Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
File: k2BVYMsfU9aYunp4WwLySOoqLHs.mft (raw, json)
Hash identifier: F90L3bS/wVQDRiI7iajGZ8kelyFVAMM8qALaKgUBK6E=
Subject key identifier: D3:B5:24:21:F1:01:A6:95:B1:C3:43:84:6C:87:2E:8B:B1:6A:A0:02
Authority key identifier: 93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
Certificate issuer: /CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Certificate serial: 0196BAED2EB0BE2A23EE57445113962C7822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
Manifest number: 12EE
Signing time: Sat 10 May 2025 16:00:28 +0000
Manifest this update: Sat 10 May 2025 16:00:28 +0000
Manifest next update: Sun 11 May 2025 16:00:28 +0000
Files and hashes: 1: k2BVYMsfU9aYunp4WwLySOoqLHs.crl (hash: 6+QJRYCmj3FqbJOj4RXyKw3TvfBErMGckBebX6JBHME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:2e:b0:be:2a:23:ee:57:44:51:13:96:2c:78:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93605560cb1f53d698ba7a785b02f248ea2a2c7b
Validity
Not Before: May 10 16:00:28 2025 GMT
Not After : May 11 16:00:28 2025 GMT
Subject: CN=d3b52421f101a695b1c343846c872e8bb16aa002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4b:7e:29:13:be:3f:8f:ae:f2:f1:5f:09:a0:
b1:f9:47:80:1f:78:5f:1d:69:2e:a3:40:88:ba:a8:
85:89:e3:6e:9e:07:58:1c:6f:4a:2a:ec:c2:ba:96:
49:b1:7f:0b:89:f6:87:7f:37:76:99:92:9a:37:99:
26:ab:2e:d9:c9:d5:3f:0f:96:1d:6b:ab:3c:60:55:
cb:13:04:a3:6d:c6:e2:cd:4f:43:cd:fd:9a:82:eb:
6f:5a:dd:89:95:6f:6e:7a:e4:a7:12:27:a7:3d:65:
da:d0:c5:e6:26:d6:3f:be:1a:27:38:92:fc:ff:39:
ea:5e:6a:d5:df:05:39:c3:d6:1e:75:eb:ec:0b:66:
06:42:aa:14:a4:f9:c7:38:71:77:d1:fe:c7:15:30:
b9:22:ec:0d:ea:48:a7:a7:67:05:a5:af:59:99:80:
7a:bb:b8:6b:19:77:a4:29:ee:62:8d:7a:76:0d:83:
b7:fb:b9:c3:7a:49:d6:87:7a:de:e6:54:50:81:cc:
70:be:76:98:51:05:0c:b1:98:62:ae:bc:3c:d0:f9:
2f:4b:2e:27:8d:e0:e5:89:e8:57:14:50:4c:2d:3e:
97:37:43:68:1d:8c:32:31:84:f8:75:6d:d1:29:c7:
78:c8:74:7f:44:12:a8:41:38:5b:62:9c:bf:95:19:
34:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B5:24:21:F1:01:A6:95:B1:C3:43:84:6C:87:2E:8B:B1:6A:A0:02
X509v3 Authority Key Identifier:
keyid:93:60:55:60:CB:1F:53:D6:98:BA:7A:78:5B:02:F2:48:EA:2A:2C:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2BVYMsfU9aYunp4WwLySOoqLHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/69d605-6e16-48f7-b171-d6e8300fc195/1/k2BVYMsfU9aYunp4WwLySOoqLHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:23:df:80:4c:82:02:a8:1b:fc:1a:1e:d2:a1:be:4f:d1:7e:
35:6e:6a:1c:1b:a2:0d:af:5c:15:12:6f:4c:f5:7f:4d:84:37:
11:f9:88:a8:4e:db:35:8b:e6:28:63:15:fa:31:14:95:13:53:
0e:d5:ac:8b:41:b6:43:9c:a8:be:5e:56:16:80:cf:a8:16:35:
3e:49:43:08:0e:22:c6:ab:d3:b8:73:6e:6f:59:63:dc:ce:29:
76:1c:38:69:e0:b9:1b:8b:7a:6a:db:dd:d9:47:c7:85:d8:18:
cd:05:e3:77:5f:cf:e6:36:6b:10:6d:e8:a0:0d:de:39:3a:c4:
ba:d8:68:57:c9:ab:4f:3c:de:90:6d:f5:12:ae:0b:9b:2a:69:
f7:73:80:ca:f1:94:52:a1:6b:11:aa:3c:a7:41:9f:d8:dc:e8:
12:74:2f:87:7a:64:9d:67:83:e3:ff:d6:b5:2a:71:e3:37:16:
17:2b:66:c2:e7:53:99:fa:c9:64:1e:11:41:56:f5:c7:40:c4:
9e:59:34:40:ef:50:05:bc:f6:28:8e:86:f0:6e:10:ff:16:40:
b1:2a:f4:67:4e:97:d8:00:3e:f3:65:71:df:0f:68:42:a0:22:
3b:e1:1e:d3:14:e5:94:80:e4:61:04:62:ad:b2:44:a3:f5:05:
c7:f6:52:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:14:08 2025 by rpki-client