
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: q4ZS60fkLxnGFb25t5sq8Yx8ReFNj9ixJVfIEWs31aI=
Subject key identifier: 6E:34:AC:DB:FE:9F:FB:3C:0A:6F:CF:49:6C:21:2D:06:AF:86:BC:63
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 0196A654172A4EF4BA857821B52C29B47735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 0E84
Signing time: Tue 06 May 2025 16:00:50 +0000
Manifest this update: Tue 06 May 2025 16:00:50 +0000
Manifest next update: Wed 07 May 2025 16:00:50 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: +LpUR9kYbd1Xf1SsUNpVWh6lYR75iEMoeEORH/h7ku8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 16:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:54:17:2a:4e:f4:ba:85:78:21:b5:2c:29:b4:77:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: May 6 16:00:50 2025 GMT
Not After : May 7 16:00:50 2025 GMT
Subject: CN=6e34acdbfe9ffb3c0a6fcf496c212d06af86bc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fc:1c:12:56:ca:93:70:7d:66:d5:e4:90:ef:
b7:5d:72:9f:82:e5:c8:db:65:ec:3a:9b:df:10:51:
6b:00:b5:5d:b5:42:43:ac:8a:a0:37:14:22:f6:5f:
69:59:b7:d6:97:19:e8:3d:c0:73:f4:5d:4c:b2:93:
73:74:71:d2:e3:45:af:1e:01:2d:6c:bd:90:75:a6:
e7:03:15:09:dc:9e:01:06:62:89:9c:b4:31:44:01:
8d:e6:2f:2d:ef:f0:c7:1e:af:a8:7c:13:11:8a:b5:
0b:4d:77:ce:0d:41:73:74:46:b9:4a:c0:7c:74:29:
ec:a6:09:ad:9b:b1:37:f8:7e:d5:b6:9b:ae:22:f0:
eb:32:8f:52:4c:84:fe:e4:6e:24:c4:58:c9:52:01:
19:d7:3e:3d:4d:6e:2d:3d:40:db:8b:2b:fe:3b:15:
36:66:69:1e:b5:09:3a:58:3b:01:05:21:f4:22:fe:
9f:30:e3:6c:b7:6e:56:4a:8f:4c:10:14:43:22:b3:
98:00:59:84:a0:c1:ae:5c:01:a2:b9:2b:45:9c:df:
24:a6:ed:6c:6f:21:c1:8e:60:a2:c1:f4:95:6c:eb:
20:a3:b2:a6:c3:a1:f8:d0:56:b2:8a:97:88:06:6d:
1a:c4:9b:16:63:27:24:7f:bd:97:a3:fe:dc:1c:41:
29:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:34:AC:DB:FE:9F:FB:3C:0A:6F:CF:49:6C:21:2D:06:AF:86:BC:63
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:bb:16:e3:38:c1:82:bd:d0:b7:43:5f:95:f1:95:a4:c1:b0:
a4:3f:86:c0:33:c3:f6:b6:25:e2:cd:bb:57:0e:91:5d:d2:2e:
30:7f:8a:95:39:ee:87:b6:a0:84:62:fc:e7:f1:41:02:90:1b:
aa:36:32:15:51:ab:f7:69:5b:c2:ab:8d:a6:9c:0d:14:a0:47:
b4:53:ed:d3:33:cb:f0:94:f2:18:b2:2a:aa:a5:1f:72:8c:99:
e4:d7:e4:56:d0:52:18:f9:af:da:11:79:82:9b:8b:3e:7c:d6:
60:19:65:97:65:1d:c5:24:bd:77:46:95:60:58:46:f9:6d:29:
ec:8a:52:7f:cb:28:ee:26:9f:69:96:83:7c:09:bc:80:08:da:
78:2c:d9:22:85:19:6e:22:25:31:03:32:ca:f9:d8:ec:0d:02:
c8:94:02:54:ee:70:29:ac:2c:b9:f2:4d:c9:70:e8:b9:94:5f:
b0:92:65:79:4f:5c:f8:c0:3a:8f:81:2b:9b:83:d4:ab:77:47:
6b:0c:ca:94:68:8c:2a:3e:f2:9a:87:ef:87:7b:36:78:19:2e:
73:4f:68:fc:45:0b:b6:47:df:fe:2f:9b:e4:f2:34:56:f2:69:
4e:ed:0f:77:77:04:e9:b9:58:35:f9:57:91:79:a7:73:b4:7d:
60:30:18:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 01:19:55 2025 by rpki-client