Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
File: KtWZlPKveVmc-z_y4-mOUY-RT7o.mft (raw, json)
Hash identifier: IwscY0J1wyknTOfWnX8k4zI5duoBkO40o5s/CpxkBok=
Subject key identifier: C1:BB:7B:54:6E:33:49:BC:2C:4E:40:14:7E:44:E6:31:06:C0:55:01
Authority key identifier: 2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
Certificate issuer: /CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Certificate serial: 0196C08136C7C801F6BD31363D03753173E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
Manifest number: 0633
Signing time: Sun 11 May 2025 18:00:15 +0000
Manifest this update: Sun 11 May 2025 18:00:15 +0000
Manifest next update: Mon 12 May 2025 18:00:15 +0000
Files and hashes: 1: KtWZlPKveVmc-z_y4-mOUY-RT7o.crl (hash: jnXtYhKY8LALcKi6gP19BChHhl9klar2zDxw2IgFWj4=)
2: cp4lFEUau2mk3J8khN5tWSq6-qA.roa (hash: D4rIJ31bhlRPk+jgypW/dYYRdpcgCFWhZ+etBWhqECE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:36:c7:c8:01:f6:bd:31:36:3d:03:75:31:73:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad59994f2af79599cfb3ff2e3e98e518f914fba
Validity
Not Before: May 11 18:00:15 2025 GMT
Not After : May 12 18:00:15 2025 GMT
Subject: CN=c1bb7b546e3349bc2c4e40147e44e63106c05501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:73:c1:15:27:52:81:aa:8b:c2:67:67:06:8b:
aa:1b:d8:22:22:7c:30:cc:ce:b3:67:c1:0c:e0:b0:
b8:d0:ba:cf:8e:c4:29:4e:01:e6:81:0f:45:41:bf:
ab:ac:60:97:64:2c:1e:cd:c7:0b:29:63:74:5a:34:
19:09:07:fc:f5:3a:1d:4d:1d:b6:4d:5b:b3:c6:8c:
16:ec:0f:48:ef:a6:46:b7:56:e4:10:5b:b5:dc:5f:
b1:86:37:87:a4:d2:51:b8:e0:ee:91:a6:c8:a7:b4:
d6:57:1a:bc:a0:15:93:bb:ba:1f:fe:e9:4f:2f:d5:
e7:97:62:f8:e5:15:4a:0d:d7:82:67:bd:cd:a4:d8:
19:d5:88:92:63:0b:78:f7:d8:52:ea:b1:0a:18:1b:
32:4b:9a:94:ca:87:e6:0c:aa:de:d2:e7:cc:f9:ba:
06:e9:f9:3d:3f:1c:a8:da:69:f5:56:52:09:84:43:
50:ec:d7:3d:9a:56:98:3d:c6:1a:c4:79:ce:db:27:
7c:5b:91:8f:51:b4:cd:01:b8:a2:f0:73:09:cb:c1:
cf:ea:a0:18:70:f1:75:bc:8c:4a:7f:e8:61:4f:11:
f6:4d:39:8c:5b:42:74:b3:70:40:14:34:e0:59:ba:
69:42:21:a8:81:74:d1:76:02:4c:54:6b:91:bd:b9:
ef:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:BB:7B:54:6E:33:49:BC:2C:4E:40:14:7E:44:E6:31:06:C0:55:01
X509v3 Authority Key Identifier:
keyid:2A:D5:99:94:F2:AF:79:59:9C:FB:3F:F2:E3:E9:8E:51:8F:91:4F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtWZlPKveVmc-z_y4-mOUY-RT7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2bcf31-6277-4e87-a007-bbe2c4d88c2f/1/KtWZlPKveVmc-z_y4-mOUY-RT7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:4c:d8:96:ed:a1:5a:3f:47:4c:9f:7f:a5:03:35:4c:16:42:
cd:7b:bd:27:4a:ee:bd:04:1e:86:cd:55:58:b1:30:25:f8:f3:
b8:9a:79:95:60:c0:07:ab:10:01:72:2b:15:02:8c:86:13:8d:
a6:bf:ba:c0:18:99:6d:c0:0e:66:8b:03:0d:72:c2:46:57:9d:
4a:97:62:ab:5d:b9:f2:d4:1e:f4:e1:35:90:8f:cd:d1:30:35:
1d:fb:39:56:5d:ae:a9:12:e8:c0:c2:49:6d:eb:84:d7:eb:b8:
f7:18:89:73:e4:86:56:20:85:af:85:31:47:87:37:a9:5d:34:
61:15:bf:94:fe:27:1d:80:0d:c4:f5:c6:3a:d5:17:90:62:91:
2d:3c:e4:e9:88:8f:0b:8a:28:8a:6d:c8:d0:c3:b1:16:09:55:
a2:6e:2a:86:54:9b:fb:38:1e:43:01:61:b5:aa:cb:47:75:b9:
f7:e3:ac:1d:40:04:7f:47:ed:5d:92:93:dd:ff:88:e1:76:7a:
14:88:03:dc:10:d9:f9:d2:fd:20:79:37:f1:5f:b9:3a:70:10:
c4:c1:e5:25:96:b8:7a:40:3f:bd:d6:d2:57:bf:8f:f2:d5:93:
87:41:59:eb:b8:19:71:83:46:b2:45:32:a6:90:74:d4:8c:63:
6d:16:1f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 22:18:30 2025 by rpki-client