Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
File: Kf5mFpV0HYXP7c9v-890aZlZVp8.mft (raw, json)
Hash identifier: fYwuRHPQFWyUcweIH25u0FLmZyonHdSv8pzQraF++Xs=
Subject key identifier: 81:90:05:AF:3A:0B:37:DD:ED:F8:58:6E:15:E8:A9:E3:33:89:64:FC
Authority key identifier: 29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
Certificate issuer: /CN=29fe661695741d85cfedcf6ffbcf74699959569f
Certificate serial: 0196C34B639C38DEFF09A0E2866BAC6F8D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
Manifest number: 1535
Signing time: Mon 12 May 2025 07:00:19 +0000
Manifest this update: Mon 12 May 2025 07:00:19 +0000
Manifest next update: Tue 13 May 2025 07:00:19 +0000
Files and hashes: 1: Kf5mFpV0HYXP7c9v-890aZlZVp8.crl (hash: LyFdzDpOiLKfjCPvJIQB1mgd+9KMawOrvqA7FPTZ5yc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:63:9c:38:de:ff:09:a0:e2:86:6b:ac:6f:8d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29fe661695741d85cfedcf6ffbcf74699959569f
Validity
Not Before: May 12 07:00:19 2025 GMT
Not After : May 13 07:00:19 2025 GMT
Subject: CN=819005af3a0b37ddedf8586e15e8a9e3338964fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ad:40:81:4a:f7:81:f5:c5:01:f3:5b:b2:db:
99:d1:a4:b6:03:a0:4f:e4:a9:5d:1e:6b:fa:0b:fb:
08:b0:5a:83:9c:84:a5:bc:19:ef:9e:29:13:c3:d9:
75:95:a5:2e:25:5f:10:80:67:ef:26:2c:10:5a:30:
71:4c:10:d0:b4:9b:ee:ca:91:c3:80:7e:96:b1:38:
bf:6c:d6:d2:8a:7f:93:05:fa:9f:34:e2:47:7c:e2:
ec:7e:23:ca:36:e6:18:d4:e6:71:96:2e:d4:a5:0c:
92:06:34:11:6e:ba:c9:35:4f:f7:76:d8:ca:35:b7:
f0:a4:24:45:62:5b:00:e5:cd:0b:a5:fd:75:bb:71:
8d:17:13:5d:64:3b:0b:14:99:4f:36:b4:7d:39:66:
e9:28:67:6e:e1:16:7f:d3:20:6c:73:65:a1:1d:a5:
7b:49:ed:9f:2b:1d:c7:0a:5c:f6:a4:95:c4:55:31:
1b:f4:5e:70:ed:19:ba:cb:67:d6:fe:a7:16:b1:b3:
12:60:4a:e8:db:99:2a:9d:18:1e:01:68:19:69:ae:
32:b0:c2:d3:c4:70:a3:fa:6a:ab:8e:c4:ba:3d:ee:
8d:fd:9c:e8:52:41:ea:ef:c7:7f:3b:ed:26:04:a9:
9a:ca:70:1e:85:29:10:21:07:f1:05:dd:c6:a0:a5:
aa:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:90:05:AF:3A:0B:37:DD:ED:F8:58:6E:15:E8:A9:E3:33:89:64:FC
X509v3 Authority Key Identifier:
keyid:29:FE:66:16:95:74:1D:85:CF:ED:CF:6F:FB:CF:74:69:99:59:56:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf5mFpV0HYXP7c9v-890aZlZVp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/51ecc9-5681-4b02-9db8-2e880a7a82ca/1/Kf5mFpV0HYXP7c9v-890aZlZVp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:fa:81:3f:7d:85:63:01:ea:99:2c:64:2f:fa:f4:9f:8f:23:
3e:13:3a:95:50:94:5a:cc:0e:d3:5a:b9:8d:e7:fa:2b:55:b8:
7f:1a:52:f0:99:ee:d6:46:d9:a5:4b:4c:cb:2a:74:fa:30:be:
2c:49:6a:b5:61:e3:4e:d7:cd:50:46:c7:97:eb:82:96:31:9f:
b4:84:6c:11:a4:b3:d1:e8:c6:1c:7d:da:f5:21:60:d3:20:2c:
88:46:c5:01:37:30:ae:e9:88:dc:f6:af:36:4c:af:54:28:d8:
25:dc:74:a9:aa:9e:60:3d:06:4f:bc:25:96:26:58:41:44:39:
07:9b:c9:f2:bc:56:2f:6f:98:63:2e:07:bd:07:2a:f0:b3:db:
e4:20:8c:11:13:e6:67:87:1a:5b:8c:5e:c4:d6:0e:ad:1c:ad:
00:0c:6c:45:77:2e:19:f1:6f:e6:31:e0:f4:bc:00:c3:14:9f:
3d:fc:bb:7e:d7:66:5c:e3:f8:ca:72:26:82:fd:40:6b:89:60:
06:42:7e:16:41:78:81:52:e3:49:4c:9e:66:19:81:87:4e:cb:
85:1a:87:04:92:e5:dc:a5:b5:24:87:5b:9d:49:5a:a3:93:b0:
b0:99:e7:c3:66:72:37:95:4d:f1:50:07:b5:81:cf:1a:e1:7c:
6c:43:b2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 10:17:51 2025 by rpki-client