Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: Os2pJaq75NyMfv90nKBMQiZr4WaJ7pgJgIdiUqZsigQ=
Subject key identifier: 1A:D1:DC:B5:89:C5:39:CA:D9:D0:F0:DE:BA:BD:0C:0A:BD:26:DB:0E
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 01969D50EDB7D5B0CA0A908BD21C497B869C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 085B
Signing time: Sun 04 May 2025 22:00:48 +0000
Manifest this update: Sun 04 May 2025 22:00:48 +0000
Manifest next update: Mon 05 May 2025 22:00:48 +0000
Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: 5Xrqyo4DdIxeac2ua3ZS4ypcLIwTYmngKtKmldI0eSQ=)
2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:50:ed:b7:d5:b0:ca:0a:90:8b:d2:1c:49:7b:86:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: May 4 22:00:48 2025 GMT
Not After : May 5 22:00:48 2025 GMT
Subject: CN=1ad1dcb589c539cad9d0f0debabd0c0abd26db0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:51:09:97:7b:f8:65:0c:53:2d:bc:f1:3d:fc:
50:d7:92:03:7a:42:92:ff:40:f0:44:be:6f:71:ec:
57:ee:be:5d:73:44:be:01:e1:99:97:76:2c:d2:e6:
62:e3:37:82:23:50:c0:0f:b0:4b:3b:78:c0:ce:2d:
22:1d:82:53:55:aa:69:d5:3c:87:a6:47:28:de:d1:
e2:3d:84:18:ed:c8:a8:e7:b8:f5:d8:13:e0:07:13:
a3:a6:31:48:1c:07:04:76:d7:47:94:5d:79:db:96:
a3:ae:1e:80:b5:21:25:40:64:84:26:05:62:f9:e1:
46:72:7c:c4:f6:6e:54:b3:f7:0e:91:76:b7:22:67:
d9:f3:09:91:d9:32:5b:dd:a2:31:c2:ca:2a:c8:3a:
32:e7:f6:08:ff:ac:8c:7e:e6:34:77:ec:ca:49:1a:
b1:1c:8e:e2:9f:d0:f7:28:af:9e:71:3c:81:ea:44:
5c:8b:91:af:a2:f5:de:10:8f:1e:ee:bf:7a:a0:45:
50:39:6d:b5:9a:29:7d:06:69:c6:65:bc:61:ab:69:
2b:93:c3:e7:8f:2d:c4:2f:38:78:c3:bc:d3:e4:cb:
03:a9:7c:de:c9:8f:3d:f4:4d:87:c8:43:64:e3:c6:
6f:65:85:48:4d:56:48:97:10:96:12:9f:19:d5:7e:
19:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:D1:DC:B5:89:C5:39:CA:D9:D0:F0:DE:BA:BD:0C:0A:BD:26:DB:0E
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:07:72:77:1b:26:26:4e:24:8b:4a:9c:94:39:7a:df:f0:93:
0e:94:3c:82:75:80:84:88:dc:14:90:f5:08:bf:92:58:b4:85:
47:18:ad:27:f7:ed:52:08:a3:7a:d6:3d:86:25:cd:93:7c:be:
a1:c1:0a:01:43:dd:40:c5:f5:f2:48:6e:7f:e4:72:3c:d0:67:
68:91:cd:17:7a:88:ae:70:55:3b:a7:18:28:39:2e:6c:20:6d:
00:4e:86:5e:a0:80:fc:9d:f7:f7:f3:5d:5e:d2:fb:e0:01:eb:
54:e9:75:76:0f:f2:72:b8:3b:97:9f:19:c0:42:ab:37:d1:85:
d5:f3:8a:6b:30:65:21:80:62:58:a2:62:df:2c:e1:cc:8f:27:
9f:46:d1:02:52:43:17:4f:fa:7d:c1:31:80:71:fc:63:b9:f9:
1e:d1:f4:88:ed:e0:36:26:89:f2:52:3e:27:35:76:1d:8a:0a:
af:ba:8d:94:96:14:a0:5d:2f:9b:28:e3:30:66:0f:96:af:1c:
fb:6e:f7:6a:ac:00:4c:29:a0:d4:ce:e5:5b:4c:f9:aa:ee:68:
0c:93:c1:f7:b4:c6:69:77:a5:ce:c2:59:2a:4d:3a:5b:b7:cb:
5f:c8:04:b2:d7:fd:22:32:f3:de:ba:22:ba:c0:49:1a:9c:ce:
1d:fe:36:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:08:09 2025 by rpki-client