Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
File: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft (raw, json)
Hash identifier: l6O0zFFeWapicCdJKXGpbEXswcuB80OtMbNCwnUnrxA=
Subject key identifier: DE:4B:DF:82:0C:FD:4D:B6:0B:FF:9D:98:D7:CC:1F:6F:B4:3E:9B:23
Authority key identifier: 2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
Certificate issuer: /CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Certificate serial: 0196BD808596ED6095BACCAFF4667D4E78C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
Manifest number: 1538
Signing time: Sun 11 May 2025 04:00:38 +0000
Manifest this update: Sun 11 May 2025 04:00:38 +0000
Manifest next update: Mon 12 May 2025 04:00:38 +0000
Files and hashes: 1: Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl (hash: whrf05KOXg9/AQ5xkJsa1Rak5hjb6HPEt5dW1W9zVBI=)
2: rIuFBAfmvp_-lxNjPhpoImYAjZk.roa (hash: UYHTUbb1Al1rBA78c79sngeNx1JvlEPhDvWJaFDSi+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:80:85:96:ed:60:95:ba:cc:af:f4:66:7d:4e:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6edf23264b43821dae97d10bd364cb6bb7f234
Validity
Not Before: May 11 04:00:38 2025 GMT
Not After : May 12 04:00:38 2025 GMT
Subject: CN=de4bdf820cfd4db60bff9d98d7cc1f6fb43e9b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:71:d5:79:da:17:2b:31:95:a9:c5:ce:66:db:
41:57:af:a7:1f:c1:4e:b5:02:12:f1:2b:84:eb:e5:
8d:d0:84:ba:5d:4f:74:42:fa:0d:a4:7c:da:c4:55:
82:03:aa:8a:30:2f:b0:a2:c6:b1:dc:8a:3c:67:a0:
36:d1:24:f9:1e:e4:e1:fd:cb:0c:62:50:20:57:69:
30:06:4e:31:8c:ff:13:ee:89:ee:ac:f2:57:85:fe:
1d:6b:2f:c1:cd:c3:3f:2b:1e:9b:7e:cc:87:bc:d0:
68:57:e7:22:44:eb:e8:bf:9d:01:fd:5b:13:b2:5f:
3a:17:64:43:da:c0:9b:df:ad:28:70:88:61:70:ac:
4c:82:bf:f3:d9:75:d3:b6:ae:d4:03:a5:4f:45:78:
75:db:21:12:27:3d:69:eb:22:5e:ea:d4:9a:db:31:
0a:15:c9:84:33:ef:4e:aa:69:48:21:27:41:ad:db:
a0:24:12:bc:ab:b9:b3:99:dd:5d:2a:0e:fd:b1:4c:
e5:66:63:6e:52:c0:c7:ae:61:d2:e2:1a:89:01:88:
95:39:d6:35:bf:20:be:c5:a2:a2:11:24:c6:36:93:
ed:f6:24:83:a1:c8:01:98:a4:99:63:7b:6c:31:42:
5a:8c:97:7e:20:03:fa:ff:e6:f6:aa:01:0e:19:7c:
d7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4B:DF:82:0C:FD:4D:B6:0B:FF:9D:98:D7:CC:1F:6F:B4:3E:9B:23
X509v3 Authority Key Identifier:
keyid:2A:6E:DF:23:26:4B:43:82:1D:AE:97:D1:0B:D3:64:CB:6B:B7:F2:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9bb40d-3638-449e-ae25-d428f2349660/1/Km7fIyZLQ4IdrpfRC9Nky2u38jQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:2f:c7:af:72:20:a5:97:d1:36:5c:2f:8f:c9:98:7c:70:9d:
3f:7e:d6:e8:c7:7d:3f:81:12:b2:5d:a1:4b:f6:0d:97:5c:9a:
47:58:8f:4a:e7:6d:2b:8b:8b:a7:87:b5:7e:c1:9b:31:38:23:
48:43:ff:c0:47:75:fa:ec:c4:aa:ac:da:17:82:00:eb:fb:2f:
2c:91:83:2a:49:a2:60:08:7c:75:ce:e7:53:3b:82:cc:73:98:
f1:da:f5:8f:ba:22:72:4a:8e:87:a1:87:ad:fd:3a:82:07:33:
18:00:83:c0:e5:a3:72:77:3e:6b:a4:b7:93:d6:f2:bb:86:2e:
a0:33:e1:96:ba:71:b5:2b:15:b1:85:c8:23:e9:13:64:ff:ef:
c1:08:3e:97:65:e1:f5:e3:d8:2a:db:1e:0c:82:0c:04:1f:63:
c8:16:7e:b0:3b:25:4b:14:99:7e:70:88:54:45:5a:9c:c2:5f:
47:91:29:01:73:4e:cd:5c:c5:93:0b:0d:0f:e0:ba:58:52:4a:
73:8f:51:8c:37:c2:6d:a0:e1:83:1d:15:4b:b7:3d:e5:8d:01:
5c:26:9d:42:00:98:27:9e:67:8d:12:3c:bb:a9:a8:58:94:5c:
29:a9:b8:e3:07:59:79:6a:cb:f3:04:2e:99:ed:2f:8c:e4:0b:
51:4c:b6:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 09:37:46 2025 by rpki-client