Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier: tweE7bA+67s9YkYF0MK9BQ/8yMuyvg3vKst+LRjh64k=
Subject key identifier: 71:7D:6B:3A:B6:CD:E7:D8:B9:A8:11:50:36:29:1D:E7:BA:69:7A:9C
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 0196A54188EFC532508E2970A803B0C09713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number: 148B
Signing time: Tue 06 May 2025 11:00:57 +0000
Manifest this update: Tue 06 May 2025 11:00:57 +0000
Manifest next update: Wed 07 May 2025 11:00:57 +0000
Files and hashes: 1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: 6VX/cRKE1YKoUo/ntRyXvmWSZNdfAepYOHY9g0I7GWY=)
2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:41:88:ef:c5:32:50:8e:29:70:a8:03:b0:c0:97:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: May 6 11:00:57 2025 GMT
Not After : May 7 11:00:57 2025 GMT
Subject: CN=717d6b3ab6cde7d8b9a8115036291de7ba697a9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e0:db:20:d2:74:e9:23:9f:26:fa:67:41:ca:
32:b1:3d:87:b8:a6:c4:a7:da:fd:14:33:38:85:d9:
56:ad:6b:02:36:b8:0b:ea:a9:67:34:4c:cd:28:1d:
10:58:15:80:87:86:7a:b3:5c:33:5f:ec:f5:e5:87:
65:e1:47:39:cf:f9:4d:7c:96:32:d4:f2:70:63:53:
e7:99:e2:85:10:8b:33:80:52:2d:8e:71:0f:50:ae:
3a:c1:9d:39:9d:3c:c3:7e:97:e8:00:4b:85:a4:c1:
95:2f:d9:e5:e4:ac:78:42:47:70:fb:e3:37:4b:8d:
dc:b7:01:30:c3:88:33:cf:d1:f5:b4:f8:ca:6f:0f:
9e:4f:19:65:d7:91:f2:6f:23:6a:0a:40:68:e0:dc:
4c:0d:e7:cd:69:e5:6c:b5:b9:52:71:60:ac:b4:c2:
6d:a8:1c:60:3b:be:df:d9:a9:b4:dd:ec:e8:fb:b9:
5d:82:27:9e:ac:cd:a0:89:e9:64:5a:44:be:a3:5b:
6d:24:10:1a:65:1e:e7:5c:f2:3f:39:76:a6:6e:90:
49:ba:15:e7:14:96:55:d7:bd:42:4f:46:1d:18:7c:
cc:34:c8:b2:b4:84:be:9f:d4:c4:f6:ee:77:b1:4d:
16:b2:2d:82:8d:99:01:92:e4:bb:68:e0:c5:33:91:
34:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7D:6B:3A:B6:CD:E7:D8:B9:A8:11:50:36:29:1D:E7:BA:69:7A:9C
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:af:e6:47:32:51:c4:53:85:37:d7:00:b4:54:0c:4d:87:bb:
a7:12:5f:fc:ca:14:04:85:ef:55:d4:84:97:de:51:29:36:8f:
77:87:42:b6:0c:56:c7:19:92:9a:a8:e0:b8:08:00:76:05:51:
bc:80:39:03:1e:a6:76:33:09:41:b3:02:fa:8b:a3:26:6f:c5:
9c:13:1d:4e:93:c4:f2:1c:2f:3c:c0:73:8e:93:95:21:7f:34:
61:76:24:01:ec:27:bf:09:99:67:36:1c:48:41:88:8e:e7:2f:
0b:9c:d3:16:c3:8f:04:63:4a:fb:0e:72:c7:c1:a2:7e:a8:d7:
ad:4c:88:02:30:ca:4f:8c:bb:72:3c:bb:69:8f:94:d4:9c:42:
8e:bb:e3:a3:cc:8c:4d:14:e7:b0:8f:5a:c9:57:6b:f6:b7:22:
9f:ee:58:a1:af:f8:5c:08:ba:e6:4a:bb:93:a6:15:33:50:b4:
e5:25:8e:e3:5c:48:49:ab:6f:b5:fa:56:76:80:ab:b1:b2:c3:
21:7f:fa:13:09:7e:61:15:f9:b2:5d:45:f1:73:51:22:80:5a:
2b:da:ee:67:0f:cc:9f:af:48:68:1b:4f:e1:2b:80:d4:f0:e5:
6d:b5:da:c0:99:9e:66:3a:5d:eb:59:73:6a:f5:d0:a0:35:0b:
11:6a:05:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:29:00 2025 by rpki-client