Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: a40/6bLliXSwShna5cwZ9okQluGc4WKlUQ4nm9YU5LY=
Subject key identifier: 4C:73:A0:CA:18:44:B0:5D:72:AC:AB:F0:DC:22:D4:5C:88:56:1C:2B
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 0196BECA10D8A2D6C43872FD2838DFAE91FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 05D5
Signing time: Sun 11 May 2025 10:00:35 +0000
Manifest this update: Sun 11 May 2025 10:00:35 +0000
Manifest next update: Mon 12 May 2025 10:00:35 +0000
Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: YXXx/qDnq92f8imHtl9N8a0OrH5/LuUpFbBC8GptVi0=)
2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:ca:10:d8:a2:d6:c4:38:72:fd:28:38:df:ae:91:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: May 11 10:00:35 2025 GMT
Not After : May 12 10:00:35 2025 GMT
Subject: CN=4c73a0ca1844b05d72acabf0dc22d45c88561c2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a0:9f:10:ea:a8:d8:bf:a9:20:cb:0f:eb:3c:
22:55:c1:a8:c2:b0:2b:d7:c6:90:2d:40:23:cc:55:
5e:4d:0e:de:0a:4a:3d:f9:af:34:cd:6e:47:92:d1:
48:38:b0:46:77:1c:48:66:34:78:10:a6:2b:7a:47:
19:8a:f7:2f:6e:d4:6b:65:4b:81:2c:64:6a:43:3f:
f4:21:f2:12:55:17:88:19:79:de:35:5f:29:92:09:
bb:0a:d2:f6:57:72:8c:00:f6:33:6b:5c:dd:b1:71:
54:fb:49:74:76:d0:cb:91:c9:36:8e:28:ce:32:95:
71:fc:a0:fd:70:4f:ca:2a:73:aa:a4:fc:cb:ce:fb:
25:93:9d:f8:61:77:46:6e:4d:07:ea:e4:dd:97:bb:
d2:64:91:5c:99:0a:0a:26:f7:61:9e:7b:1a:e1:4b:
5c:5e:fe:2d:e5:d6:23:55:54:89:ac:ad:db:bd:b2:
93:b8:c0:21:a4:99:3b:3a:d8:50:ce:fd:f3:6b:00:
1d:19:d8:bd:03:03:84:8a:00:fd:05:4d:c6:b4:c7:
0a:5d:3d:40:5f:01:65:09:1d:02:73:38:4d:88:02:
4f:d2:44:a5:bd:d6:1f:33:95:ee:42:81:c8:b6:15:
bd:cb:96:09:a8:ba:a0:4b:c2:cc:55:2f:e1:49:a5:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:73:A0:CA:18:44:B0:5D:72:AC:AB:F0:DC:22:D4:5C:88:56:1C:2B
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:c4:14:b8:42:e4:6c:7a:a8:e6:5e:28:48:e6:10:55:e5:94:
ad:d5:53:d0:6f:ec:55:97:45:4d:19:34:65:d3:b7:0f:4c:24:
84:75:9e:67:3f:d9:fa:f1:00:aa:67:9b:d0:a1:ef:05:a3:bc:
76:aa:75:96:16:94:e5:cf:d7:a1:c0:4a:06:c4:67:16:3a:12:
3a:3d:a2:ca:4d:cd:54:67:d9:cf:95:ed:f0:70:8e:80:4f:a8:
30:fc:5d:3f:64:26:08:0a:20:35:6a:b3:64:92:92:51:ee:04:
4d:99:87:10:fc:b5:6e:25:9e:e6:78:23:75:9e:fe:95:99:6c:
23:c1:72:de:a0:06:4a:a2:a7:7d:f3:ea:d3:71:f5:bd:36:3f:
cf:3a:14:30:e7:94:44:76:d2:83:cb:92:25:2c:8a:47:56:42:
48:c6:74:db:54:fe:ea:19:88:1c:5f:15:79:0f:43:48:3b:1a:
d4:8b:65:e4:3c:44:15:06:5e:40:ee:5e:4b:aa:13:2e:dd:e1:
fe:26:97:3b:3a:23:f5:1c:7a:50:25:34:b2:34:1a:c7:70:b8:
bf:a6:03:9f:fd:8d:5c:32:9c:ca:c2:3d:1a:07:2a:5c:41:00:
28:b5:b3:8e:a6:52:52:f4:40:7e:4c:85:64:9d:68:d9:06:38:
22:b1:bf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 14:46:35 2025 by rpki-client