Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: SsDjrLaB4P7DRE99GarFSB4bad0XgC+b4m0eEBNAq8k=
Subject key identifier: 4B:77:B8:92:5A:E1:E5:E0:FD:7E:CE:6D:3B:AE:31:6F:D9:EC:22:A8
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 0196BCDC0D2030D5F4FBC8A597EDD933D9B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 1530
Signing time: Sun 11 May 2025 01:00:59 +0000
Manifest this update: Sun 11 May 2025 01:00:59 +0000
Manifest next update: Mon 12 May 2025 01:00:59 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: GgKnqXIftOmE0tbtuI9X572nWkh89QNXwKMTvwt4t9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:dc:0d:20:30:d5:f4:fb:c8:a5:97:ed:d9:33:d9:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: May 11 01:00:59 2025 GMT
Not After : May 12 01:00:59 2025 GMT
Subject: CN=4b77b8925ae1e5e0fd7ece6d3bae316fd9ec22a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:39:0f:77:44:da:b6:fb:9c:84:5a:20:b1:
b9:92:13:41:a2:4e:31:af:da:82:32:04:da:2e:9f:
2f:08:ff:cb:f0:f2:4f:9e:b9:71:c7:a7:4a:c9:16:
e4:3c:35:06:d9:2f:58:6f:4d:c3:9e:9f:03:e8:6a:
d5:eb:5d:5c:29:54:85:15:a0:2b:26:df:11:4d:d7:
df:10:05:d4:b8:57:c5:cd:cf:eb:07:1f:ed:6b:16:
c0:02:eb:6e:38:ef:60:0d:b4:1d:8e:26:52:48:cd:
7a:8f:53:d1:e6:ae:fa:93:54:6c:71:10:2a:1e:2e:
1e:1c:33:26:c7:2f:dc:d2:43:bf:b8:e3:3f:81:0d:
9e:49:30:ec:8a:b2:0d:cf:6a:80:1c:00:c8:6a:f7:
60:b3:c5:27:39:45:36:c0:0e:d1:52:5e:f0:fe:2d:
2f:f3:ca:31:b9:0d:44:c6:2d:df:57:eb:c1:0d:56:
4a:4a:6c:d3:46:25:27:2c:87:50:05:99:67:75:63:
d8:7d:25:82:a8:e7:b5:41:c3:50:85:2e:3c:ee:36:
90:f8:d3:e9:f1:c9:a4:4d:7a:e0:60:4f:a2:30:b7:
01:ba:f3:6a:fe:cc:65:97:aa:94:2e:91:23:a2:e5:
11:9a:9a:10:b5:b1:6a:ca:3b:84:84:0b:f5:01:90:
07:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:B8:92:5A:E1:E5:E0:FD:7E:CE:6D:3B:AE:31:6F:D9:EC:22:A8
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:86:36:c1:e8:e6:d1:96:46:b6:8f:7d:b7:51:7e:29:70:47:
97:e0:2c:89:07:bc:c7:4c:30:45:12:f2:e6:22:00:ce:7c:f1:
9a:fe:f5:f2:45:95:0c:e4:72:25:ba:44:0d:dc:33:b1:bd:e5:
42:42:f8:32:3b:0a:c6:be:37:47:90:19:8a:3f:18:64:a5:73:
f1:9e:55:47:15:08:a1:43:35:0d:0d:b3:8b:8a:a5:29:96:a4:
37:d7:41:6f:20:ce:fd:db:4b:d8:b0:21:af:1a:bb:75:b8:92:
a4:b8:f6:73:7c:c1:a9:1c:31:2d:48:11:25:b4:71:60:36:cc:
fc:62:d5:bf:42:43:04:25:7b:a1:95:cf:41:76:02:7f:2a:45:
a3:b3:8e:6e:95:87:59:8b:49:5d:d0:e8:c1:85:2a:d1:3a:91:
a9:55:5c:12:ec:0c:08:18:0f:09:59:fc:dd:7e:f3:26:89:06:
e0:82:7e:b9:0a:c4:56:f2:5e:72:a9:1c:3a:e6:ff:b8:02:46:
9c:ec:98:b3:b1:82:4d:a8:ca:25:60:b9:1d:12:81:78:73:37:
5c:de:77:b0:72:aa:a5:17:8d:13:8c:22:66:58:dd:a7:a1:a2:
06:bd:00:0a:f7:f5:c9:98:dd:88:83:c4:a4:d4:2d:04:ea:9d:
5f:4a:a1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:25:00 2025 by rpki-client