Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: 8/pl4FGfRtXUl2UmKYqbzzzvJys9QPb+C/zI02tIhGo=
Subject key identifier: 72:E2:FA:FB:73:08:A0:42:D5:A9:27:66:C2:FE:F4:A1:E6:2D:2D:AE
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 0196C2DDF1E666E65DA874DB9B2D4B841F2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0C99
Signing time: Mon 12 May 2025 05:00:47 +0000
Manifest this update: Mon 12 May 2025 05:00:47 +0000
Manifest next update: Tue 13 May 2025 05:00:47 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: 4cNBijHy70T9JkUOofPUTW9cCvrnnFIFFBgXdQcdSqQ=)
2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:f1:e6:66:e6:5d:a8:74:db:9b:2d:4b:84:1f:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: May 12 05:00:47 2025 GMT
Not After : May 13 05:00:47 2025 GMT
Subject: CN=72e2fafb7308a042d5a92766c2fef4a1e62d2dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c1:6f:ca:70:7c:05:39:f0:05:d2:ee:91:d6:
8e:32:2b:80:37:fc:a1:f9:0b:84:e8:fc:c7:41:e5:
c7:2e:a1:48:68:f2:82:0b:c6:1c:07:71:3a:37:27:
e6:cc:e3:37:f3:34:ec:75:fb:a9:12:8c:07:e4:7a:
0c:3f:87:2d:ee:46:14:a0:ae:f4:97:f9:cf:69:7c:
20:ce:56:c8:9d:8b:cb:05:c0:87:18:31:ea:1c:70:
c4:94:ef:22:b5:f8:83:6b:50:19:bf:4b:17:30:6e:
1b:59:2b:b0:1a:24:8a:70:28:2b:10:73:9c:ec:a6:
c1:6b:99:b4:bb:d1:50:9b:55:8b:39:4a:93:5a:17:
ae:55:57:ec:ff:8b:12:fd:e7:ef:76:42:62:a1:83:
d7:ad:64:5f:c5:d0:a6:ab:dd:2c:61:1b:03:22:89:
a5:86:5f:de:bf:79:5a:c0:bd:b5:cc:c5:92:60:25:
4a:35:03:f0:33:03:07:ac:90:c2:a4:4e:d1:6f:63:
f9:68:ea:0a:6c:10:1c:04:07:70:3d:b1:1e:97:76:
89:1c:f7:e7:2f:64:04:89:08:4d:f9:26:bc:1a:f4:
09:17:6d:0a:36:63:41:93:ae:52:d5:e1:c3:68:8f:
fe:a0:9d:75:3c:04:61:5d:1a:b1:00:77:2e:25:87:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E2:FA:FB:73:08:A0:42:D5:A9:27:66:C2:FE:F4:A1:E6:2D:2D:AE
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b0:31:30:6e:85:7b:4a:29:98:82:d1:f9:d6:bf:48:ba:81:
ec:90:1c:0b:9f:e0:7e:a0:07:22:33:6a:a3:4c:11:da:4e:b5:
07:fa:b1:da:93:9c:73:e3:50:67:9e:fb:af:d0:c0:07:d1:29:
f1:d8:2a:f8:00:b4:02:3d:e9:10:65:6c:fa:b5:13:4b:cd:c1:
dc:a0:e6:a2:64:6c:5f:bb:91:c0:74:28:2d:0b:a1:33:21:d5:
0f:40:d1:d1:bb:de:9b:4f:49:5c:90:59:73:5c:8c:5b:1c:24:
bc:a3:0e:be:0f:85:1b:e4:b1:c6:1f:db:9e:a2:c4:c3:3a:05:
42:63:f2:6c:5a:ef:67:31:00:61:02:b2:59:01:f9:72:0a:c7:
1f:46:c9:4a:2a:09:6d:19:54:4f:bc:6a:7f:c3:f4:1a:b8:52:
90:89:96:58:9c:09:9a:8f:45:1d:ca:14:3a:48:0a:41:50:88:
14:a8:63:ea:82:15:eb:60:b0:54:69:76:aa:fd:b8:6e:45:ba:
52:4e:c7:ca:30:c6:6b:9f:87:c1:23:39:b6:86:20:c1:7b:44:
db:3c:26:e3:bd:94:4b:1e:1f:77:16:1d:09:60:ff:37:d4:47:
f7:28:1e:35:e5:d7:31:11:b5:3d:98:b4:dd:ec:79:90:dc:c4:
1f:53:42:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:25:20 2025 by rpki-client