Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
File: K5vsAhH2Hq8RnOstQMWg_jqowqA.mft (raw, json)
Hash identifier: kaFTjkR02snQVd3DUgSCYD1kAAt/B7q8hHSX1ZtvICo=
Subject key identifier: 00:6C:54:E3:8C:C9:71:39:78:14:93:40:3C:DC:B2:69:93:18:F9:37
Authority key identifier: 2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
Certificate issuer: /CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Certificate serial: 0196C5031B18ACE7A6C1F38484D2A8B55CF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
Manifest number: 0B9D
Signing time: Mon 12 May 2025 15:00:37 +0000
Manifest this update: Mon 12 May 2025 15:00:37 +0000
Manifest next update: Tue 13 May 2025 15:00:37 +0000
Files and hashes: 1: K5vsAhH2Hq8RnOstQMWg_jqowqA.crl (hash: eqgqTnnupAmgCWSnPftXjMjThRgMjkl/EnPqw9iOP1s=)
2: KkH_R6IQv1u30qAL1KWqZsXbAEI.roa (hash: 04O63RIXPPpD9GmqGsDm2l0jn4ZXl6cAUxlim79VpG4=)
3: _JzEQSr5OZqDWs8nTia735Fx54o.roa (hash: n/vl1VjbI5NvAsfCuLgcPjpEvc0iKrJUQhClyjm4L3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:03:1b:18:ac:e7:a6:c1:f3:84:84:d2:a8:b5:5c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b9bec0211f61eaf119ceb2d40c5a0fe3aa8c2a0
Validity
Not Before: May 12 15:00:37 2025 GMT
Not After : May 13 15:00:37 2025 GMT
Subject: CN=006c54e38cc97139781493403cdcb2699318f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:a4:e5:a5:4b:93:ec:30:22:83:ef:b1:a6:
8a:49:a6:c4:49:ec:44:81:57:55:93:f9:89:54:37:
19:0e:07:e4:28:61:04:3a:44:76:b6:e8:e8:8b:f5:
da:84:ef:de:c5:73:89:b8:f1:d2:d9:89:93:aa:b5:
f6:6f:f1:63:f7:9b:f9:e7:ab:0b:7a:a0:47:b6:7f:
8e:37:81:d2:86:33:d6:2f:ac:8a:fa:f5:83:9b:03:
e6:87:27:fd:81:5c:69:73:f7:6c:d6:9d:be:69:03:
71:ad:49:8b:84:41:bd:ef:77:3b:4a:cd:52:b8:9c:
a5:0f:c2:ce:91:38:13:89:51:d3:fb:1d:0c:75:11:
d3:1a:e4:55:d1:5d:2f:ab:5e:11:ce:61:71:47:0b:
21:28:cd:d7:f2:09:dd:3c:da:44:35:72:10:82:55:
6b:82:0a:2a:6a:19:ed:55:23:f6:9c:ad:98:a5:96:
19:4b:8f:6b:84:ad:4d:22:2f:52:19:42:01:26:ea:
6b:d8:86:cb:19:a5:e5:38:7f:85:6d:33:11:32:bb:
1a:83:1c:ec:54:95:38:d9:26:ff:3c:b8:f3:68:81:
83:39:96:14:58:3f:4c:f3:83:34:b3:b4:a4:ec:46:
ac:75:b9:22:6c:bf:72:c2:0b:40:6c:ea:8d:d4:33:
f6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:6C:54:E3:8C:C9:71:39:78:14:93:40:3C:DC:B2:69:93:18:F9:37
X509v3 Authority Key Identifier:
keyid:2B:9B:EC:02:11:F6:1E:AF:11:9C:EB:2D:40:C5:A0:FE:3A:A8:C2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5vsAhH2Hq8RnOstQMWg_jqowqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/26e4d1-12c8-4144-a37d-833295e04e37/1/K5vsAhH2Hq8RnOstQMWg_jqowqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:dc:88:a4:3a:d0:5e:09:8e:bc:70:88:ba:5b:09:8e:f3:05:
2b:e6:7f:84:cd:79:72:d7:13:f8:7c:52:70:24:8f:70:5c:2b:
6c:41:c2:67:07:fb:a0:e3:8a:62:09:da:35:84:29:f9:88:f7:
21:7a:5b:60:24:31:76:e2:e2:4e:f7:fd:2e:fc:49:56:56:61:
92:0c:c5:57:22:7d:64:fb:af:56:5b:4d:ad:e6:12:40:a7:e4:
59:2a:9e:47:4e:10:58:86:cb:34:ca:35:5b:fd:e7:95:0b:8b:
b9:9f:a9:d9:f4:77:d1:7c:32:1b:0a:0c:fd:fc:7c:50:6b:7f:
c5:f5:5f:e5:12:29:1f:8e:cf:13:98:62:0d:bc:c7:ea:b2:34:
32:4e:16:66:67:f5:69:7a:c1:f1:c7:b9:0c:3e:20:94:ed:2d:
e6:ce:96:4b:46:5a:be:8a:54:28:da:29:cc:ef:c8:0c:4e:49:
69:39:69:05:32:96:91:0c:70:98:a7:f1:3c:56:38:cb:07:5d:
32:92:5f:0a:6e:a0:c1:e3:23:a5:20:87:26:e3:73:78:f4:91:
c7:f6:94:9a:4a:40:93:e3:53:0f:16:6c:7f:26:d0:ae:2e:a9:
3b:40:0f:4a:cf:6d:cf:c6:e8:ed:df:f2:f9:66:8d:d3:61:07:
e7:5e:79:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:21:00 2025 by rpki-client