Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
File: kiYrQ-lHhUb8DhN16LHguv1q3lA.mft (raw, json)
Hash identifier: hTe5fppjzxzgq9u46ZWikM3mTMr3zkiR6wiBPxLgbz0=
Subject key identifier: 17:98:73:C7:C5:53:17:FD:2F:2C:73:29:F5:0C:82:26:8A:66:AE:A2
Authority key identifier: 92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
Certificate issuer: /CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Certificate serial: 0196CBE0EC72DF65479CC8ACF7C073AA603C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 23:00:37 +0000
Manifest this update: Tue 13 May 2025 23:00:37 +0000
Manifest next update: Wed 14 May 2025 23:00:37 +0000
Files and hashes: 1: kiYrQ-lHhUb8DhN16LHguv1q3lA.crl (hash: 78QlwBjZMX8IM7l2hwGuilNKAwlwOM2nYA3NsyveODg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:e0:ec:72:df:65:47:9c:c8:ac:f7:c0:73:aa:60:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92262b43e9478546fc0e1375e8b1e0bafd6ade50
Validity
Not Before: May 13 23:00:37 2025 GMT
Not After : May 14 23:00:37 2025 GMT
Subject: CN=179873c7c55317fd2f2c7329f50c82268a66aea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:61:e1:ba:51:1d:4c:68:7c:5d:bc:b2:ed:30:
8a:1c:83:62:f3:5a:f8:76:22:de:f1:9e:ef:eb:44:
25:b5:5d:17:97:87:0a:52:bf:54:e5:fb:77:a5:80:
3f:1b:7f:dc:4a:ad:6d:36:0c:22:b9:4b:63:c1:54:
07:87:a8:38:e6:48:ff:12:63:a1:50:a4:fb:0f:95:
36:a9:69:fd:02:f2:85:f5:2b:93:55:6c:1c:95:87:
56:08:10:56:8e:3a:a8:df:ba:51:bf:c5:7e:7c:e9:
88:1e:4f:0e:35:c1:57:e6:d3:8c:ae:8a:b5:eb:d5:
3c:ea:2b:38:ae:2c:85:8f:6c:e1:af:ee:8e:4f:70:
d6:ca:dc:c3:a7:4b:55:93:ab:25:b1:f7:86:25:7c:
60:bc:d3:9a:fd:38:23:28:9c:46:1d:be:73:33:da:
e5:e8:83:b0:a0:17:64:7e:67:10:c0:0c:25:0c:98:
54:8d:c1:f0:89:8f:79:a9:6a:e5:01:03:00:f1:66:
86:78:60:ae:59:04:fb:4a:a0:47:49:b1:c2:48:64:
4d:ea:fd:03:38:34:c3:33:8c:24:77:62:7e:53:4d:
91:62:d4:99:e1:32:41:51:ab:20:73:cd:d4:30:05:
f5:5c:93:f0:b5:b3:a9:fd:21:f0:e4:7c:93:46:56:
1d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:98:73:C7:C5:53:17:FD:2F:2C:73:29:F5:0C:82:26:8A:66:AE:A2
X509v3 Authority Key Identifier:
keyid:92:26:2B:43:E9:47:85:46:FC:0E:13:75:E8:B1:E0:BA:FD:6A:DE:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiYrQ-lHhUb8DhN16LHguv1q3lA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d76c43-dd6d-4986-898f-193814d843d4/1/kiYrQ-lHhUb8DhN16LHguv1q3lA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:12:8e:f6:10:99:47:b9:56:04:32:b7:93:10:cb:56:a1:d6:
ca:e5:f9:1b:62:7f:67:d4:f7:35:a1:e9:3e:ad:28:37:4f:92:
72:0c:b9:97:65:db:1f:ca:26:e0:dd:23:bb:11:cb:87:5a:07:
11:b7:19:b8:27:6c:2c:7c:f3:ba:ff:11:95:1c:09:2b:ae:b2:
c1:fd:9f:ad:6d:a1:4c:46:b1:56:a6:b3:ce:f3:20:6b:a7:2a:
ab:05:b0:b3:c3:81:4d:da:d7:90:51:24:de:86:95:53:af:8a:
83:71:46:c8:c3:6e:f5:4a:6d:58:83:d2:db:53:e4:6b:a5:59:
c8:28:66:e0:be:ea:18:4b:08:5d:ff:2c:70:1c:82:9a:91:e9:
32:bc:bc:60:e4:fb:43:81:4e:e6:86:00:e1:71:42:85:d1:73:
4c:25:df:50:96:23:1a:0c:c4:6e:4c:20:b5:a2:3a:90:cb:62:
9e:34:01:5e:17:6f:34:5c:54:44:b0:9f:bc:49:75:f2:cb:dc:
73:59:1f:23:e7:0a:7a:9b:b7:a1:e9:a1:9f:de:49:7a:25:5a:
96:99:35:10:61:30:db:ca:59:4a:a0:b9:56:84:03:ff:df:d1:
74:93:42:7f:96:3c:de:28:98:bc:2a:00:b7:29:95:33:01:40:
e5:e3:53:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:12:04 2025 by rpki-client