Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
File: kpt6l07Tg6w46Pwkh5IjLuracio.mft (raw, json)
Hash identifier: +whZcRJHPR3UDJuxS0jmBZxLiuwRDMLd+9Yu50Kvt08=
Subject key identifier: 67:C2:7E:C5:56:A7:FD:F2:53:3D:2C:7C:AD:34:B2:8D:27:E6:5C:12
Authority key identifier: 92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
Certificate issuer: /CN=929b7a974ed383ac38e8fc248792232eeada722a
Certificate serial: 0196C3F0C29703ADEDB21872610FE8A48E62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
Manifest number: 1532
Signing time: Mon 12 May 2025 10:00:57 +0000
Manifest this update: Mon 12 May 2025 10:00:57 +0000
Manifest next update: Tue 13 May 2025 10:00:57 +0000
Files and hashes: 1: kpt6l07Tg6w46Pwkh5IjLuracio.crl (hash: bmKk6qq8en40AExDS0wPUQnkImdcl+zf/VbvVx1y5F0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:c2:97:03:ad:ed:b2:18:72:61:0f:e8:a4:8e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=929b7a974ed383ac38e8fc248792232eeada722a
Validity
Not Before: May 12 10:00:57 2025 GMT
Not After : May 13 10:00:57 2025 GMT
Subject: CN=67c27ec556a7fdf2533d2c7cad34b28d27e65c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:04:dd:f9:08:ba:52:76:d4:66:79:af:16:
7f:e9:cd:4a:44:69:15:8b:56:f0:57:69:66:2b:bb:
40:83:32:78:89:39:c5:1c:f7:99:ff:cc:d3:be:7c:
31:21:d0:e6:6b:27:38:3a:a6:39:d9:bb:5c:8f:60:
77:22:4a:af:de:42:d9:18:ab:45:cc:61:10:66:1a:
c0:2d:7d:88:64:d9:0b:94:32:08:f9:fe:72:39:cd:
cb:4e:90:98:52:5c:8f:eb:d2:4e:53:fb:9e:d4:fa:
f0:b2:a6:cb:78:f3:a6:82:c9:21:7a:32:20:ac:da:
45:fd:8c:d1:16:43:f8:59:07:ac:57:34:4b:9f:66:
f0:16:ca:18:0f:5a:85:04:fa:d4:6b:55:a6:c9:62:
47:36:85:54:64:95:67:e6:2d:75:c7:39:41:c4:cb:
47:6a:3f:2c:da:98:3a:11:80:32:8f:34:e5:7d:85:
06:b4:57:a1:5b:1c:ef:07:9a:fd:79:82:7e:9e:a6:
77:19:a8:e2:ea:23:9c:9e:15:5a:a2:de:c0:ad:f4:
f2:02:a9:c7:1e:6e:1c:9e:18:1a:6f:30:eb:04:a1:
50:97:1b:82:a8:ae:5c:3f:e7:73:69:0f:97:ed:ae:
f9:10:b0:e1:e5:4a:34:d9:34:bc:f8:9b:5b:0d:b1:
0c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:C2:7E:C5:56:A7:FD:F2:53:3D:2C:7C:AD:34:B2:8D:27:E6:5C:12
X509v3 Authority Key Identifier:
keyid:92:9B:7A:97:4E:D3:83:AC:38:E8:FC:24:87:92:23:2E:EA:DA:72:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpt6l07Tg6w46Pwkh5IjLuracio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/7875de-9ae2-4760-9f50-d6ac77b46669/1/kpt6l07Tg6w46Pwkh5IjLuracio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:13:37:ea:5f:22:31:2f:ea:d7:76:28:ef:c2:d2:cc:b3:b6:
7d:99:61:d9:da:50:8d:44:fc:2a:fa:a7:7c:1a:dc:45:13:3f:
36:5e:12:83:b4:a2:a5:5d:f0:38:17:cc:63:b9:51:15:ed:0f:
57:ad:3e:cf:56:34:ef:2a:0e:38:5a:f4:26:a0:16:04:2f:96:
8f:d7:3b:e9:04:34:cf:a0:ee:7d:46:8c:b0:f6:8a:6c:e2:4b:
05:23:fe:b6:da:bc:28:03:1e:4c:18:79:f5:c0:81:04:b8:b4:
6a:54:98:ae:43:28:0b:f5:87:9d:f1:6e:5b:f0:7b:dd:74:47:
20:71:44:f4:7f:1d:6f:66:53:9a:17:ca:6b:7e:8a:1d:b5:b7:
16:30:38:d2:4d:f5:5e:aa:fc:5b:27:0b:39:58:12:7e:d9:7c:
3a:72:d4:3d:21:21:f1:c1:4f:82:be:39:ae:a4:3e:94:1f:2c:
8c:be:ff:8a:c9:da:f1:18:74:49:e7:47:c3:d0:5f:b6:36:16:
bd:fa:78:0c:64:f1:df:ff:7d:77:75:dd:bd:16:16:79:e0:3c:
9c:07:b0:c3:d3:79:12:2c:df:9b:cf:15:b7:cd:f3:17:21:ee:
c1:a5:7b:b6:21:b1:4a:41:7a:1e:65:0e:a3:e4:56:51:bf:c2:
46:64:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 14:54:34 2025 by rpki-client