Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
File: KVV59bZz2-LrujSM-w9WEkzecEg.mft (raw, json)
Hash identifier: sfm9L4+R4JkXzGmC6TK8T4GZz8aab1BqQrIlbChxJA4=
Subject key identifier: 2E:FB:14:17:B1:0B:9E:18:91:54:88:CE:1F:E3:BA:11:81:A1:D1:41
Authority key identifier: 29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
Certificate issuer: /CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Certificate serial: 0196A79D944FEFA675B23CAC33443BC626C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
Manifest number: 152A
Signing time: Tue 06 May 2025 22:00:44 +0000
Manifest this update: Tue 06 May 2025 22:00:44 +0000
Manifest next update: Wed 07 May 2025 22:00:44 +0000
Files and hashes: 1: GLETZPGAzgEdqr3_Ju2Hw5dfeCc.roa (hash: 1ZSMTZbayji0IpT4/tlfR8iOgQX8cgSQ3hZYI5R5pYA=)
2: JVzuM8B6ofXxJRTwKSOh4uQnHZ8.roa (hash: 6kzBk5+13Ftt6UqtqHrn3x6NbCUjc2KzWe2+5j/AkQM=)
3: KVV59bZz2-LrujSM-w9WEkzecEg.crl (hash: 9G/C631kTEmR47LMAMoA71i5Dh9G0uwZenshefyXPuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a7:9d:94:4f:ef:a6:75:b2:3c:ac:33:44:3b:c6:26:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=295579f5b673dbe2ebba348cfb0f56124cde7048
Validity
Not Before: May 6 22:00:44 2025 GMT
Not After : May 7 22:00:44 2025 GMT
Subject: CN=2efb1417b10b9e18915488ce1fe3ba1181a1d141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:5a:f3:7d:30:94:c6:f0:f0:90:2d:72:15:
c5:ad:4c:5f:72:44:b7:ed:87:14:69:1e:49:b6:53:
c6:bd:5d:4c:ac:9e:d1:1c:8e:cb:4f:74:da:03:78:
dc:6d:b9:57:76:29:0e:11:2f:bb:85:74:d5:71:3b:
05:fd:82:d6:bb:00:c7:4d:d9:a0:75:50:83:c6:11:
c2:99:10:fd:4f:b1:f4:2e:55:21:38:ed:ae:ed:82:
5a:07:fc:cd:22:8f:b9:3c:3e:a9:b3:90:2d:97:4c:
52:d4:03:fb:54:4c:88:71:9b:96:a3:f0:16:6d:13:
74:2d:54:0b:ec:d7:55:26:44:78:c7:6a:46:ed:e1:
bc:3b:13:af:0e:a2:a9:49:88:a9:4a:14:35:1c:a9:
ff:ee:aa:cd:d7:ba:c5:d1:db:dc:0e:68:60:42:ee:
cf:46:dc:1e:5c:46:85:e8:68:41:b6:29:be:8e:59:
78:99:6f:ce:af:06:31:0d:de:e3:7b:a9:a1:32:f0:
7c:bb:67:d4:a9:d3:ec:4a:5f:92:39:37:cb:59:f5:
3b:56:5f:99:29:a0:96:05:26:bc:2d:12:b7:59:8f:
68:08:95:21:0c:de:09:63:89:82:ca:e1:af:c3:c1:
92:60:b2:69:2d:e3:cd:08:48:b8:89:ed:fa:64:1b:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:FB:14:17:B1:0B:9E:18:91:54:88:CE:1F:E3:BA:11:81:A1:D1:41
X509v3 Authority Key Identifier:
keyid:29:55:79:F5:B6:73:DB:E2:EB:BA:34:8C:FB:0F:56:12:4C:DE:70:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVV59bZz2-LrujSM-w9WEkzecEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/1574c9-01d5-48fd-980f-343c4d24c23b/1/KVV59bZz2-LrujSM-w9WEkzecEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:f9:8a:0a:c1:be:9e:6a:9e:2d:13:5a:98:b4:3b:90:b1:02:
40:5d:f1:88:00:c9:1a:f5:59:36:b5:81:81:ed:91:21:99:89:
c5:a1:37:eb:18:ae:a1:25:ee:a0:89:d5:44:57:40:16:72:91:
22:66:a8:2f:6f:0e:9c:e6:af:76:01:66:e5:aa:46:62:85:06:
ea:a0:76:c5:62:59:3d:c7:c7:e3:21:3f:c2:7b:ab:a1:7f:7d:
5c:c0:03:d8:fc:b1:ba:c9:94:cc:dd:2d:38:92:b7:c7:ac:31:
e3:b7:ee:de:2a:6a:22:b9:30:4d:53:cb:3c:fc:38:e2:b3:be:
46:70:ba:e9:66:9e:19:f2:8e:1d:fd:ff:da:bf:de:ed:fc:9c:
17:a9:55:cd:f9:ea:de:0a:30:79:7b:03:d9:23:16:13:e9:1b:
2e:f8:56:78:d7:11:40:16:cb:a9:ba:31:d4:43:ac:86:75:af:
ec:b9:42:19:1d:ea:e9:71:6b:13:0f:82:21:78:ba:50:e5:e9:
45:fa:f8:e6:97:f7:49:9f:ad:9a:8c:2c:83:f9:46:ab:24:ec:
1c:b7:27:b3:98:09:e6:d6:4b:5a:f4:72:c2:47:5e:ad:72:f7:
fb:70:c8:b5:28:a3:35:5b:24:c6:48:5d:fd:1a:eb:5f:75:fa:
e3:20:5e:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:32:26 2025 by rpki-client