Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
File: koAW21XmZLpyHhmumrQxbBDZZwg.mft (raw, json)
Hash identifier: 8UlWeD6tFnNg3+UlkpbFsmlaCcEf0FhdgvU7lYgVWoA=
Subject key identifier: 1B:3C:48:51:35:76:27:D1:E4:DC:B2:72:5C:50:25:A0:06:67:A8:BA
Authority key identifier: 92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
Certificate issuer: /CN=928016db55e664ba721e19ae9ab4316c10d96708
Certificate serial: 01969F086EB02EAFC678AF7D1D48BA43EE34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 06:00:51 +0000
Manifest this update: Mon 05 May 2025 06:00:51 +0000
Manifest next update: Tue 06 May 2025 06:00:51 +0000
Files and hashes: 1: koAW21XmZLpyHhmumrQxbBDZZwg.crl (hash: Tylw2pztGtqCq4B11/Rn4yfQwnL2oSFm8eS0aiylbXk=)
2: wzuPiDmhnP7Nv_Dp2QI7h5h3O-g.roa (hash: 1/0ldOLBPILSR69hThfIMtpZUKnlBM4vs1kLEHBC5Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:08:6e:b0:2e:af:c6:78:af:7d:1d:48:ba:43:ee:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=928016db55e664ba721e19ae9ab4316c10d96708
Validity
Not Before: May 5 06:00:51 2025 GMT
Not After : May 6 06:00:51 2025 GMT
Subject: CN=1b3c4851357627d1e4dcb2725c5025a00667a8ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:a3:41:e5:81:0b:1d:61:18:5b:08:cf:dd:
aa:0c:8c:c4:de:58:b0:74:34:a2:2b:93:75:45:c1:
c2:b7:b3:4c:98:f5:dd:65:75:74:12:5d:ba:81:68:
a2:f8:73:a6:e4:13:cd:20:87:0c:91:8c:72:75:41:
49:9a:f8:7c:2b:17:90:ff:b8:b4:75:e4:0c:61:e0:
10:fc:99:b3:92:5f:bd:99:6e:04:54:70:19:d0:74:
0b:fc:9b:35:83:9a:a8:07:df:4f:ec:6c:ff:5b:da:
33:95:c6:fc:ff:44:39:69:1c:84:6d:3e:78:07:21:
ac:ef:32:22:23:99:c9:fc:84:77:3b:b8:8a:57:33:
70:ca:df:15:77:08:0b:c1:99:e2:ab:6b:cb:6b:9f:
bc:fb:7b:dc:92:d2:a2:31:32:48:3f:ef:51:1b:b1:
c2:21:34:6f:61:09:43:c3:93:bb:e5:f5:96:af:15:
ec:5c:b7:53:1f:67:3a:36:91:8a:b4:c1:7a:0f:7d:
f0:f2:0e:6d:9a:98:07:ee:ad:93:98:83:bc:23:14:
11:c8:f8:ae:b4:b0:bc:da:a1:02:20:7b:59:29:ce:
e4:10:5b:dd:74:39:dc:63:73:24:cb:91:b5:45:fc:
37:5c:87:e8:b5:cc:d5:9b:f2:fa:6e:4c:71:5f:12:
e1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:3C:48:51:35:76:27:D1:E4:DC:B2:72:5C:50:25:A0:06:67:A8:BA
X509v3 Authority Key Identifier:
keyid:92:80:16:DB:55:E6:64:BA:72:1E:19:AE:9A:B4:31:6C:10:D9:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/koAW21XmZLpyHhmumrQxbBDZZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/721a1c-cf39-4448-883b-e89cdab82e1c/1/koAW21XmZLpyHhmumrQxbBDZZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ba:35:ea:c7:db:41:26:1e:67:14:56:b5:ad:8c:c1:10:23:
d6:55:76:a1:1d:f4:72:0e:0b:a9:ed:2f:53:f8:a2:f3:03:4f:
fa:83:86:4c:17:2d:05:5c:7c:30:42:04:54:d2:32:63:e7:7a:
e4:09:0c:d3:dc:01:08:4e:ff:fa:8d:59:fc:fe:82:0f:e4:b8:
1e:b0:ee:29:c8:01:22:72:f6:15:97:04:5f:0a:2f:e4:29:c4:
b2:94:fc:b7:6e:64:8f:7d:b4:28:36:1d:d0:05:11:08:90:eb:
00:23:64:57:e8:36:46:63:73:77:bf:89:cc:eb:e6:e6:72:ca:
9e:52:ff:db:2a:6c:4b:c0:7d:6b:64:37:b8:b0:84:36:5b:84:
96:5d:b1:35:d4:94:21:7a:c0:f7:74:f5:cf:b7:60:81:fc:94:
fe:de:ac:12:13:b7:24:0f:77:6b:65:14:de:1e:50:af:a8:a5:
5c:03:73:c2:e2:fd:d6:a2:dd:c1:d7:b3:75:7d:f1:f3:d6:47:
a2:fd:b7:0c:5c:df:85:a9:3a:74:5e:5f:25:08:5e:0c:73:c3:
99:71:5a:85:a1:ce:c5:31:23:ac:99:00:f1:74:91:42:bf:23:
30:f9:62:20:cd:50:e6:d2:2d:a6:4d:0a:e9:08:3c:cd:77:c0:
42:52:55:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:08 2025 by rpki-client