Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: KYvpNP+LnKAxPTZDoimxUWF+Km3Och2F3tvCp0VaKw8=
Subject key identifier: AF:19:A2:2C:D1:79:67:BD:56:7A:45:B2:F8:43:9D:A5:3E:48:AB:A7
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 0196BB92C32F88BCFE2B417DC0A300688420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 0517
Signing time: Sat 10 May 2025 19:01:19 +0000
Manifest this update: Sat 10 May 2025 19:01:19 +0000
Manifest next update: Sun 11 May 2025 19:01:19 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: GBNhhj8kPwadzuklHjyWDYPH+BxcN57CkqH15tNEvgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:c3:2f:88:bc:fe:2b:41:7d:c0:a3:00:68:84:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: May 10 19:01:19 2025 GMT
Not After : May 11 19:01:19 2025 GMT
Subject: CN=af19a22cd17967bd567a45b2f8439da53e48aba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:29:60:4d:58:95:77:8f:07:5b:a6:5a:5b:1b:
d3:44:9a:64:a2:a9:e7:9c:dd:8b:ef:f0:c7:47:5d:
9e:22:cf:d8:87:3b:8a:3b:85:a2:49:49:37:66:f5:
e4:8d:a6:17:3d:d3:62:84:05:e1:13:9a:7a:40:cc:
4c:03:0e:63:3f:0d:bd:8f:a4:bf:a6:6f:e8:b0:48:
c1:07:9c:fa:b3:9a:79:64:bc:3b:cd:0a:18:5a:83:
50:2d:99:89:dd:4c:33:1e:93:35:06:ba:7d:78:bf:
9b:3b:f9:fd:85:04:3f:e3:72:78:0d:bb:37:4b:9b:
08:72:9e:3f:34:26:10:af:30:33:3f:95:ef:87:00:
b0:da:83:fe:8e:d5:35:42:34:62:b3:cd:cf:79:6f:
c5:65:44:84:d2:a0:66:38:81:75:ee:b3:1f:7d:92:
bc:79:20:1f:8d:5b:51:bb:70:cf:91:35:10:95:bc:
40:22:de:c8:99:7b:fa:24:77:b3:d4:6e:34:da:07:
e6:0e:81:52:3a:1d:56:72:94:f5:7b:a8:c7:42:9a:
a7:ec:32:aa:7b:37:8e:f3:da:06:a1:6f:76:cd:09:
8d:12:16:27:5e:b0:cb:00:db:3f:17:23:de:34:ff:
da:bf:e3:44:fb:30:bf:79:f3:61:09:3c:d8:d3:77:
77:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:A2:2C:D1:79:67:BD:56:7A:45:B2:F8:43:9D:A5:3E:48:AB:A7
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:06:a6:52:5b:02:33:72:f1:12:fa:85:37:b5:8b:fe:62:63:
f1:bf:72:f9:e8:49:54:5a:42:be:e3:66:d8:5f:ac:6f:1b:3f:
fb:7e:24:40:2c:0d:b0:48:dd:a5:f5:83:0f:0e:1f:9e:ad:68:
78:6c:bd:24:86:f6:96:c8:16:98:df:20:dc:08:1b:84:f7:03:
4f:3a:9f:14:6f:05:50:01:26:94:3c:23:28:ce:9f:1b:81:ed:
8c:af:04:a8:3f:a0:4a:86:38:57:be:78:95:31:24:ea:e9:a7:
12:ba:06:26:9b:12:db:b8:b5:11:34:e4:ee:dd:18:77:ee:29:
01:ed:a7:d7:e3:50:b1:7a:35:3e:69:ae:27:66:7b:2b:10:c5:
16:b8:36:fc:d0:56:b7:e2:97:3a:e5:2e:07:96:28:62:70:8b:
4b:1a:95:0d:8a:72:b8:aa:b7:a5:f0:0b:bd:a5:37:b5:9f:10:
ea:e5:b5:22:6b:fa:b2:e3:6c:52:33:3c:70:38:89:9f:78:8c:
02:34:01:2d:44:34:34:9f:0c:55:2d:a2:1f:d4:45:a1:eb:2c:
35:cb:b6:f4:10:21:d6:ae:c1:48:2f:0a:0b:03:9c:03:e1:6b:
f8:2d:05:82:1e:d8:cb:4a:00:89:e2:b7:52:46:a1:e6:f1:c1:
0d:ab:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:05:40 2025 by rpki-client