Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: zrWztnTLhUmEymjUMMYq5RdE0E2u4U6dkkPjG2RB2kU=
Subject key identifier: DA:37:42:A0:BE:6D:8D:B4:AC:E7:55:2F:E9:E6:63:A2:37:C4:41:30
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 0196B6D977AAED9053DEA2D76BC3FA9E6AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1537
Signing time: Fri 09 May 2025 21:00:27 +0000
Manifest this update: Fri 09 May 2025 21:00:27 +0000
Manifest next update: Sat 10 May 2025 21:00:27 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: TsAZOltHEEnylpnPjmHCyIhl13nOPkmB+SQbNp+qnzw=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b6:d9:77:aa:ed:90:53:de:a2:d7:6b:c3:fa:9e:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: May 9 21:00:27 2025 GMT
Not After : May 10 21:00:27 2025 GMT
Subject: CN=da3742a0be6d8db4ace7552fe9e663a237c44130
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2d:48:60:35:50:2c:94:76:fc:13:dc:3b:f7:
c9:b8:5d:3c:47:00:e6:d5:78:95:06:03:d9:3c:c6:
08:9b:71:ea:70:1d:9a:3b:b6:08:23:6b:4c:3c:a4:
d9:80:3d:a6:01:a9:d2:4d:30:8b:b1:dc:f6:ce:91:
c7:2d:1f:1e:04:44:47:5f:eb:bd:59:dd:44:fc:f0:
e2:fc:70:c9:83:a1:89:48:04:fb:a8:e3:65:13:17:
a8:8d:a8:c6:85:77:86:fc:c5:0a:a4:5b:a0:d0:e8:
a5:6b:de:f6:71:59:2f:58:32:1e:10:07:15:90:06:
c0:cb:ee:9c:9c:cd:1e:27:dc:46:eb:c5:89:5b:54:
8f:da:ca:af:7e:7d:1f:49:d7:7d:ee:0d:d3:df:94:
4d:39:43:0b:72:80:f7:0a:d6:c7:18:de:b3:a4:03:
72:3f:11:f9:83:c2:9d:57:b6:44:db:32:aa:5d:ac:
25:59:5d:4b:23:7c:a0:43:6a:44:69:58:62:a8:aa:
75:ce:42:04:70:21:bb:24:85:a5:d2:04:54:93:84:
c4:69:aa:29:17:2e:71:46:b7:f3:18:19:95:5a:49:
5c:7f:ff:72:b5:6a:54:3f:84:66:d5:a7:3f:12:3c:
c5:ed:5e:e9:37:02:45:32:a2:6f:ac:d8:b2:6f:e4:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:37:42:A0:BE:6D:8D:B4:AC:E7:55:2F:E9:E6:63:A2:37:C4:41:30
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:55:3d:9c:93:22:91:9f:76:5e:af:44:7a:80:db:92:30:49:
0e:26:50:ba:5d:a4:bd:f0:e2:2e:64:b2:40:81:77:15:4e:74:
13:2a:94:59:36:74:8d:ea:2e:1e:aa:d9:52:f8:72:79:c0:7f:
6a:42:39:58:2a:9a:63:52:97:ce:2b:67:65:0d:88:a2:57:bc:
47:19:70:8d:25:28:77:66:cc:c7:70:9c:38:5a:ea:c3:cb:01:
0a:aa:03:18:59:b8:19:b0:50:12:f4:ff:e1:c1:75:f0:fe:05:
f1:1a:a3:31:6c:f1:cb:f6:73:45:cb:fb:76:73:37:ee:ed:38:
ea:b7:4b:df:7f:44:3d:7a:e8:0f:3a:34:8f:e9:0f:49:7c:0d:
33:01:39:a4:0b:e3:cf:4c:af:63:5f:5e:10:24:1f:fe:41:e2:
64:a8:96:1b:1f:6a:fe:88:cd:43:1e:07:15:22:5e:1a:38:74:
ca:99:4b:00:93:ad:07:f3:92:1c:0f:7b:51:82:9e:e7:54:dd:
73:cc:f7:0f:05:2e:4d:23:f1:c2:bd:5b:a4:45:a0:e0:2a:df:
f1:17:41:f4:c2:fd:e8:72:98:68:04:90:ce:49:65:41:f1:a7:
1e:3a:c3:51:ba:6b:9a:a1:89:0c:dc:cc:31:27:c3:a8:3e:19:
56:25:fd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:17:07 2025 by rpki-client