Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: 9TG/s/Tnug2deXIVSqfrEnzwjkuprb17PWXPHqYuUCA=
Subject key identifier: 0A:D1:42:2F:BB:DD:63:A5:EA:B9:E4:97:A1:9A:89:DF:95:68:AC:0A
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 0196C9166FC807CE746A76DE3A409F318CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 1538
Signing time: Tue 13 May 2025 10:00:12 +0000
Manifest this update: Tue 13 May 2025 10:00:12 +0000
Manifest next update: Wed 14 May 2025 10:00:12 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: CFTz8O9oQRUjtCoDhFvW4WB0EJFuRnHXQS1ZUcnYkHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c9:16:6f:c8:07:ce:74:6a:76:de:3a:40:9f:31:8c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: May 13 10:00:12 2025 GMT
Not After : May 14 10:00:12 2025 GMT
Subject: CN=0ad1422fbbdd63a5eab9e497a19a89df9568ac0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6b:66:6f:23:7a:a4:25:a3:0b:b0:43:1d:9f:
3d:08:19:f2:0d:8b:8d:9d:cb:63:b6:dc:a8:e8:0c:
e3:05:41:63:ef:d4:9e:3b:d3:c8:a3:bf:3b:b6:43:
70:51:bf:5f:67:8c:5d:65:ec:31:6e:6c:b9:9a:33:
55:99:09:a2:40:f3:a3:76:f3:47:fb:af:ea:c3:6a:
fa:dc:9d:2b:40:9e:97:ce:93:61:d6:14:aa:63:c2:
20:5c:6d:54:13:4d:aa:37:1c:f3:88:55:7c:e0:63:
11:1a:77:c1:f8:13:10:fc:7e:99:0d:89:48:0c:8a:
5a:90:e4:39:c7:43:71:31:61:25:1f:01:f1:58:60:
6f:b4:1f:5f:b6:6e:b6:d7:fa:ba:85:6e:eb:10:5d:
9c:be:5b:d9:87:e1:84:f6:8a:35:bf:58:b3:c9:21:
2d:7f:01:d9:63:cc:ac:ef:ac:88:de:0e:f8:56:53:
90:a9:a4:24:ea:46:6b:c5:9f:08:87:48:99:82:bf:
c0:c1:77:1f:cf:8b:de:66:de:be:20:01:82:a6:2c:
d0:a1:95:7d:a1:34:bd:ae:76:6c:10:0e:d2:5e:51:
c5:cf:db:28:32:84:29:f2:71:4e:8c:79:7b:e1:97:
b0:d0:a3:9e:ca:2a:e8:f3:8e:89:7b:11:99:f3:c0:
c7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:D1:42:2F:BB:DD:63:A5:EA:B9:E4:97:A1:9A:89:DF:95:68:AC:0A
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:c5:ca:f2:c5:ee:ec:d5:9e:f2:39:be:7d:5a:14:e3:72:82:
a7:72:7e:a6:f9:e6:06:63:d6:2f:8f:a7:e5:c0:e6:ff:e2:c1:
0a:13:be:8e:97:fe:f6:db:e7:81:13:03:b9:ad:df:80:f3:97:
0d:65:00:7f:7f:7c:c6:12:9d:0e:84:7c:3e:1e:33:68:4e:03:
56:e3:db:c8:3c:f0:4d:31:1a:6f:0e:0b:2f:6a:32:40:e4:92:
70:d2:e9:a5:af:ed:38:09:61:a8:8a:00:bc:06:40:c3:11:d0:
ab:49:38:a5:bf:d4:9d:f6:c2:f9:29:a6:0d:4a:f4:de:bd:64:
33:6d:43:3d:45:d9:ea:d7:28:74:c3:1c:c8:6e:52:62:50:7e:
e7:6d:68:28:fd:a2:3f:4b:ba:0d:ee:fb:27:cb:5d:63:2c:0b:
7d:8e:e9:e6:33:1a:44:ec:69:45:7e:08:b6:45:fc:05:c3:b2:
dd:ee:80:38:24:15:85:21:79:47:2f:38:1c:7e:20:ec:81:bf:
50:de:a2:4f:34:34:49:e6:e0:e9:b0:d2:81:df:e3:60:4d:37:
b6:74:f9:88:22:3e:c2:cf:3a:a9:d3:04:f7:e7:de:2e:f0:a9:
da:dd:ee:13:6f:94:96:cf:67:53:28:b9:ea:32:39:99:ff:af:
31:6e:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:32:24 2025 by rpki-client