Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
File: kt2u3zcPNa-LXut_hubPr6zojU4.mft (raw, json)
Hash identifier: AFM3F1ZttX8UC0ZfLjdIDOcMPm8sBFvqr4syLjtiBsY=
Subject key identifier: 45:44:D8:E0:86:59:0B:A8:88:28:F0:D6:BE:9F:BD:2D:CF:F3:62:94
Authority key identifier: 92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
Certificate issuer: /CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Certificate serial: 0196AA9E868F832F32A511506D17553734CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
Manifest number: 057C
Signing time: Wed 07 May 2025 12:00:37 +0000
Manifest this update: Wed 07 May 2025 12:00:37 +0000
Manifest next update: Thu 08 May 2025 12:00:37 +0000
Files and hashes: 1: kt2u3zcPNa-LXut_hubPr6zojU4.crl (hash: I+pTcWloL7Mw9KUJCYzQHy4C2rjycmzX+npY3uodbA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:aa:9e:86:8f:83:2f:32:a5:11:50:6d:17:55:37:34:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ddaedf370f35af8b5eeb7f86e6cfaface88d4e
Validity
Not Before: May 7 12:00:37 2025 GMT
Not After : May 8 12:00:37 2025 GMT
Subject: CN=4544d8e086590ba88828f0d6be9fbd2dcff36294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:d4:ab:28:d6:91:f0:8a:35:8c:9c:c7:ec:
9d:37:96:fc:d9:69:9e:76:10:43:b7:62:a3:45:87:
2d:fd:43:40:3c:6e:e8:04:41:71:ad:04:29:d6:e9:
48:f6:f8:a8:72:44:4d:d4:45:69:10:3d:2c:b2:bd:
b1:fe:bb:b6:63:d8:7c:cb:62:eb:1d:34:0d:8b:6a:
bd:74:da:2f:a2:4b:e5:cf:a6:a1:e0:3f:8a:ba:86:
90:8a:25:66:32:37:c6:41:d9:10:57:3d:ef:5f:6e:
69:2e:49:95:59:07:5f:13:00:56:0a:9a:d1:dc:a2:
79:71:fe:69:3b:bc:e8:0a:d7:d6:5b:2d:6b:65:4c:
47:24:e3:8e:fb:37:1a:0b:11:e1:a1:1b:11:c3:b3:
d4:67:d4:34:ce:18:ce:a1:0a:68:cc:02:03:99:29:
85:eb:57:6a:ca:8b:b6:95:20:53:71:25:b7:84:ee:
84:c1:d1:25:f7:59:e3:71:d7:0d:dd:64:17:40:36:
7e:f2:1b:c6:32:7c:3f:5e:c1:97:7b:4f:20:53:a8:
db:02:38:4f:be:10:98:d5:eb:6f:d4:d8:ad:88:b2:
0d:a1:08:f3:84:f3:77:10:d6:0e:6b:2b:6a:f5:e3:
3e:ce:44:c3:59:a2:c7:28:00:1e:71:33:69:3c:1a:
2d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:44:D8:E0:86:59:0B:A8:88:28:F0:D6:BE:9F:BD:2D:CF:F3:62:94
X509v3 Authority Key Identifier:
keyid:92:DD:AE:DF:37:0F:35:AF:8B:5E:EB:7F:86:E6:CF:AF:AC:E8:8D:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt2u3zcPNa-LXut_hubPr6zojU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/84c3d5-8ab2-44ac-942b-c4b9c539407b/1/kt2u3zcPNa-LXut_hubPr6zojU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:59:64:dd:4f:b8:9c:69:45:fb:0b:0e:9d:10:d0:e7:04:75:
1a:af:8a:07:87:29:36:de:3a:78:37:66:d3:a6:df:70:78:81:
06:ea:ff:5a:29:de:7b:9f:b1:ac:db:46:c5:70:4e:c1:61:4c:
ab:97:f8:8f:dc:20:3f:d9:57:12:94:28:b0:69:15:43:01:2d:
0c:34:1b:c5:d5:69:de:a4:6c:04:b2:c2:23:a3:51:9f:17:d8:
ed:cf:75:45:29:54:1f:63:6d:3e:35:e8:79:85:3a:68:43:11:
c9:cc:f6:5a:4c:94:88:ef:81:0b:09:a1:bf:07:23:84:72:3c:
83:bd:09:e5:a4:ba:b3:27:fc:a9:4d:56:c7:e5:7a:82:99:64:
b3:77:c9:36:cb:64:3f:f4:b0:ef:99:f2:0f:eb:43:62:13:10:
18:b9:4a:4f:22:c9:f9:19:c0:5c:02:73:82:1c:2e:17:54:b3:
f4:57:88:0f:a9:e8:9f:6a:3f:ec:2c:e8:cf:c5:b7:d0:57:ff:
fd:65:f1:35:58:51:f3:89:b1:a5:d8:59:de:3b:15:24:65:4d:
1f:68:f5:ce:c8:1d:a2:64:56:10:bf:9f:04:48:d1:d3:55:3b:
e9:05:e8:17:82:f1:9a:eb:06:e0:68:85:08:d4:19:f7:c1:c4:
7c:02:2a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:33:18 2025 by rpki-client