Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: rnRrdARijo1tbFfS53NEAAfZIEz0QzxJ2tYYNXOYjsw=
Subject key identifier: 7C:FE:4C:0B:4E:DD:9F:22:18:75:42:4E:1C:AF:CA:D4:B6:46:77:8F
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 0196C45E652FBE624308458ECA3DB3112D73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 0F1E
Signing time: Mon 12 May 2025 12:00:42 +0000
Manifest this update: Mon 12 May 2025 12:00:42 +0000
Manifest next update: Tue 13 May 2025 12:00:42 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: eBLVMvV5lH04yKz3nQ5DhmzSEJLhZzwA+XPilFM6UHE=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:65:2f:be:62:43:08:45:8e:ca:3d:b3:11:2d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: May 12 12:00:42 2025 GMT
Not After : May 13 12:00:42 2025 GMT
Subject: CN=7cfe4c0b4edd9f221875424e1cafcad4b646778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:e7:45:05:07:f9:e8:ee:10:c2:25:38:31:
2f:a4:74:3b:3a:53:65:90:d1:76:c8:d5:b8:31:34:
67:39:2d:e4:ed:2f:04:b4:30:32:08:7f:79:f0:91:
7a:95:ce:5d:a9:70:53:0d:5e:08:74:cb:de:c9:3b:
04:ec:a4:fb:d4:91:2d:13:71:d3:48:cb:c8:02:0a:
ae:77:67:7e:84:fc:31:a8:df:fe:ce:94:59:e6:ec:
21:ed:a4:17:5e:ae:32:74:86:e9:d8:b7:4f:e1:ba:
05:da:2e:58:a8:85:49:eb:b5:ae:f6:45:26:2a:fe:
26:a7:1f:8a:80:28:37:d2:b9:c9:c2:25:44:e5:89:
ab:19:66:44:78:6d:fc:4c:08:da:db:43:5a:08:d3:
a6:6b:6e:4a:de:96:e8:28:ea:f6:5b:f4:ee:7f:90:
5c:b5:e4:cf:0b:b9:2a:db:5f:6a:ab:f1:fa:8d:21:
86:26:26:10:c6:ea:64:25:1f:ca:7c:f9:a8:bf:a8:
9f:b0:ba:54:e1:5c:16:5d:b1:e9:99:76:72:01:40:
08:7a:9c:3a:23:05:ac:16:03:90:e0:41:d7:1f:f2:
31:53:66:59:fa:3e:33:9e:60:ad:38:1d:05:f4:bd:
36:53:69:cd:68:50:99:bf:24:d3:34:2e:8b:07:9d:
60:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:4C:0B:4E:DD:9F:22:18:75:42:4E:1C:AF:CA:D4:B6:46:77:8F
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c1:a6:8d:39:fb:0a:7b:c4:b8:01:3d:b4:cd:54:8a:92:9f:
6c:90:42:cb:95:4d:19:09:cc:dc:42:94:a5:3d:f3:40:86:32:
b6:8f:97:40:68:39:e9:a2:89:6e:bd:de:86:f8:ac:07:15:ff:
88:34:d3:ee:dc:db:75:b3:8a:e7:e9:bb:b0:a1:b6:f3:b2:7f:
c7:c9:ea:9a:21:2c:84:c9:31:ff:15:2e:b3:d4:8a:7a:d4:f8:
45:d5:c6:cc:c9:c9:dd:7e:44:50:ab:93:05:9d:cc:68:7f:23:
e3:14:bf:92:54:01:18:36:7e:c9:01:0c:40:d6:5d:98:ed:f6:
ba:f1:dd:c0:cf:4b:16:67:27:55:0b:f0:83:51:9d:30:81:bf:
90:ba:26:67:d9:c7:f7:5f:d0:85:41:40:26:d4:bd:e9:b9:fc:
8f:2d:85:8f:84:a3:14:b7:e0:e4:c1:e3:c9:82:c4:34:72:d3:
30:fc:a5:ce:b1:86:66:f5:14:77:d6:2a:0f:4e:83:d0:0c:3d:
9c:34:90:03:6d:d7:22:6d:4a:13:f2:63:ca:18:7d:31:c9:ad:
30:60:79:15:64:c8:7a:6a:9a:83:01:f9:ae:93:d5:4f:a0:c9:
6c:e8:82:00:53:f5:97:da:c8:bc:40:1c:b6:e9:37:3d:57:c1:
e7:6b:49:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 18:42:14 2025 by rpki-client