cf:c0:00:50:f2:62:b1:fc:99:1e:7d:40:75:2f:db:
91:d1:3f:ff:ee:78:7a:3d:07:d3:92:fc:74:de:b6:
b9:98:14:65:91:5f:cb:38:2c:1e:ba:8a:c6:c2:b6:
2f:68:58:47:af:80:62:4a:19:77:f4:e7:54:87:95:
4f:b4:05:d5:e9:e2:3a:21:bb:1d:e0:87:19:ae:11:
f8:bc:5a:16:c1:50:ab:ee:f2:33:ac:f0:30:ae:88:
11:d3:dd:3c:6c:60:11:1e:da:82:97:2c:6d:c7:7a:
a7:a0:d9:9c:c8:fe:35:15:d6:4d:54:15:11:45:be:
4f:7c:58:29:b9:90:01:9f:1e:e7:f6:bb:d4:af:b9:
8f:b0:b9:6f:b6:90:73:5e:aa:b6:e1:d8:0d:e9:60:
d3:ef:62:55:a0:60:10:e1:eb:83:38:62:ce:b7:04:
88:cb:37:8d:82:b8:4d:99:74:7b:e9:db:63:0a:d6:
87:5a:90:c2:8a:e0:86:37:35:a7:72:25:51:08:f3:
bf:c7:44:4d:3e:70:a1:21:fa:bf:a6:09:3b:37:78:
ba:a6:95:81:58:df:99:bf:e9:95:0a:88:2d:d9:b9:
2d:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:34:D2:37:F5:AA:D8:A0:D9:07:BF:F0:04:3B:EF:6E:FE:C5:31:84
X509v3 Authority Key Identifier:
keyid:28:3D:EB:A3:B1:30:5C:9A:48:D3:74:BA:47:36:9B:F1:F8:27:EE:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KD3ro7EwXJpI03S6Rzab8fgn7gg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5dfa9-5196-48cd-9178-5a31f620b04a/1/KD3ro7EwXJpI03S6Rzab8fgn7gg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:67:dc:b5:d9:2d:f0:0d:4e:75:58:bc:ba:7f:80:8b:d8:00:
af:3f:af:e7:fa:32:01:ea:60:c6:4e:29:55:a4:6e:f4:08:44:
7a:97:8c:40:bb:2a:9c:26:20:5f:8a:1d:1c:f3:50:36:df:25:
5e:ba:ca:39:61:d0:0d:23:46:61:ce:0c:bb:91:28:7f:56:4b:
47:38:8e:8e:cd:af:46:f4:4d:cb:f0:bb:a7:b5:df:36:bf:8c:
e7:7b:6f:05:53:8a:51:dc:ed:a8:86:9e:0f:e9:70:35:c8:01:
45:84:55:df:3f:2d:74:ab:53:2f:4f:4d:b1:65:2b:52:5a:e5:
23:f1:49:07:51:9c:b3:3d:8f:55:2e:8f:ea:ee:d7:39:88:a8:
3f:2e:7e:c4:d3:6d:26:ff:3e:8c:f4:7e:14:82:47:26:c9:72:
b3:b6:d3:9e:d8:06:06:66:17:3d:e7:c9:c6:2e:66:f5:12:ad:
f4:a2:b4:a4:58:c5:b9:68:78:96:8a:c9:cb:58:06:fc:0c:af:
a9:4d:3a:1c:6c:2d:1b:c1:eb:d7:6d:c1:9a:b9:01:f6:07:59:
5c:1a:23:68:55:a6:c7:cb:31:5e:ed:46:2e:d9:69:67:37:14:
ce:e0:ed:dc:57:ca:96:93:57:24:21:0a:9e:09:8b:40:4e:2a:
2a:e2:e8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 11:53:41 2025 by rpki-client