Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
File: KkRyM2ydAqSIzdd1NNZfsUZewJo.mft (raw, json)
Hash identifier: U2yYHKiOCjtj0bYQzuQC05Ow7rGzhOXII2rcVHwNxxo=
Subject key identifier: FF:3C:4F:F6:F5:06:A8:E2:61:30:19:16:3F:1C:A4:35:AB:B2:91:42
Authority key identifier: 2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
Certificate issuer: /CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Certificate serial: 0196B7B5C4322804D7B8CF43EE2C4327DCAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
Manifest number: 1530
Signing time: Sat 10 May 2025 01:01:04 +0000
Manifest this update: Sat 10 May 2025 01:01:04 +0000
Manifest next update: Sun 11 May 2025 01:01:04 +0000
Files and hashes: 1: KkRyM2ydAqSIzdd1NNZfsUZewJo.crl (hash: wXxj0HE26PupmF6Z4sXvcbxrYiRKIX/BvTEv5iXKIxw=)
2: _x206HZGagtA6dAvfxStsmKc3n4.roa (hash: b78aj5rvx2Xy9g+pAEN4tSwQJDBl/+csOAL8uop4FGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 01:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:b5:c4:32:28:04:d7:b8:cf:43:ee:2c:43:27:dc:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a4472336c9d02a488cdd77534d65fb1465ec09a
Validity
Not Before: May 10 01:01:04 2025 GMT
Not After : May 11 01:01:04 2025 GMT
Subject: CN=ff3c4ff6f506a8e2613019163f1ca435abb29142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fc:70:b7:11:7d:e1:99:d6:10:9f:3e:58:12:
0c:92:6c:dc:86:06:1a:86:a0:77:64:29:30:da:81:
e0:da:d5:31:93:df:22:70:ef:37:3f:4f:34:c2:5a:
1e:f7:a0:5b:a7:15:f5:e4:d3:ee:76:f2:28:56:05:
87:fa:3d:db:e1:15:25:94:ac:74:a6:e4:ff:74:2e:
d4:e5:50:bd:bf:df:ea:5b:10:be:7d:41:b6:7c:22:
39:72:22:13:2e:d5:db:ef:2d:f2:9a:03:26:89:66:
d6:fc:67:b0:d3:34:a3:a3:10:ae:89:e7:bc:d3:ed:
ff:26:46:9f:be:25:5c:cb:e7:a7:f3:a4:c4:51:38:
74:bc:e1:6c:42:b2:7b:2f:e7:3b:d6:a0:1c:9c:7b:
35:b8:a8:b3:60:dc:61:e1:c4:b1:44:be:10:de:5d:
27:c4:aa:20:4a:80:ef:c2:61:50:de:61:c3:f0:75:
c4:38:b4:e1:b8:86:eb:c9:bb:da:5c:da:cd:11:e6:
c4:50:1b:eb:b0:79:e4:0b:ad:d8:c5:bd:9b:63:81:
ce:c3:06:40:71:55:45:86:4f:e3:fc:49:15:73:88:
15:6e:14:ca:6e:ee:17:65:d7:8b:5b:d8:08:74:41:
82:9d:78:ee:ef:2a:b8:5d:84:6a:67:ab:66:71:7b:
df:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:3C:4F:F6:F5:06:A8:E2:61:30:19:16:3F:1C:A4:35:AB:B2:91:42
X509v3 Authority Key Identifier:
keyid:2A:44:72:33:6C:9D:02:A4:88:CD:D7:75:34:D6:5F:B1:46:5E:C0:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KkRyM2ydAqSIzdd1NNZfsUZewJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/01db82-4172-4405-ab55-0086d02385d6/1/KkRyM2ydAqSIzdd1NNZfsUZewJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:0b:b9:d4:34:d5:16:d5:88:8a:cd:43:4a:18:06:78:c1:6c:
1e:c7:2c:6c:75:6b:23:70:f7:59:1d:61:57:d2:66:23:c3:aa:
45:1b:60:c8:96:9e:0d:2b:75:52:3b:04:7e:fb:7a:3c:81:97:
c2:cf:31:78:c8:f1:b6:78:83:b6:a3:6f:bc:ef:e5:2e:e3:d5:
62:b9:8b:b0:d0:02:fb:2b:ce:9a:b7:d9:ae:b9:f1:8a:fb:5c:
5f:ea:5c:bd:ab:9e:27:6e:4f:8e:47:b0:bf:45:29:85:a8:1c:
f5:08:b5:43:57:a6:f1:c7:81:0d:9e:ed:08:18:b1:3b:b1:f0:
3a:b3:66:7c:4e:e4:be:25:01:9e:16:54:bd:c5:d7:e9:5f:9d:
56:20:17:29:1b:09:75:bd:c5:72:22:e7:c0:68:91:85:71:2b:
e1:85:16:b1:ab:8a:a0:90:f3:b2:9e:0b:9b:1b:01:6c:ae:66:
16:60:d8:0a:a7:f4:ed:0b:c1:d9:48:40:6a:92:36:32:34:93:
41:74:60:50:fe:60:f2:35:84:87:ed:3b:7d:77:21:6c:1b:ea:
4f:69:4e:ed:18:c3:ae:e5:00:ef:19:f8:dc:83:8f:81:9f:fe:
48:45:36:71:d3:57:85:80:ef:f4:7a:85:c9:bf:3f:e0:1a:a1:
b4:1f:2c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 11:35:49 2025 by rpki-client