Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
File: KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft (raw, json)
Hash identifier: 81Sr6PhfA0GpgOXFl7G+YKkb7XiqaEAdQKwcQsbf/b0=
Subject key identifier: 75:6C:B6:B1:3E:7B:79:E3:4C:86:1D:09:A0:36:6B:5D:9F:A8:AF:40
Authority key identifier: 2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
Certificate issuer: /CN=2a7148c461f5e77e107af73566a27e343561dc1d
Certificate serial: 0196B3D96DB4FB4CF6F2169B06888DEDB498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
Manifest number: 152C
Signing time: Fri 09 May 2025 07:01:33 +0000
Manifest this update: Fri 09 May 2025 07:01:33 +0000
Manifest next update: Sat 10 May 2025 07:01:33 +0000
Files and hashes: 1: KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl (hash: gpOt283UEV8J+wP49Lab2jg1ljiGWjvuJUAiWo7nvs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:d9:6d:b4:fb:4c:f6:f2:16:9b:06:88:8d:ed:b4:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a7148c461f5e77e107af73566a27e343561dc1d
Validity
Not Before: May 9 07:01:33 2025 GMT
Not After : May 10 07:01:33 2025 GMT
Subject: CN=756cb6b13e7b79e34c861d09a0366b5d9fa8af40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f4:af:d9:e0:54:72:08:3e:71:3d:f1:ad:18:
f7:fd:1e:20:75:bc:f4:b5:68:b3:d3:3a:f0:da:11:
4c:09:35:2c:c2:4c:37:0e:f0:25:0f:0c:21:58:50:
b4:d2:34:e6:b1:21:65:5c:5c:8f:ab:00:12:bb:e7:
f9:d7:7b:96:fe:96:0f:71:9a:56:15:83:a7:0f:ed:
94:42:50:8e:37:3d:a4:78:02:87:1c:6e:9e:32:27:
e7:fd:f1:3e:a1:2b:93:f0:ca:76:d8:9d:f4:65:69:
b0:9b:ac:af:1d:3e:6f:ae:a6:49:22:b1:e3:5c:f4:
be:8e:23:35:1a:80:20:a0:13:6d:02:bd:1f:5c:62:
9a:f5:65:e6:63:fa:4b:5e:99:c0:fe:80:d5:23:32:
9b:f9:3d:25:c4:47:73:57:66:4b:4a:0e:5f:c4:18:
b9:77:1c:d8:21:80:9b:3f:56:ac:79:3b:70:76:62:
07:03:26:9f:0d:7a:f4:58:8b:02:cd:b5:0a:c2:aa:
54:c2:91:3b:06:92:86:11:37:c2:15:18:86:6b:f7:
ce:e0:21:41:47:dd:1c:07:7c:ec:5e:2e:77:89:2e:
9b:c2:f2:54:eb:be:e3:1b:12:69:b7:aa:66:7c:a4:
b5:b2:93:ef:02:c6:ea:f9:6f:cc:92:8c:9e:3c:72:
86:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:6C:B6:B1:3E:7B:79:E3:4C:86:1D:09:A0:36:6B:5D:9F:A8:AF:40
X509v3 Authority Key Identifier:
keyid:2A:71:48:C4:61:F5:E7:7E:10:7A:F7:35:66:A2:7E:34:35:61:DC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KnFIxGH1534Qevc1ZqJ-NDVh3B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/9afaf5-e696-483e-8365-34efd5b9e9cd/1/KnFIxGH1534Qevc1ZqJ-NDVh3B0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d8:9e:fa:24:36:db:bb:c2:1d:d7:ac:46:56:3c:05:bd:25:
71:38:fd:be:37:d6:2d:13:07:bb:7e:27:4a:04:2d:2b:c5:3c:
c5:f7:bb:1e:b0:7d:af:2e:f2:14:c5:78:ae:10:c9:0e:0d:19:
ca:2e:3a:4a:f4:7c:1a:7f:6d:21:57:cd:e4:e6:19:4d:d8:b3:
29:09:12:68:14:f1:d2:1a:a8:4c:33:80:9e:22:58:ec:b7:f7:
25:f0:ef:91:09:be:4e:0a:01:b7:fa:74:4e:6b:33:9f:45:a2:
7a:72:66:b5:7a:54:77:2a:25:2f:8b:6d:de:9e:c8:11:08:45:
4f:72:a1:af:17:ef:65:1b:01:c0:d3:a7:50:32:9b:2f:9c:68:
f1:fa:1c:be:8a:81:ef:85:d0:0f:20:97:b1:f3:7f:90:2b:d9:
8b:01:4b:cb:af:17:09:25:80:60:da:23:5b:30:3b:39:60:35:
86:31:0a:0e:55:52:de:3c:e9:8c:99:e1:a3:9e:ca:d3:22:02:
ab:30:a5:49:29:32:96:f9:66:77:91:be:14:f0:f2:82:65:05:
37:8b:14:3b:a7:37:f3:2f:af:ab:bb:67:9b:61:90:b8:dc:21:
68:32:bf:17:d7:17:3f:20:2b:63:22:6d:82:d8:7c:3d:14:3c:
72:76:e8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 10:47:58 2025 by rpki-client