Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
File: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft (raw, json)
Hash identifier: kmyRfvpmJeEGWAOWEOyrvtCG1NacfPHqaUgdrTz+E3g=
Subject key identifier: CD:C2:FB:7E:97:04:9D:B4:3C:FD:75:C6:8A:02:B8:49:E2:FF:79:F9
Authority key identifier: AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
Certificate issuer: /CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Certificate serial: 0196A72FEEFBDF4C57F6B465A9C33B2A2080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
Manifest number: 04E8
Signing time: Tue 06 May 2025 20:00:58 +0000
Manifest this update: Tue 06 May 2025 20:00:58 +0000
Manifest next update: Wed 07 May 2025 20:00:58 +0000
Files and hashes: 1: rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl (hash: XUmqLwd3829PT18RqtXPUK0ngRaPe5n7lJO6OSIcCIQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:2f:ee:fb:df:4c:57:f6:b4:65:a9:c3:3b:2a:20:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4ad2d4b0b7330e4a9b5afa11a6198fcb651bf7
Validity
Not Before: May 6 20:00:58 2025 GMT
Not After : May 7 20:00:58 2025 GMT
Subject: CN=cdc2fb7e97049db43cfd75c68a02b849e2ff79f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:7a:b6:c7:63:c4:12:16:fb:8a:e5:e4:22:
b6:9e:b6:5c:8f:b2:e6:4c:63:e5:be:92:38:7b:23:
c4:0d:4f:c0:c3:f5:df:d3:fc:c0:2d:45:9f:b0:3b:
d1:d5:4e:10:df:b1:f0:df:67:7a:05:9c:fd:cf:12:
00:bb:f5:16:f2:2d:d3:dd:80:f6:40:1c:94:a6:c5:
e8:9f:cc:0d:be:6c:ea:e3:37:05:b4:f0:e0:01:c2:
d7:1c:82:b6:10:75:31:47:e3:15:03:4e:0a:8f:a6:
8c:54:35:73:3a:c7:ab:be:c1:26:01:19:de:6b:0f:
a2:bf:5f:0b:a1:53:df:89:43:fe:a9:21:5f:77:0a:
c8:27:05:b2:fd:a4:c5:a4:85:e0:3d:29:5b:a6:4c:
73:47:75:8a:ce:03:e7:15:e7:8f:04:0d:5c:fc:fa:
bc:41:ec:a7:20:3a:2b:94:41:c8:5b:fe:ef:32:20:
63:26:f1:cd:e5:3d:38:33:ea:d3:76:d0:4e:67:6e:
2c:3c:f4:9d:2c:31:5b:40:34:4b:bc:84:e3:33:e5:
8d:3d:6a:68:d5:12:44:a1:2a:5c:fe:d6:d9:26:a0:
33:96:36:0f:36:42:5d:ad:84:b9:43:9c:eb:98:9f:
07:b8:d4:d5:88:86:c9:98:3f:08:1b:83:a9:e3:0c:
7f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C2:FB:7E:97:04:9D:B4:3C:FD:75:C6:8A:02:B8:49:E2:FF:79:F9
X509v3 Authority Key Identifier:
keyid:AE:4A:D2:D4:B0:B7:33:0E:4A:9B:5A:FA:11:A6:19:8F:CB:65:1B:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/9c8e59-afdf-42a6-80d7-8a9667d762a5/1/rkrS1LC3Mw5Km1r6EaYZj8tlG_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ee:86:5c:da:db:a8:1c:74:53:dc:92:82:1b:75:0e:6a:6e:
77:59:94:60:81:9f:d1:12:8d:2e:8f:cc:0e:8f:df:50:8e:69:
21:12:9f:7c:84:79:de:be:1c:68:31:74:2c:c2:40:ef:c2:36:
b1:d9:c0:37:87:cc:18:da:d9:ab:c5:2c:35:23:a2:0d:6c:62:
e1:8f:b3:4e:f5:ac:cf:75:8b:1b:3c:13:b7:22:56:65:1b:b4:
ba:39:78:dd:c9:ba:0f:66:a0:14:61:79:3b:b7:d9:fd:c7:38:
b1:22:aa:8e:3f:ff:92:5c:d8:b0:75:c3:d9:84:8b:b1:0c:8a:
4c:22:30:f4:e1:cd:34:86:47:6a:54:25:7e:8c:b5:52:78:e7:
5b:32:76:32:08:aa:ff:e1:11:46:6e:47:21:24:a9:23:84:46:
d5:c8:fb:e9:72:a0:04:e9:27:8a:ce:39:cf:88:e7:98:e4:fe:
fd:ff:9c:18:d3:b5:84:cf:69:8d:aa:66:18:90:c1:0c:87:fb:
c3:a3:2f:b6:0e:69:2b:66:fe:e5:90:f3:bc:3c:35:b4:ef:dc:
f0:91:4f:d4:3e:7e:6c:06:8e:e6:91:8a:94:e5:b3:5b:e4:78:
d7:0d:60:e7:46:33:9a:3a:fe:3f:db:7e:6e:9f:bd:12:bc:fe:
b9:f2:4a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:54:56 2025 by rpki-client