Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier: 3qPtL2z3gIh0nyD9oBgkpe8G1zYFsCJX2A88v9925bY=
Subject key identifier: 5D:BD:60:6E:2D:F4:B6:31:92:C0:4F:92:CF:AD:AC:40:72:9F:20:2D
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial: 0196CCF3F680A0E1A7232CCA0B5E50E2FACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number: 12A4
Signing time: Wed 14 May 2025 04:01:02 +0000
Manifest this update: Wed 14 May 2025 04:01:02 +0000
Manifest next update: Thu 15 May 2025 04:01:02 +0000
Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: khiEjN+3yR1o66dOvi+tIilh9bE09tuzw7yBS9iU4b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cc:f3:f6:80:a0:e1:a7:23:2c:ca:0b:5e:50:e2:fa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
Validity
Not Before: May 14 04:01:02 2025 GMT
Not After : May 15 04:01:02 2025 GMT
Subject: CN=5dbd606e2df4b63192c04f92cfadac40729f202d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fa:f1:77:a6:c7:36:9c:d5:b1:fa:6e:aa:db:
a1:7d:64:71:5b:52:00:97:1f:23:9e:5e:da:bf:dd:
29:b9:85:32:de:08:12:e1:24:a9:0f:0d:b2:59:72:
14:c6:49:02:82:8e:15:c8:90:3d:e9:1a:e7:38:9d:
ea:99:39:84:b8:bb:cf:4e:bd:4d:4d:47:5e:9c:29:
67:36:b4:54:95:79:fb:7f:14:32:eb:1d:ca:74:50:
40:7e:6b:68:e4:b9:b4:66:36:83:b8:56:d6:38:0c:
9c:df:f8:3b:88:74:bd:94:a5:d0:60:d1:83:e0:61:
5a:30:ae:c5:6d:97:aa:6f:30:1c:ac:9a:d6:6f:7d:
33:31:f4:a5:95:47:1a:d4:6a:4e:70:ce:63:15:68:
c5:59:6e:30:08:46:d3:71:ac:93:14:10:c2:ea:a2:
49:17:d1:12:e8:75:c8:b0:c7:a5:a7:49:7a:db:89:
9f:5c:ed:fa:60:38:96:88:53:e9:9e:99:14:6c:b1:
12:a9:cb:d1:1e:35:17:2a:0b:e0:00:67:26:9c:e2:
fc:f3:1a:99:d8:52:54:5f:c1:04:ea:fe:ff:5a:12:
f5:13:2a:01:2c:b3:21:e2:f2:eb:74:d5:d3:fd:cd:
ac:c5:a2:4c:ac:40:d2:97:ff:2b:cf:10:c8:a8:b3:
a4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BD:60:6E:2D:F4:B6:31:92:C0:4F:92:CF:AD:AC:40:72:9F:20:2D
X509v3 Authority Key Identifier:
keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:d6:a6:ee:f6:64:0b:56:c8:9a:11:d9:90:31:28:89:a7:f8:
83:ac:5a:9e:14:7b:2e:d0:86:68:70:80:9a:40:e6:67:21:4b:
97:2f:8d:8c:ca:0e:64:6f:aa:ae:b8:72:a3:69:10:7f:95:3d:
9d:68:14:46:ec:9d:d0:99:d2:56:db:fb:f2:4f:d4:c0:6d:be:
b5:e1:30:42:b4:9c:0f:a9:68:d6:0f:45:45:3f:dc:e1:5c:e1:
5d:75:60:22:d0:16:85:fa:d8:65:74:de:d4:f6:57:f3:1a:8e:
ad:05:9b:b6:b0:b0:23:33:57:e1:c0:58:32:81:c1:95:8e:50:
25:41:52:9e:1b:a9:0c:45:2a:b2:b5:95:75:4d:e3:ce:2a:cb:
d1:44:0e:e3:76:38:45:82:0d:79:97:4a:31:9f:e6:6d:88:08:
8e:5e:0f:b5:5d:17:12:72:05:1a:93:cf:d4:3e:e5:01:8a:6b:
db:c2:cd:c0:66:f9:7d:f4:7e:51:3f:10:90:ee:f1:d6:98:bd:
3a:08:82:47:e1:01:3f:54:a1:32:a9:d3:85:89:e8:79:65:26:
4c:0b:64:f8:30:1d:e7:06:af:57:b2:39:7c:4e:58:7a:9d:83:
57:0b:bd:27:bb:d0:a6:17:aa:dc:1d:10:2c:e7:07:40:6d:fd:
92:fe:c4:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:40:36 2025 by rpki-client