Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
File: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft (raw, json)
Hash identifier: rxOGXRWI2XVuwVbMCtqjd3I4OanMKiWdXHNCFn/e8v8=
Subject key identifier: 1B:D2:50:29:E5:D5:87:B3:3C:F7:8B:F8:6E:D4:07:99:25:6C:B3:0A
Authority key identifier: 29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
Certificate issuer: /CN=2947987768647eeb8a0f3860c44176247ce6fc59
Certificate serial: 0196B5227130F2363FC4CCB4B0D38D1C28C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
Manifest number: 0D47
Signing time: Fri 09 May 2025 13:00:55 +0000
Manifest this update: Fri 09 May 2025 13:00:55 +0000
Manifest next update: Sat 10 May 2025 13:00:55 +0000
Files and hashes: 1: KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl (hash: ChL+ymtO1Q4YZGTfMMBH8ipJNF5wxsKv7ZWTK6Rx2vI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:22:71:30:f2:36:3f:c4:cc:b4:b0:d3:8d:1c:28:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2947987768647eeb8a0f3860c44176247ce6fc59
Validity
Not Before: May 9 13:00:55 2025 GMT
Not After : May 10 13:00:55 2025 GMT
Subject: CN=1bd25029e5d587b33cf78bf86ed40799256cb30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:17:18:ae:78:61:ed:3c:b5:cc:a2:d3:e0:b9:
ee:dc:c1:b3:c0:6a:27:55:eb:3e:53:a3:f1:c5:e6:
47:70:b5:7c:b9:0e:ab:8c:a8:31:b4:95:81:16:bc:
c6:70:a4:09:49:c7:c3:fa:34:27:07:24:be:9d:c8:
e9:0c:f2:8c:26:8b:27:9a:17:fc:46:5a:eb:92:73:
c2:de:25:c5:18:52:a0:8f:6a:bd:b5:09:14:8b:a0:
37:ff:df:0f:28:45:43:72:c6:dd:55:f3:04:96:58:
1d:0c:ab:7b:06:ec:03:d5:dc:cb:6b:c7:80:4a:55:
65:0f:b1:8f:96:ed:9f:0e:13:7e:6d:50:92:16:61:
a4:24:66:45:97:ec:44:23:b1:69:6e:dd:79:6f:c6:
8c:cd:6f:b9:19:18:5e:b5:eb:53:5c:81:89:f2:96:
c3:73:5a:70:df:f1:5a:62:25:6b:ab:0c:ae:2f:3f:
a4:9e:ed:78:c3:af:01:2a:91:7b:1d:02:9c:36:e8:
73:88:c3:64:34:b1:43:03:31:31:00:64:6b:46:24:
74:6c:20:b2:56:f0:54:9e:4b:17:de:f1:ba:5b:41:
eb:f4:46:17:2f:07:88:ac:4a:e3:b4:c1:83:2f:7c:
0b:df:dd:40:e7:6a:a1:5e:ed:4e:a1:6d:f5:bf:3c:
77:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:50:29:E5:D5:87:B3:3C:F7:8B:F8:6E:D4:07:99:25:6C:B3:0A
X509v3 Authority Key Identifier:
keyid:29:47:98:77:68:64:7E:EB:8A:0F:38:60:C4:41:76:24:7C:E6:FC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/edefb3-138d-4ae6-9487-5dab1b4a5c61/1/KUeYd2hkfuuKDzhgxEF2JHzm_Fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:43:04:27:15:0a:be:ae:3e:80:11:e1:71:5f:ae:72:de:7e:
d7:42:59:92:e8:3d:78:33:8f:ce:66:1c:74:13:a9:ef:89:7b:
30:dc:1c:c8:43:10:a3:de:23:c5:f3:52:4f:68:a3:2d:a4:43:
35:4c:97:06:b0:cb:ba:2d:40:7e:18:ef:96:b3:5f:a0:4c:f5:
6a:9a:b1:a8:90:b6:5d:6c:cc:ce:bd:98:db:50:c9:2b:49:8c:
43:03:64:f4:14:7f:a1:88:de:bd:21:9e:54:db:1b:4b:f2:12:
8f:1c:34:15:ac:c5:82:07:88:41:f1:4b:bc:23:eb:77:3b:a6:
dd:c5:2c:87:32:05:65:37:91:85:8b:18:5d:8b:d3:1f:00:f2:
9f:ee:46:8c:ee:f5:bb:14:2f:98:6a:2f:11:0b:a5:09:e9:a4:
d7:ea:15:c5:b5:84:85:f9:4b:fb:71:92:0a:25:ad:10:fc:93:
ca:03:c0:67:7b:20:16:e3:8d:aa:26:52:21:63:80:47:79:bd:
7d:f8:4e:51:29:a1:7d:b5:07:d5:f0:3e:b8:3c:b9:45:f5:24:
f1:52:23:f4:f0:43:0d:6f:44:4d:c5:56:6f:57:20:e2:7f:37:
64:7b:e5:fc:93:ae:09:cb:3d:2f:45:3f:90:d7:e1:93:1c:d4:
f1:b1:df:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 17:52:48 2025 by rpki-client