Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
File: kr0ltrnzz-B4X_1OXlQCgztKT40.mft (raw, json)
Hash identifier: iuupqa9Z7jz31DVHAoVDzeiFQRq9U+oMp2tI+8ok0Fk=
Subject key identifier: B0:77:4A:E1:FD:FA:C5:E2:41:16:3F:A4:6D:5B:8F:F7:87:00:BD:B6
Authority key identifier: 92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
Certificate issuer: /CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Certificate serial: 0196BAED47F45AD2BBFCA7C126643A4CBEBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 16:00:34 +0000
Manifest this update: Sat 10 May 2025 16:00:34 +0000
Manifest next update: Sun 11 May 2025 16:00:34 +0000
Files and hashes: 1: bOAoo9Xlbcl-PK-rbfwF58rAKlc.roa (hash: Vn8yXcKwSTNwIZccCZWqjun9GvkjZC8dYUcNBhWRmco=)
2: kr0ltrnzz-B4X_1OXlQCgztKT40.crl (hash: MKTWWextwaQk8ulxtLKF3E3P3/fw5+t/sdJ+kOohdpk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ba:ed:47:f4:5a:d2:bb:fc:a7:c1:26:64:3a:4c:be:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92bd25b6b9f3cfe0785ffd4e5e5402833b4a4f8d
Validity
Not Before: May 10 16:00:34 2025 GMT
Not After : May 11 16:00:34 2025 GMT
Subject: CN=b0774ae1fdfac5e241163fa46d5b8ff78700bdb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:88:ed:fe:43:fe:95:bf:81:6e:a9:24:28:
23:03:8c:8a:fb:27:ee:0a:54:1d:51:8a:32:5a:56:
3c:39:52:c0:7c:b7:82:54:7d:75:9b:15:95:7a:45:
c9:55:a9:21:bc:39:8b:75:cd:f3:d1:61:10:d9:49:
80:3d:87:fd:22:b7:04:7b:5e:e6:ba:f8:9f:45:87:
67:ed:d7:24:e8:bc:c2:52:a2:f7:33:ef:5d:93:45:
98:03:b1:ba:19:49:ee:5f:3b:12:21:09:5e:30:da:
7e:99:9f:8b:a4:b1:33:7a:8e:af:00:b7:6b:85:4f:
d7:9d:01:48:cc:f6:ab:00:06:86:48:9f:b1:46:68:
05:4f:4d:d3:f7:a9:14:a9:4d:cf:36:91:11:45:56:
b7:e2:fd:a7:62:0f:d2:ff:96:2e:bd:67:0d:5b:e5:
6b:9c:3f:6a:6a:0c:59:04:ed:82:dd:f8:1d:e4:d6:
56:a4:ef:f1:42:39:bc:02:bf:9f:f9:8f:64:41:ad:
e3:9f:99:f9:ed:77:31:69:51:9f:b7:aa:8e:ed:c8:
ad:b8:dc:8d:d4:8d:51:a8:53:50:33:09:d5:a5:3a:
cc:98:be:07:88:a6:fb:46:76:92:3d:80:49:dd:09:
f6:df:69:1d:f4:19:6e:f6:70:a8:2d:18:9d:5d:22:
37:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:77:4A:E1:FD:FA:C5:E2:41:16:3F:A4:6D:5B:8F:F7:87:00:BD:B6
X509v3 Authority Key Identifier:
keyid:92:BD:25:B6:B9:F3:CF:E0:78:5F:FD:4E:5E:54:02:83:3B:4A:4F:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr0ltrnzz-B4X_1OXlQCgztKT40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/02c68b-cedf-4317-82b8-2cd8c9139030/1/kr0ltrnzz-B4X_1OXlQCgztKT40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8b:73:83:26:7c:4e:0b:1e:f3:6c:47:cb:53:e3:76:3d:d7:
3c:6d:98:80:cc:9e:df:b0:79:0f:a2:ae:51:9f:37:0f:fb:3b:
5a:6f:aa:f6:86:ba:3a:53:17:07:57:d1:20:f5:4c:32:86:fb:
d4:40:a1:3c:88:cb:d5:88:1d:b5:3a:ea:07:0c:c2:99:13:37:
79:f1:95:75:1f:25:09:f9:df:74:42:1a:43:20:ad:f1:6c:58:
6e:15:eb:6e:57:f3:1a:a8:30:2b:f2:52:41:fb:ae:81:a1:f5:
31:95:67:9f:ec:1d:47:cb:af:ec:a3:4c:b1:a5:bb:7a:3d:35:
41:07:c7:76:db:d2:e8:6e:f2:9f:cb:e6:58:d0:f7:ca:a5:f2:
09:b1:5a:4e:9f:8d:4b:18:ea:6a:7b:d8:64:03:39:7e:ef:da:
8b:17:0b:63:1d:46:f1:4a:fb:28:19:3a:ca:21:28:6e:5a:2a:
25:37:21:59:57:a0:3c:63:df:70:bc:81:f1:37:4c:76:5d:5c:
7b:72:e9:16:eb:6f:c8:d5:1e:ce:74:c6:2a:42:9e:02:83:c0:
43:73:68:fb:d8:e4:79:dc:dc:f1:f3:ba:86:0a:c6:ab:75:85:
90:57:8f:f0:d7:89:b8:da:3d:a2:20:6f:c6:87:da:d8:a6:19:
f2:40:8d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:30:21 2025 by rpki-client