Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
File: KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft (raw, json)
Hash identifier: tgXcDTz/9a0cAyPYUe9qg7fUvfo7CuEBICa02St3kUw=
Subject key identifier: C4:BE:08:F3:97:17:69:B4:C5:BE:83:06:60:56:80:DC:97:15:F0:F4
Authority key identifier: 29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
Certificate issuer: /CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Certificate serial: 0196AEE8D5094BAB6789565ED9922E3A4707
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
Manifest number: 152F
Signing time: Thu 08 May 2025 08:00:16 +0000
Manifest this update: Thu 08 May 2025 08:00:16 +0000
Manifest next update: Fri 09 May 2025 08:00:16 +0000
Files and hashes: 1: KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl (hash: OHviGQODmYH1dHiHZVKTniIm3M/iFBGQemfI07WDhr4=)
2: aI7Jkk0hKBc5FvPXNc087oh3O6I.roa (hash: NGQRZS/iBgx2LNEuUjWmKtWDne6hFeLh8g8pm9sOGIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ae:e8:d5:09:4b:ab:67:89:56:5e:d9:92:2e:3a:47:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295b6a34a2109ba7c4d97f76c74466f14c3333e0
Validity
Not Before: May 8 08:00:16 2025 GMT
Not After : May 9 08:00:16 2025 GMT
Subject: CN=c4be08f3971769b4c5be8306605680dc9715f0f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a8:da:e5:1e:42:02:56:89:db:cd:f7:59:07:
91:5b:02:d4:89:4e:2b:d9:2c:1a:7c:20:c9:b9:2d:
7f:7d:89:bd:f6:eb:6d:82:1e:e0:64:ce:5e:63:d0:
d4:a1:a7:bf:d5:be:1d:b9:cf:09:fd:d0:cd:23:7a:
7a:5a:0f:68:c0:6a:75:8d:8b:23:85:c9:d7:a5:df:
fc:35:8a:66:35:e1:23:16:cd:86:7c:92:d0:8e:8f:
17:e5:26:e1:2c:15:ce:2e:1b:f0:c1:9c:71:1e:8b:
f0:9e:ec:77:d7:89:bc:2a:26:3b:05:b9:34:a4:24:
bd:39:ce:38:81:8a:bd:8e:f1:44:d1:e2:33:48:1e:
b7:17:47:f7:6d:12:ed:51:7f:25:45:2f:27:3d:c4:
47:5d:9d:ca:a9:1a:a6:45:3c:c9:98:3e:a7:10:36:
75:02:83:75:47:d2:dd:52:ff:80:69:02:cd:63:d4:
c2:61:7b:fb:be:24:19:d6:86:b9:2b:4a:60:e4:4b:
f6:84:7b:7f:fe:6c:0a:7a:f3:1e:f5:7a:74:7d:d9:
c2:de:39:9a:c8:25:8c:04:97:e8:41:62:04:28:99:
c8:8a:79:26:12:02:f6:ca:f2:2b:44:e8:72:03:7c:
48:d5:93:28:ae:8d:ef:00:58:b6:83:4b:10:c1:8a:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:BE:08:F3:97:17:69:B4:C5:BE:83:06:60:56:80:DC:97:15:F0:F4
X509v3 Authority Key Identifier:
keyid:29:5B:6A:34:A2:10:9B:A7:C4:D9:7F:76:C7:44:66:F1:4C:33:33:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVtqNKIQm6fE2X92x0Rm8UwzM-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e9b173-92b6-4210-a8e0-b797a4406f30/1/KVtqNKIQm6fE2X92x0Rm8UwzM-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9e:92:5e:6b:8b:ba:88:82:99:cf:0e:f4:82:e6:6d:bd:45:
2d:9b:63:93:b8:00:94:d8:46:73:8b:3f:47:4e:3e:ed:7d:ff:
51:b5:f2:37:9a:bf:7b:be:65:96:6f:99:41:f0:8c:39:c0:da:
b2:9f:72:23:0e:e8:8d:27:57:eb:8b:aa:8a:8c:e1:86:9d:d5:
c9:f7:9a:cb:5b:40:f8:b1:01:13:fa:bf:24:d9:f5:f4:11:79:
0f:f8:9f:1b:5b:12:24:2b:ad:c2:4c:4b:78:bd:e5:fa:87:d4:
da:07:25:cc:88:f1:c5:d4:62:b7:6a:d5:c3:42:f0:70:21:b7:
cf:a4:24:3c:05:28:eb:a1:3f:50:6a:11:b2:56:da:4c:f3:b9:
93:0c:7f:f8:af:15:39:ae:ed:5b:42:c2:c5:9a:5d:c6:fb:b4:
e4:d6:76:43:e8:87:2d:65:02:88:41:90:0e:a9:ad:e3:4f:bd:
07:b4:11:eb:80:98:af:ae:57:a9:88:e5:b3:e3:92:11:98:7e:
7b:7c:fe:02:91:82:73:7c:c6:ec:55:d1:c2:90:e0:37:7a:7d:
7c:ca:8f:c1:5a:e0:3b:71:91:58:5c:a1:df:29:a3:f2:f6:26:
f2:7d:9c:39:bf:47:a4:c9:0b:e5:fa:3f:f5:eb:b4:ec:4a:3e:
9a:2b:ef:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:07:34 2025 by rpki-client