Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
File: kxqerhFBEi0V8KZO8HjIAp_r_jw.mft (raw, json)
Hash identifier: WKJ1vEurKs3wc5Smo2207Kn1w38V9wqYul2mX7yUlBo=
Subject key identifier: 47:BF:DC:4C:D7:8C:C1:AD:22:B4:F3:D2:6D:56:95:2D:D3:F3:FD:55
Authority key identifier: 93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
Certificate issuer: /CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Certificate serial: 0196BE5CBCE572C3E3654DE159386640771D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
Manifest number: 1531
Signing time: Sun 11 May 2025 08:01:10 +0000
Manifest this update: Sun 11 May 2025 08:01:10 +0000
Manifest next update: Mon 12 May 2025 08:01:10 +0000
Files and hashes: 1: kxqerhFBEi0V8KZO8HjIAp_r_jw.crl (hash: rwp8dC+C71bkyWHKO91nWJdOscrAMSI9kNa3mTzsLQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:be:5c:bc:e5:72:c3:e3:65:4d:e1:59:38:66:40:77:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=931a9eae1141122d15f0a64ef078c8029febfe3c
Validity
Not Before: May 11 08:01:10 2025 GMT
Not After : May 12 08:01:10 2025 GMT
Subject: CN=47bfdc4cd78cc1ad22b4f3d26d56952dd3f3fd55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:7f:2f:de:2a:26:88:6e:c2:f3:a8:b1:92:
6b:0d:c8:ea:5a:72:dd:b4:2f:4e:b9:ea:83:1f:b5:
8e:b0:ba:36:c4:27:10:08:31:85:1d:a4:f0:5a:fc:
de:f1:29:1e:3b:15:3c:c7:c4:bf:3b:2a:30:9a:c7:
5a:e2:f1:4c:c2:33:cb:3f:a8:a6:2b:43:71:92:51:
e9:4a:67:62:03:96:b7:db:ab:79:6d:fe:7b:be:48:
b5:30:0b:6d:f1:d4:b2:08:9e:cc:3e:53:70:29:fd:
c0:3c:e2:b6:db:0e:c0:e5:93:46:f4:c5:03:5c:ce:
f7:92:05:48:0e:52:9a:b6:b5:22:87:f8:6a:fc:41:
db:36:71:34:38:55:b4:aa:a6:ea:4e:85:39:cf:43:
7e:68:76:a5:90:c0:0c:bb:04:dc:f9:af:01:79:5b:
73:4f:08:99:9e:8b:78:fd:b6:44:a0:de:84:6b:e2:
11:97:c1:12:62:a4:8a:bd:97:bb:d1:90:8a:7c:04:
5b:c0:ec:d9:fc:21:6d:38:5e:df:bb:b7:82:68:f2:
83:38:92:1c:bc:a4:92:b2:4d:e2:cd:b8:4c:a5:20:
d8:37:ec:40:26:ae:a7:8f:1a:db:05:37:a5:f1:c2:
be:c8:dd:e2:aa:d1:ad:30:fc:e7:38:da:f0:76:84:
c1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:BF:DC:4C:D7:8C:C1:AD:22:B4:F3:D2:6D:56:95:2D:D3:F3:FD:55
X509v3 Authority Key Identifier:
keyid:93:1A:9E:AE:11:41:12:2D:15:F0:A6:4E:F0:78:C8:02:9F:EB:FE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kxqerhFBEi0V8KZO8HjIAp_r_jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/473768-3a59-4b0b-ad26-19136b7b0396/1/kxqerhFBEi0V8KZO8HjIAp_r_jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:7d:b9:3d:5f:09:20:0e:9e:e0:8e:8b:15:cb:3b:d3:95:56:
d0:70:f0:b8:04:59:7a:57:c0:ef:f0:52:48:d2:c7:f3:83:38:
95:3a:fd:c1:f1:6f:9f:eb:44:1e:3a:c9:3d:a9:2b:50:16:80:
55:46:4c:9d:29:98:99:18:33:71:17:cb:1b:29:ca:6f:5a:69:
46:e3:dc:1f:2d:0e:d8:ce:ba:06:18:27:d9:11:60:27:02:3d:
7f:f4:2a:02:ab:d7:1d:15:c3:a9:f3:02:7c:39:2d:02:5f:6e:
8d:85:66:bf:73:45:f6:c7:d2:49:e4:58:d4:a3:3f:23:47:52:
c9:2e:7c:78:3b:d7:87:a1:99:45:d5:78:03:6b:3e:6c:b5:64:
cb:0c:65:72:d4:76:0d:e7:ee:f1:3c:78:fd:20:a2:03:0e:77:
72:3c:75:c4:f7:c1:d6:d6:9f:51:fa:31:6d:e3:b1:d4:6c:76:
36:6f:8b:75:ca:d3:3e:cf:74:25:94:05:7b:da:d0:85:3d:9a:
05:fd:74:72:aa:08:de:aa:37:2f:07:f9:8d:c8:8b:74:c7:93:
40:93:28:01:31:3b:e5:9b:e0:a9:5b:22:f1:24:8b:3f:24:51:
74:1e:51:f9:e0:c2:7b:96:b1:00:58:22:14:27:a7:a8:13:2c:
96:78:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 12:33:27 2025 by rpki-client