Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: vDcce2CwBdkxwZfF11uN6Nqi7g6SQkYSirpzHzXuX3k=
Subject key identifier: F4:BF:16:FB:7A:D6:81:DE:3D:08:A4:01:C8:EF:3D:68:70:EF:9E:70
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 0196C194584E532C45A81F9BB0AA599338D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1537
Signing time: Sun 11 May 2025 23:00:46 +0000
Manifest this update: Sun 11 May 2025 23:00:46 +0000
Manifest next update: Mon 12 May 2025 23:00:46 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: xjX6YmENavSFNWi7Lj5bP5ifdtzLvqTsGRtWh8hXuuw=)
2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:58:4e:53:2c:45:a8:1f:9b:b0:aa:59:93:38:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: May 11 23:00:46 2025 GMT
Not After : May 12 23:00:46 2025 GMT
Subject: CN=f4bf16fb7ad681de3d08a401c8ef3d6870ef9e70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:a0:30:55:2e:cd:6e:fb:71:7c:4a:23:6a:
81:18:7f:42:44:3b:95:4f:48:8a:91:de:4c:8f:55:
32:2d:6c:dc:40:fe:cf:a2:39:1d:e6:e3:f9:79:22:
d6:2c:b4:5a:de:ab:bf:84:23:56:be:d3:42:60:05:
50:7a:45:39:5e:a7:cc:08:3d:f5:3d:03:97:8c:ae:
09:72:e6:95:c4:0b:98:05:77:e0:32:9a:cd:7b:8f:
04:38:ce:5e:58:0d:2e:0e:ad:f9:05:97:09:2f:fc:
1d:15:c9:e4:07:43:17:d7:f1:b1:18:6b:fc:a9:f0:
91:69:0f:87:8a:c0:8b:c2:4e:49:8c:94:67:25:77:
af:58:e8:e5:7c:9b:9b:92:79:86:1b:37:bf:5c:77:
57:a8:68:69:58:09:f0:80:b9:2d:ca:d6:f7:86:ce:
c5:8b:a2:f4:f0:d9:f3:23:6c:ab:f0:f9:08:d0:c3:
bd:ff:d2:03:73:b7:6d:dc:dd:28:35:6e:0e:ce:f9:
8c:cd:79:fc:55:bf:be:43:25:a3:2b:c3:51:cc:1c:
c4:09:d5:29:53:d8:a9:6a:f5:62:16:f9:ff:20:8c:
00:e7:af:1b:c8:25:69:c9:86:c1:81:9d:60:bb:66:
e0:ae:d7:56:a2:b6:80:88:55:e0:be:6c:ef:ca:0f:
c1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BF:16:FB:7A:D6:81:DE:3D:08:A4:01:C8:EF:3D:68:70:EF:9E:70
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:03:76:44:3c:30:3a:a0:b0:57:0f:30:ab:69:92:4b:18:9b:
b7:2d:78:93:54:1a:84:b9:a5:b7:2a:2d:da:f0:96:97:6e:02:
84:55:0a:79:c0:5e:98:c7:23:07:75:8d:a2:34:eb:7c:8d:82:
aa:48:cf:5b:bf:b8:8d:9c:c4:02:33:8b:7e:ab:7f:cf:90:da:
03:48:d7:5a:4e:a2:7d:ca:ea:93:04:fd:28:2c:7e:26:e2:9b:
01:ba:03:30:dc:c5:fd:a9:b5:fe:66:02:6a:b4:3e:b3:3c:22:
32:0a:70:20:e7:14:9c:40:70:98:bd:9d:6f:82:67:6a:89:e3:
ee:ed:36:cc:a9:3f:4c:a1:9c:54:4e:2f:e9:49:5d:1c:1e:07:
36:ac:cf:ca:dd:fd:0a:5f:23:ed:f3:5e:4f:7f:d6:c3:f6:1e:
5b:a0:82:c5:03:bc:b4:c9:70:e0:9e:68:ab:a6:9d:7b:5d:59:
96:2a:e6:b8:5d:ae:52:39:fc:9c:3f:28:e9:32:50:ee:c9:b3:
1b:cb:a8:a4:65:9f:7a:e2:3f:e8:f2:3d:97:70:bf:0a:bd:f3:
53:02:03:3f:01:6b:8b:27:79:93:89:a9:53:c6:6c:20:9b:5b:
c7:13:aa:62:18:ab:12:e6:6e:18:0f:d0:e7:65:14:74:b8:ca:
4e:23:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:57:31 2025 by rpki-client