Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
File: KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft (raw, json)
Hash identifier: VU3OQ+5uh/VrXSb70T0DzWXnrz+PM+9pr/x0Rz98rB8=
Subject key identifier: 1A:8B:FD:64:CC:B3:03:24:B2:F9:BE:4F:AD:ED:F0:BC:1D:B9:C2:43
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 0196C38299E29B5C51D4C47C5A5108374537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
Manifest number: 151D
Signing time: Mon 12 May 2025 08:00:38 +0000
Manifest this update: Mon 12 May 2025 08:00:38 +0000
Manifest next update: Tue 13 May 2025 08:00:38 +0000
Files and hashes: 1: KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl (hash: orZ1pwLuADHYio397oImIADpSxylSvsQIieRCk7rris=)
2: piJhKM_we331Drsk15cixPVEH_I.roa (hash: NHNPopSWAyph5Bx3EeKPWL7ZkR7orplnRo1YXxckaSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:82:99:e2:9b:5c:51:d4:c4:7c:5a:51:08:37:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: May 12 08:00:38 2025 GMT
Not After : May 13 08:00:38 2025 GMT
Subject: CN=1a8bfd64ccb30324b2f9be4fadedf0bc1db9c243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:09:0f:1a:a6:30:5c:1b:34:c7:4c:e0:06:
7b:56:c9:ac:13:76:3c:7e:c2:74:ce:98:f3:ef:8c:
99:fe:57:0a:46:82:6b:89:c3:a2:8c:d0:bc:44:fe:
33:55:13:b0:77:46:c7:51:1f:32:d1:4f:72:23:59:
8b:6d:ee:93:e5:a5:a3:7e:a3:07:e8:81:35:ea:5a:
0c:e0:46:73:41:0a:37:76:04:36:c2:b7:40:da:08:
09:9d:73:0b:6f:a3:38:83:3b:f0:46:ca:05:14:4e:
ff:5d:78:71:a2:77:8e:72:65:2f:83:cc:74:bc:ab:
40:b6:fe:f0:a7:6a:ef:79:4b:c8:d5:15:2c:f0:72:
e5:7f:1a:ac:02:a9:f6:b9:dc:3d:89:d8:c9:35:59:
13:a8:e4:10:2d:40:38:5e:ae:40:80:4f:cf:a0:b2:
10:0a:06:82:b2:e0:00:50:7c:a3:67:2e:72:2c:cb:
7f:df:43:e8:82:de:bf:51:e0:75:0a:9f:05:9b:cb:
85:89:d2:51:4e:86:99:b2:b5:80:01:6e:06:d7:45:
ca:35:de:d9:47:cd:3f:8a:28:b7:de:e0:59:8c:3d:
c1:7a:1b:22:4b:90:cb:1f:e8:78:62:72:a5:65:c6:
7b:a2:b5:0d:3b:d8:51:ff:bf:1e:b4:ee:74:dc:c6:
ea:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:8B:FD:64:CC:B3:03:24:B2:F9:BE:4F:AD:ED:F0:BC:1D:B9:C2:43
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:90:df:93:9e:fb:5b:fc:00:2a:89:fc:40:f8:b2:a3:0e:e1:
a5:8b:f2:b3:e6:4f:04:c8:42:ca:1e:09:7c:75:61:16:4f:8d:
c2:77:5f:a5:55:7e:d1:e3:36:6c:75:9c:8e:fc:dd:93:ca:fb:
1b:8b:05:db:1b:81:06:23:fa:39:86:ba:30:75:cb:b0:e3:ab:
c2:af:1b:73:7e:97:95:38:92:29:57:ca:da:d7:bd:90:22:79:
a4:3c:ae:f9:50:e1:c4:95:59:16:f2:0f:de:75:35:2e:1c:c8:
69:4d:cf:04:2e:21:3c:f5:59:a0:bb:15:f3:b1:6c:84:51:42:
9c:a4:01:e0:c4:61:12:56:18:2d:0a:63:2a:58:85:d8:31:a7:
0a:ba:11:c8:b2:be:2d:9c:e6:d0:79:58:c6:a9:b4:f9:2a:ff:
bf:5f:38:84:7c:ad:80:14:16:e1:b9:9a:9a:da:bc:b3:7e:f1:
98:d8:58:0d:85:aa:bd:8e:46:5c:ee:b6:4d:23:42:3e:40:7c:
c0:58:f5:74:5b:e2:9e:a5:1a:f8:4a:a0:26:ce:fb:70:a7:05:
57:0d:0f:8a:87:d8:aa:e9:58:e7:20:42:f7:ff:d3:8d:71:d8:
3d:28:69:6a:94:ce:d3:c0:d9:0b:ca:0e:c9:f2:de:c8:c7:11:
f6:a2:74:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:07:00 2025 by rpki-client