Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
File: KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft (raw, json)
Hash identifier: q2tJli3kLVYmA2CAhZYtTwOWjveRui/n2saV8L2stz4=
Subject key identifier: 38:15:2D:ED:4B:40:AD:B9:3C:22:CC:17:61:47:44:C4:5C:C5:35:DA
Authority key identifier: 28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
Certificate issuer: /CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Certificate serial: 0196DB8ABF724D3161AB1FF73671ADA5CBAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
Manifest number: 1441
Signing time: Sat 17 May 2025 00:00:24 +0000
Manifest this update: Sat 17 May 2025 00:00:24 +0000
Manifest next update: Sun 18 May 2025 00:00:24 +0000
Files and hashes: 1: KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl (hash: ItNTba2BurspyfBbpDb3xW+uPumpeWp0V8crxIYmyog=)
2: zzN2Fg2txvi4HpK8ys6lkpN5ODw.roa (hash: xRdPuuQI3JcVUeXoif3h7qYjCY0yxLycmnxRLYfe7Xk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 May 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:db:8a:bf:72:4d:31:61:ab:1f:f7:36:71:ad:a5:cb:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2895fbcbcf88d1ad9b19fc42c7aa11ad3d2a7ea0
Validity
Not Before: May 17 00:00:24 2025 GMT
Not After : May 18 00:00:24 2025 GMT
Subject: CN=38152ded4b40adb93c22cc17614744c45cc535da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:43:de:1e:62:24:6a:d8:8f:49:d4:3a:e2:d3:
bb:4b:54:27:19:5e:ae:f0:d0:13:01:af:7c:7c:c6:
ca:ef:ac:3e:71:25:57:93:c9:9d:5f:5c:9f:32:cc:
db:1f:d9:29:a3:92:47:b0:23:18:a1:8c:1b:b9:3c:
51:b7:82:8a:34:96:c6:fb:aa:4a:16:44:fe:2a:b3:
2c:cd:5c:ab:2d:23:01:c4:a4:ea:79:25:1a:e0:7c:
34:2e:91:49:e9:87:42:01:16:90:29:d7:f5:9c:f5:
c8:08:e7:d5:73:ab:17:2c:90:68:ac:2f:58:07:3a:
2c:ea:78:14:c8:12:33:f6:4e:cf:00:84:fb:31:67:
09:bb:89:45:29:9b:c5:35:60:0d:da:78:4b:10:75:
39:98:9f:a0:ab:e5:53:42:4b:0e:fb:67:10:3e:f2:
4e:20:d1:e9:5b:30:aa:31:c4:b7:34:8e:cc:f8:99:
90:26:5f:8e:a7:c0:9d:19:d4:0d:a4:80:58:de:42:
ce:95:4c:c0:45:e3:01:26:56:24:2e:46:69:ab:0a:
2c:df:4f:68:b4:85:57:66:7b:5f:a0:78:a3:65:42:
b6:7d:7f:31:35:da:d5:80:b2:5c:64:26:00:76:ae:
82:02:e2:27:f6:5d:1f:6c:1e:37:8b:32:25:98:48:
b8:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:15:2D:ED:4B:40:AD:B9:3C:22:CC:17:61:47:44:C4:5C:C5:35:DA
X509v3 Authority Key Identifier:
keyid:28:95:FB:CB:CF:88:D1:AD:9B:19:FC:42:C7:AA:11:AD:3D:2A:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KJX7y8-I0a2bGfxCx6oRrT0qfqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e5b5ab-6af5-43d5-b4e2-4966b3cfc87d/1/KJX7y8-I0a2bGfxCx6oRrT0qfqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:38:bd:13:e2:3d:62:a1:78:06:13:d4:14:e9:13:d5:e4:a4:
b8:39:f0:c1:ed:15:51:50:36:ed:53:c1:a4:66:60:4e:37:e4:
1f:39:24:1e:8e:96:c3:39:3e:ed:6f:79:88:3b:1d:dd:d6:e9:
c5:c3:f9:ee:e1:97:d7:57:2c:d0:b4:35:81:d7:3a:c8:ba:58:
ac:59:41:b3:59:c2:0d:9d:86:ad:40:7d:31:87:1d:8f:a5:85:
3f:27:f0:b1:51:21:19:14:08:3d:8c:2d:e1:f3:fe:f5:ad:82:
84:87:66:5e:88:8c:2e:26:bb:e6:be:a6:80:5a:2b:1a:ca:24:
73:59:2a:9f:7e:96:76:4a:eb:ce:82:14:c3:0d:bb:83:87:29:
4a:32:e5:6a:b0:fa:2a:3a:47:b2:24:26:d6:68:ff:35:09:18:
76:ae:2a:90:31:9e:b2:71:ac:17:69:66:d8:30:3d:49:40:3d:
59:5e:d8:95:b9:c6:b3:5c:d6:49:de:e5:db:b6:10:c3:ac:e0:
35:0f:51:c3:f7:ff:9b:e0:93:e1:dd:8a:7c:bd:02:f4:d2:1b:
11:34:aa:72:46:70:42:f6:d2:33:ac:ef:ab:d0:2b:5a:1a:14:
9a:71:1a:5c:ae:7a:bc:9d:d9:4a:bb:0a:5d:0f:96:2d:7f:ad:
69:b8:49:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 02:23:50 2025 by rpki-client