Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
File: KyJEyKPrSjxtd20EbOkqvwHGwi8.mft (raw, json)
Hash identifier: 4HuCOXg4+z4aRdPeiqe8mh0pTCM9qSnNWYAIZYhi8R8=
Subject key identifier: 84:87:35:71:07:E2:48:B5:D4:54:BD:B9:E5:54:EF:95:2E:56:28:4A
Authority key identifier: 2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
Certificate issuer: /CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Certificate serial: 0196A7D4B910B9C12625AC46AE3E61C17EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
Manifest number: 1526
Signing time: Tue 06 May 2025 23:00:58 +0000
Manifest this update: Tue 06 May 2025 23:00:58 +0000
Manifest next update: Wed 07 May 2025 23:00:58 +0000
Files and hashes: 1: CWGhSuH7Prq7nBeXCwJSQ8R7MLY.roa (hash: kJD3A5DYARZjtb9aiv1WyX0nnGUXwOPoDx5EHff3F+I=)
2: KyJEyKPrSjxtd20EbOkqvwHGwi8.crl (hash: yog+hHMoCbjExUjCdQX4ZcZ7KsqLAwiBG/VyKTjsZg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:d4:b9:10:b9:c1:26:25:ac:46:ae:3e:61:c1:7e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b2244c8a3eb4a3c6d776d046ce92abf01c6c22f
Validity
Not Before: May 6 23:00:58 2025 GMT
Not After : May 7 23:00:58 2025 GMT
Subject: CN=8487357107e248b5d454bdb9e554ef952e56284a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9c:ea:df:e1:54:b3:cd:d3:73:5b:9e:01:5f:
26:f8:dc:47:1f:0a:82:7c:ae:0d:d8:23:4f:0b:6c:
29:9c:e9:18:9d:c6:0d:8e:54:30:fa:41:6a:c2:2d:
30:a5:72:01:bd:b0:99:a8:65:8d:69:fe:ca:86:54:
c0:5e:71:6e:1b:79:37:f1:67:51:4d:8e:0f:b2:53:
8d:12:00:0e:f9:16:9c:f2:bd:06:a4:fd:b0:83:4c:
24:11:67:8d:9c:df:2a:3c:b7:ab:bb:45:ee:2c:3c:
be:8e:21:a6:eb:90:e5:1b:fd:38:5b:7a:a1:12:38:
23:51:ba:ec:82:3f:1a:46:d4:78:d0:64:6a:f6:b1:
b0:11:4c:a4:03:75:40:b6:23:a8:9d:f1:ff:e6:ff:
99:d4:aa:e4:7f:e0:89:94:91:8a:62:b9:83:1a:e1:
e4:b7:71:76:89:27:bc:4b:32:a3:e0:43:fd:49:ac:
b8:4f:cd:0e:08:1a:03:1b:74:62:3d:28:79:b4:35:
88:75:c2:1c:89:21:cf:45:8e:13:5c:4b:e0:31:48:
c3:43:16:df:3b:68:72:94:9f:1f:1f:81:5d:bd:cb:
20:35:6b:a6:8f:18:02:b8:1f:74:79:91:1a:62:3a:
17:66:61:be:2c:25:a2:bf:c9:4d:fe:f4:44:0b:ed:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:87:35:71:07:E2:48:B5:D4:54:BD:B9:E5:54:EF:95:2E:56:28:4A
X509v3 Authority Key Identifier:
keyid:2B:22:44:C8:A3:EB:4A:3C:6D:77:6D:04:6C:E9:2A:BF:01:C6:C2:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyJEyKPrSjxtd20EbOkqvwHGwi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7cc7a7-aef1-408a-a1c6-df1cce4e6950/1/KyJEyKPrSjxtd20EbOkqvwHGwi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:15:bd:31:64:ff:39:5f:93:82:66:6d:bf:66:99:2c:5c:fb:
db:52:f2:b3:09:20:89:b7:43:7b:dd:14:d6:03:6d:d5:13:69:
9f:93:bd:da:82:b4:65:20:21:27:2f:ad:ac:40:9d:b3:95:84:
52:66:6a:4e:c7:fb:01:4e:90:ee:9e:64:4b:04:d6:41:d8:f8:
0a:25:6c:41:e1:67:65:13:9b:35:fd:b9:14:31:11:d4:26:d7:
cc:cc:91:1b:ce:b9:b2:7c:8c:bd:24:32:b9:14:e2:3f:aa:5b:
53:64:7d:a2:11:1e:67:60:b5:9c:30:25:19:18:ed:c6:8d:ec:
97:cf:fb:5a:72:65:6e:f9:59:3b:08:2e:e4:2f:84:28:64:e9:
e8:f2:57:07:08:1c:00:55:42:91:b1:1b:fa:8b:3b:fd:07:45:
2f:8b:db:a9:af:75:3c:cc:0b:34:c7:47:2b:09:43:34:36:7d:
65:6d:25:54:a1:99:48:7d:b5:50:41:a7:9f:fb:02:db:b6:40:
22:e2:59:00:9b:1b:d1:2e:02:2b:b6:78:42:4e:ab:b8:a5:f5:
aa:88:b4:11:c3:64:5f:54:36:2d:27:94:c4:e0:1e:5a:b1:c7:
24:cf:69:2a:2f:28:01:35:d5:50:65:6d:9e:58:99:a0:f3:65:
e7:b0:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 03:32:40 2025 by rpki-client