Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: YPG/subio7PKuGM1uX5iw8RkLM+VCvw90PhjBThiMRI=
Subject key identifier: DC:DC:BA:1A:C2:A3:2C:3C:9F:19:9E:40:6A:85:33:AC:19:DF:A6:32
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 0196BC6DB1D958012DD5A0CC9C169D8BDABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 1481
Signing time: Sat 10 May 2025 23:00:27 +0000
Manifest this update: Sat 10 May 2025 23:00:27 +0000
Manifest next update: Sun 11 May 2025 23:00:27 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: i3ofRsSwPs6e6NEkz1hb5URi8lxxTPNzsbl759Z/VxI=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:b1:d9:58:01:2d:d5:a0:cc:9c:16:9d:8b:da:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: May 10 23:00:27 2025 GMT
Not After : May 11 23:00:27 2025 GMT
Subject: CN=dcdcba1ac2a32c3c9f199e406a8533ac19dfa632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:9c:1b:d4:67:dc:be:04:27:74:db:aa:98:
2e:5a:6e:58:b9:14:fd:22:e4:88:01:b8:86:b7:eb:
b7:1d:00:9f:63:95:8e:91:b8:ae:85:28:fe:72:57:
fa:16:0a:80:fe:c9:ca:47:c1:61:1c:3a:42:db:bb:
27:93:b7:5e:0c:58:73:f3:68:f6:d5:a0:8a:4f:43:
77:cf:7a:6d:76:e4:85:2a:fa:c8:1b:c5:5d:35:b7:
ad:22:d9:60:fe:5c:92:f0:f3:13:b2:2e:db:50:1d:
2f:68:b7:b2:75:ca:14:2c:ab:9f:40:ae:95:de:96:
db:c5:ae:a5:71:e5:aa:87:1d:ca:fd:e5:1e:2c:0e:
ca:c2:96:75:8b:19:4c:c2:b5:1b:70:ca:cf:75:cb:
42:bb:6a:b6:d8:48:9b:be:2b:e8:46:fe:93:1f:e3:
80:d2:05:b5:f0:01:ed:7e:e3:b6:ae:29:46:b0:1c:
7e:04:08:d3:9d:15:0a:8d:77:ff:17:ad:67:93:c4:
47:ab:bc:d0:e1:4c:fa:1d:0d:a9:f9:ff:70:d9:64:
e0:f4:d4:9f:2a:92:d9:b3:f4:f1:e6:1d:67:b7:10:
6e:8e:ec:17:0e:b8:7d:2a:72:b2:36:f3:d5:38:6a:
e4:6c:c0:32:8a:59:80:aa:c8:51:b4:1b:68:c1:21:
4f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:DC:BA:1A:C2:A3:2C:3C:9F:19:9E:40:6A:85:33:AC:19:DF:A6:32
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:1d:67:de:55:bb:4b:d4:dc:ef:7f:23:5b:2e:83:a3:28:64:
ff:56:96:e1:37:87:15:21:1e:91:c8:04:4a:6c:b6:66:62:12:
41:9d:64:ca:30:4c:6c:cb:d9:bf:de:b9:df:c0:54:70:7f:6a:
e5:81:0b:e4:d7:5d:55:82:cd:6b:0c:17:ca:60:16:79:82:83:
21:2e:e2:27:f2:7c:d1:8b:74:16:9a:73:dd:d6:51:41:a0:bb:
14:0e:0a:d4:5a:a3:f0:17:01:f0:81:51:a0:9e:fe:7d:05:bf:
bf:dc:d5:71:a3:f8:bf:d4:94:c2:ce:c9:6b:32:ec:3e:7c:6f:
1d:e3:ef:8a:af:8b:1c:c5:28:5d:d3:7e:22:73:dd:8e:1a:f8:
dd:4f:3d:b6:2c:28:8d:0b:73:47:6e:c2:d3:f2:6a:63:cc:77:
9d:9e:8d:ef:43:f2:38:34:57:4e:44:fa:27:b2:36:e1:fd:48:
f0:c3:e0:1c:3d:74:e6:f8:7a:be:30:85:fa:fd:72:67:d0:4b:
27:43:eb:12:d3:4e:09:7e:b3:e0:af:e8:44:1b:4b:56:a9:6e:
ab:b9:f4:50:69:0a:34:8e:4e:9e:68:83:57:88:20:d5:7e:40:
31:92:34:48:9f:82:2e:54:b8:68:f8:ef:94:d7:ae:df:fe:d6:
2d:bf:f9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:42:07 2025 by rpki-client