Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
File: kKBl7vQNwBahvn8o1uZsp6h-f-U.mft (raw, json)
Hash identifier: fNuFRw47Dl1G0OaX376XPXc9zJ36gVcQ4G1OT0fvtbM=
Subject key identifier: D3:ED:C0:F0:7D:65:9D:E2:58:74:58:4B:D7:F4:6F:E2:36:44:3B:63
Authority key identifier: 90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
Certificate issuer: /CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Certificate serial: 0196C984C366F5727851FB9535E38F45823F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
Manifest number: 153A
Signing time: Tue 13 May 2025 12:00:43 +0000
Manifest this update: Tue 13 May 2025 12:00:43 +0000
Manifest next update: Wed 14 May 2025 12:00:43 +0000
Files and hashes: 1: kKBl7vQNwBahvn8o1uZsp6h-f-U.crl (hash: EiWm9PW1eEdS5C0p79cZc7st5uhv9IWXRBIu5QWC+VY=)
2: u-dAmjX4oqcf2iXVI7lxfelsBMA.roa (hash: XLlmaFeeXeZeIUJOi3DmWDwWe9ndlrrcSMKKooeEWD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:84:c3:66:f5:72:78:51:fb:95:35:e3:8f:45:82:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a065eef40dc016a1be7f28d6e66ca7a87e7fe5
Validity
Not Before: May 13 12:00:43 2025 GMT
Not After : May 14 12:00:43 2025 GMT
Subject: CN=d3edc0f07d659de25874584bd7f46fe236443b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:bf:39:0a:88:91:1a:37:98:cd:ed:8b:c7:d4:
be:0b:08:ce:d1:fe:ec:ee:c5:df:6a:c0:99:9d:2a:
8e:1c:c4:ee:b7:af:5d:ac:8d:cd:ac:c4:f0:33:cc:
13:b1:98:44:e3:22:ed:c1:c6:f6:c0:2d:bd:ee:ea:
81:b5:e6:89:7d:6d:6f:52:4b:90:93:80:b7:1b:0a:
af:89:d2:8f:0e:39:b8:61:00:a3:e3:f5:d7:d5:e9:
41:85:de:14:88:e9:a1:a5:2e:24:f9:1c:cc:0f:12:
b7:a9:7f:af:1f:cc:1d:f5:12:a4:02:8f:35:d1:c2:
5a:f0:f0:88:2c:3c:12:ff:b0:d1:29:c2:e2:f2:98:
2a:d9:13:dc:b3:cb:84:e8:b9:29:89:91:c9:e8:9c:
fa:e7:23:bd:b0:0d:55:ee:6a:5e:3e:bc:cd:5a:ed:
00:84:90:0a:a4:d6:09:c7:a4:68:a5:cf:52:fd:5d:
60:7e:fe:59:61:79:0e:ee:34:d6:11:be:55:1d:47:
5e:fe:69:5c:42:2b:a7:8f:3f:7e:cd:9e:8c:50:a4:
30:09:1c:7f:97:64:0a:2c:bf:9d:94:b3:db:e5:95:
aa:fd:d9:4b:cd:cb:93:94:c9:05:2c:74:91:01:c4:
58:7c:8b:0d:e6:1e:ae:00:c4:ae:47:60:7f:32:63:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:ED:C0:F0:7D:65:9D:E2:58:74:58:4B:D7:F4:6F:E2:36:44:3B:63
X509v3 Authority Key Identifier:
keyid:90:A0:65:EE:F4:0D:C0:16:A1:BE:7F:28:D6:E6:6C:A7:A8:7E:7F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKBl7vQNwBahvn8o1uZsp6h-f-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/768aa2-0b44-4cf4-b984-924cdf276d8d/1/kKBl7vQNwBahvn8o1uZsp6h-f-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a7:28:69:45:f6:4c:3c:43:81:fb:9d:84:c6:56:67:a5:db:
f9:f4:75:bc:d3:b6:7b:fc:a4:55:0d:f2:5a:07:78:e7:e8:58:
19:b0:b3:02:5a:72:4c:46:ba:ec:b8:36:d3:7f:07:03:a7:c8:
b8:dd:4f:ff:d4:43:5d:9e:a8:03:59:6f:be:83:89:22:a9:91:
65:84:a2:9a:24:f8:8d:54:df:6b:d5:c1:ac:57:84:26:b0:19:
a8:f3:2b:08:ff:2b:b9:98:33:4a:46:94:98:e4:a8:c7:ee:f8:
82:b5:2e:2c:95:04:5e:ea:78:8f:59:6b:fe:58:f9:03:e2:b6:
9b:c7:77:1d:ea:69:5c:49:92:4c:f8:07:48:26:f9:2f:b3:3b:
af:d7:1c:df:c7:96:61:7c:fa:a6:da:be:4c:aa:b8:56:b1:5a:
f8:6f:31:68:fe:d8:91:ca:14:86:79:cd:cf:77:7f:46:a6:67:
b1:fe:fe:48:7a:c1:8f:7b:19:51:b0:58:26:dc:71:98:b7:6f:
9c:2e:59:51:1e:1e:73:bd:2e:a9:0f:23:6e:24:a4:67:07:9a:
d0:36:16:ec:77:14:71:c6:f2:57:d2:2f:7d:06:c2:13:f1:18:
67:f6:a8:26:97:a9:aa:52:9b:27:0a:b3:4f:c9:ff:58:41:dc:
0a:13:a3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 20:45:02 2025 by rpki-client