Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
File: kyIxLx0huzs4bKOqlzrGzSVLcDk.mft (raw, json)
Hash identifier: jRjf+srA5tyd8baaK/1dN6gFF6i/cX1JjFu42kmE2Bo=
Subject key identifier: 34:AE:EB:A0:F1:76:D0:A7:C7:7B:01:70:99:4C:E6:3E:56:04:F9:80
Authority key identifier: 93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
Certificate issuer: /CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Certificate serial: 0196C3F073CA3432D689D3B5C83079926F0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
Manifest number: 1533
Signing time: Mon 12 May 2025 10:00:37 +0000
Manifest this update: Mon 12 May 2025 10:00:37 +0000
Manifest next update: Tue 13 May 2025 10:00:37 +0000
Files and hashes: 1: kyIxLx0huzs4bKOqlzrGzSVLcDk.crl (hash: coDlwYELJ9qqFbnx/KA5eFMA3rW0TffFeMo3pXSbrDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:f0:73:ca:34:32:d6:89:d3:b5:c8:30:79:92:6f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9322312f1d21bb3b386ca3aa973ac6cd254b7039
Validity
Not Before: May 12 10:00:37 2025 GMT
Not After : May 13 10:00:37 2025 GMT
Subject: CN=34aeeba0f176d0a7c77b0170994ce63e5604f980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:56:98:b8:13:45:3b:b8:90:d2:07:5c:01:
ab:82:84:13:aa:02:3c:ed:d8:bc:e2:b9:9f:b2:46:
c7:96:1e:e2:39:8e:59:fc:a0:f0:d2:4f:0d:eb:70:
f1:5b:ca:e5:b7:bd:29:1d:a9:1e:1b:c6:a4:a3:66:
b6:ee:93:d7:bf:98:9a:1f:85:fb:f6:4a:41:4d:fb:
f1:b8:8a:14:4f:65:47:08:27:d4:b1:39:35:fe:f8:
c1:0d:9b:b6:f3:95:b9:4b:00:bb:15:a1:f9:a9:1e:
fc:ac:62:fb:29:52:38:04:4d:49:87:ec:8a:e0:7f:
4e:9e:2b:72:1e:22:41:56:f5:46:e7:bf:39:ec:1c:
5f:eb:23:e4:1f:61:71:f1:6b:c3:b4:0d:ee:82:a9:
1d:25:6b:f7:a7:2f:23:c7:be:ad:d2:7f:10:bf:0c:
f7:92:d1:48:7a:2b:27:0b:bd:e2:69:d3:8c:28:a0:
60:9e:a0:a6:9c:e4:75:2b:2c:ba:62:72:d1:1d:5b:
38:ce:c5:3a:ad:e1:78:5e:b0:aa:ed:c7:75:f6:67:
97:78:b8:99:26:78:9c:f1:8f:c5:1e:ae:77:30:a2:
d7:e2:98:c8:30:ff:9c:ce:0a:54:88:45:c0:3d:a1:
1f:6a:d2:29:11:60:96:12:69:62:9e:c6:55:bd:0c:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:AE:EB:A0:F1:76:D0:A7:C7:7B:01:70:99:4C:E6:3E:56:04:F9:80
X509v3 Authority Key Identifier:
keyid:93:22:31:2F:1D:21:BB:3B:38:6C:A3:AA:97:3A:C6:CD:25:4B:70:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyIxLx0huzs4bKOqlzrGzSVLcDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/695d71-bba1-425d-b9f3-c2677809b4a7/1/kyIxLx0huzs4bKOqlzrGzSVLcDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4a:90:16:d0:b3:96:24:12:e0:f0:b6:11:bf:3e:c5:57:d3:
10:57:9e:cc:09:fe:04:ee:66:a8:d6:e7:ea:25:ee:fe:f8:8b:
d2:2a:c9:e9:24:33:db:c4:94:4e:14:21:82:71:08:20:3d:4a:
d3:66:61:7e:38:12:01:39:c4:f4:b2:66:0b:33:8a:aa:c5:86:
9f:79:96:cc:a0:98:25:34:7a:7a:00:39:4a:03:3d:fe:02:4b:
1c:32:85:fb:37:c8:5f:8c:ed:f8:15:7b:34:38:72:98:93:91:
5f:32:12:ad:45:cc:c6:07:cd:6f:b5:73:5c:10:db:a1:46:6f:
0e:b7:6a:c8:95:72:15:96:96:30:37:93:43:0f:a5:e4:f5:aa:
59:8a:0a:60:e0:3a:d4:3b:70:e8:07:43:7e:ad:65:a3:0b:bf:
77:7b:aa:11:dd:a8:e3:74:24:55:fc:3b:0b:a7:7e:1c:a6:ae:
ba:80:19:61:79:fc:a3:91:65:9b:77:60:b2:6a:29:81:54:b8:
ab:83:4e:99:06:f4:88:64:6c:79:bb:4e:3f:ed:6e:ed:13:f0:
72:e4:07:5e:ce:ce:ae:5d:40:4c:51:3d:6d:96:40:34:22:47:
cf:fc:cf:87:9e:5d:93:30:82:62:ed:d6:e4:25:b2:ce:b6:43:
f7:ee:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:25:40 2025 by rpki-client