Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
File: KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft (raw, json)
Hash identifier: UP+NVup1uE3Mg3cBkAlKDrsyWZfK0nQ7AqRLUicqfxA=
Subject key identifier: 68:9E:D9:94:6D:11:2D:FF:E4:B9:D6:C1:1E:03:AD:37:A8:F5:EA:7A
Authority key identifier: 29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
Certificate issuer: /CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Certificate serial: 0196D2BF51DD0F08FC048FB58E77C7F43E22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
Manifest number: 153C
Signing time: Thu 15 May 2025 07:01:15 +0000
Manifest this update: Thu 15 May 2025 07:01:15 +0000
Manifest next update: Fri 16 May 2025 07:01:15 +0000
Files and hashes: 1: KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl (hash: rXgjgqz3alFa5tsUyB9SrmfaJ3A8Fsp6vXziiN/2GEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d2:bf:51:dd:0f:08:fc:04:8f:b5:8e:77:c7:f4:3e:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293bc3a5749733104f7b9cc0512dade136d70ad0
Validity
Not Before: May 15 07:01:15 2025 GMT
Not After : May 16 07:01:15 2025 GMT
Subject: CN=689ed9946d112dffe4b9d6c11e03ad37a8f5ea7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:49:5f:d7:2f:11:5d:3d:4e:ed:27:6d:e0:d5:
a6:af:d3:95:9a:f1:df:67:d9:42:1d:bc:52:a8:1a:
df:40:ac:a3:77:5c:d5:5f:73:f2:ac:d1:00:ee:1b:
c9:66:72:24:89:be:ff:90:a6:fc:29:ab:49:76:1e:
53:b3:74:e9:87:0e:fc:9f:b8:e1:03:a4:c4:fe:3c:
20:ee:9d:8f:f8:d0:a0:04:7d:88:9a:e4:8f:76:58:
65:10:05:7d:64:f2:a6:0f:cb:6b:b3:21:78:d2:53:
d0:0c:e5:7c:81:35:7c:a0:e2:db:04:ea:68:5b:b8:
96:d7:a8:16:40:2d:6e:45:b5:82:e7:51:ad:d2:ff:
b4:c5:6e:71:10:83:b7:13:b4:4e:87:75:72:ab:8c:
71:fe:dc:59:1e:7e:7b:59:76:f9:8f:a2:d6:9d:c9:
14:75:07:bf:52:09:c3:c4:c1:1b:98:09:60:e9:ea:
a0:fe:14:db:01:3a:7a:0f:a3:38:da:e2:f6:aa:5b:
43:c7:f2:01:67:f4:10:2b:c9:51:e7:c0:d2:0d:68:
7c:f8:91:2f:81:b2:6c:b3:36:5f:27:19:b6:09:ac:
7b:4f:1a:9e:18:de:2f:b4:ef:4d:44:35:9a:dd:dc:
cc:72:66:04:db:54:25:c0:fa:99:e5:7a:10:70:f9:
e0:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:D9:94:6D:11:2D:FF:E4:B9:D6:C1:1E:03:AD:37:A8:F5:EA:7A
X509v3 Authority Key Identifier:
keyid:29:3B:C3:A5:74:97:33:10:4F:7B:9C:C0:51:2D:AD:E1:36:D7:0A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTvDpXSXMxBPe5zAUS2t4TbXCtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/bb7f9e-15c0-4d55-822b-609a1e8627fd/1/KTvDpXSXMxBPe5zAUS2t4TbXCtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d1:5d:64:e6:61:41:e0:8e:64:00:55:1f:47:2c:fd:2d:a3:
c3:4d:89:75:97:f0:be:d2:f7:0b:5b:20:e3:08:ae:3c:4a:75:
f9:20:a6:07:ab:1e:9d:ed:15:73:91:d5:f6:04:49:d9:f4:51:
58:1e:27:af:e9:25:b1:3a:e1:7c:7b:3b:7a:64:16:56:70:33:
3a:66:ea:3a:28:66:35:fc:05:ae:2f:5e:a3:fe:d5:5e:15:49:
ce:99:99:f9:14:ce:e7:bf:a4:76:70:e7:05:89:71:7f:1a:98:
90:6a:b4:6e:65:39:e8:f5:c5:34:b2:f4:c7:56:a0:1b:fb:8e:
42:2c:c8:82:32:c7:00:64:f6:2c:c6:fc:fd:04:25:66:8f:fe:
77:9d:ee:4c:86:76:06:79:76:27:52:48:7d:72:a9:d4:d8:23:
f7:be:35:0c:ff:af:0d:6f:28:82:73:d7:27:d9:86:37:ac:bb:
64:66:46:e3:0a:d0:44:e6:bf:6e:e7:63:6a:09:8b:00:7e:32:
3b:df:19:ce:c9:ec:d4:9a:e6:92:53:8f:aa:04:40:54:98:bd:
14:09:f9:59:a1:a3:73:66:70:29:0d:b2:54:42:fe:fb:ed:27:
ae:3a:30:fa:62:fa:f3:98:72:8c:4b:a1:7f:a3:56:8b:eb:91:
78:7f:9f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 11:05:11 2025 by rpki-client