Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: RmTuZ9bqpL1guPTyF6I1ZhMrtktPz8kNamx4aSNARlk=
Subject key identifier: ED:34:C7:75:4E:90:E2:86:4A:C3:D1:A0:82:89:5E:48:EF:A7:BC:03
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 0196C570A7D495F53897B20BE3B3EF94DDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 0204
Signing time: Mon 12 May 2025 17:00:16 +0000
Manifest this update: Mon 12 May 2025 17:00:16 +0000
Manifest next update: Tue 13 May 2025 17:00:16 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: hlzy9pzKQXXSxyf0NejgnoEG4OrYq/UAnpJcTSYoMas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:70:a7:d4:95:f5:38:97:b2:0b:e3:b3:ef:94:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: May 12 17:00:16 2025 GMT
Not After : May 13 17:00:16 2025 GMT
Subject: CN=ed34c7754e90e2864ac3d1a082895e48efa7bc03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bd:60:d4:87:f7:f6:3e:2f:cf:21:13:ec:46:
81:02:a4:5e:28:c3:6f:e3:89:45:b0:dc:5f:85:15:
16:9f:5e:9d:ea:a9:3b:5a:bc:31:6b:b9:23:b8:36:
1c:ba:3d:78:ad:76:63:1f:ac:99:a2:ce:6b:75:62:
1d:96:12:07:6b:63:71:9d:0b:ea:6a:da:c5:17:8b:
a1:86:d0:b3:7b:0c:a1:9d:d2:40:fc:33:17:e9:a0:
21:bb:92:ea:fe:2c:08:82:21:5e:47:d8:c9:c2:bc:
ba:14:23:50:3d:88:f2:eb:68:de:0c:ee:b4:07:7c:
bb:3d:a7:2d:3b:c4:62:c5:2d:71:b7:10:7d:b7:cf:
d4:68:36:f4:75:a5:20:31:2b:de:2d:27:e0:5b:70:
c6:4b:5e:c3:97:4f:7c:31:b1:47:b5:a7:77:90:2f:
fd:b3:8a:6d:4b:b0:27:ce:ec:2d:e3:c0:a5:5a:d0:
f8:cf:e2:8b:b2:33:ab:2b:33:0d:fe:ba:83:39:47:
4d:a1:4d:d6:20:10:29:8f:c8:dc:90:1b:26:44:4a:
d2:8e:73:11:17:51:5d:1e:14:70:a4:29:47:cb:db:
b9:f2:1f:ff:4a:fb:1d:03:a7:e8:fc:76:5e:7c:2e:
28:93:e2:8d:58:ff:e0:8c:96:62:3b:ca:fe:e9:40:
fd:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:34:C7:75:4E:90:E2:86:4A:C3:D1:A0:82:89:5E:48:EF:A7:BC:03
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:cc:2a:ea:b8:bf:97:72:cc:bf:ec:fd:e4:ad:2d:0c:ac:67:
08:01:f6:1f:50:8c:61:93:7d:bc:c8:1e:bb:20:20:4d:9d:83:
c5:aa:1f:d7:7e:31:90:58:e1:58:10:13:d4:ed:8b:7b:db:de:
d8:0c:a5:24:71:e3:64:0c:bb:2b:c5:41:76:c2:09:34:56:0e:
bc:78:79:32:01:b9:7a:09:34:11:97:90:45:f6:17:6e:d4:f5:
ab:95:4a:e1:f6:55:6d:0e:25:91:2e:4f:db:93:a4:85:a5:c2:
a4:aa:20:bb:57:2e:26:a9:3e:3f:e1:47:5e:8a:f7:ac:37:fe:
3c:e5:47:3e:e7:5f:38:e7:61:41:21:59:2d:d3:76:bc:59:43:
3b:78:55:17:c8:45:d6:ec:a5:bb:a2:be:f0:8e:a8:31:89:f4:
c1:de:aa:7e:44:a1:6c:84:34:29:c0:ba:71:e9:5d:84:70:e6:
9b:31:28:e2:66:03:41:d9:10:17:b7:2b:52:f3:12:73:88:c9:
f3:00:35:db:88:21:55:0a:ed:13:2b:90:35:d7:e3:e6:f4:7f:
69:02:2d:54:ce:a7:96:8d:9f:f0:82:81:33:b0:2c:1b:7f:79:
63:61:b8:6a:14:a1:78:dd:a8:e5:20:cc:64:d5:a3:68:ae:98:
c0:94:ad:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:32:41 2025 by rpki-client