Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
File: KUk3Me_Mx0rVwnOHS5Ng96polGU.mft (raw, json)
Hash identifier: npId3NRk73uCv9LjLGf7UMbBx3rXNAleY9yu1VXoOjA=
Subject key identifier: 5B:DC:76:BC:00:36:14:E0:9D:B8:D0:EA:3A:71:10:9A:E3:50:43:FB
Authority key identifier: 29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
Certificate issuer: /CN=29493731efccc74ad5c273874b9360f7aa689465
Certificate serial: 0196CB736DB74B8124973CA96520AEA3A76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 21:01:01 +0000
Manifest this update: Tue 13 May 2025 21:01:01 +0000
Manifest next update: Wed 14 May 2025 21:01:01 +0000
Files and hashes: 1: KUk3Me_Mx0rVwnOHS5Ng96polGU.crl (hash: 4mAeTu6huONMO46oR11/Rs9rSX+BJhBV/aaUi6TNKNk=)
2: Xiq-7Jev0boBEtsil-XGVvUzgqg.roa (hash: Xk6kyPCoONS0HAtum1UvzVR1hPVGojYHRenom/WPJ28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:73:6d:b7:4b:81:24:97:3c:a9:65:20:ae:a3:a7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29493731efccc74ad5c273874b9360f7aa689465
Validity
Not Before: May 13 21:01:01 2025 GMT
Not After : May 14 21:01:01 2025 GMT
Subject: CN=5bdc76bc003614e09db8d0ea3a71109ae35043fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5f:0a:a2:f8:b8:77:6a:a5:a1:d7:03:60:ba:
99:09:f1:78:7d:bd:84:dc:b7:cf:41:ae:2c:c5:dd:
c7:86:61:ea:1c:e5:cf:d7:bd:a5:45:42:0a:11:c4:
79:33:20:71:a2:c5:30:0d:07:e6:86:ab:d4:85:a6:
28:20:f6:ef:d5:09:ff:76:d5:c3:cc:13:b3:7e:02:
f5:3b:5f:cb:ff:e2:80:ec:ac:24:3c:b2:83:14:9f:
1c:f6:0f:da:5f:89:6e:8d:a6:03:e0:94:0b:ee:f6:
f7:f0:4e:c2:f9:59:40:be:ce:a9:e1:4e:23:a5:5b:
eb:05:03:26:f3:ed:ba:6e:60:f1:d5:c6:75:36:9c:
02:43:59:0d:34:74:c4:d5:34:c1:af:48:2e:e7:9f:
79:f5:f9:b3:31:76:61:27:14:23:b9:e7:2e:4e:dd:
e4:5d:dc:16:7f:7a:f8:63:8e:4e:1b:5e:b4:d4:45:
4b:34:58:9d:d7:9f:eb:e3:dc:ea:d7:93:36:34:40:
bb:fd:c9:c4:dc:05:01:60:fb:fa:f9:e9:3b:e6:69:
00:c5:46:ab:94:f0:b3:87:d5:33:6d:33:5f:50:e9:
cc:91:6f:a6:e9:61:bd:c7:bb:50:0a:64:63:0e:b3:
e9:cb:59:f0:ca:0e:72:f1:1e:0b:ab:a3:68:2a:d7:
bb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:DC:76:BC:00:36:14:E0:9D:B8:D0:EA:3A:71:10:9A:E3:50:43:FB
X509v3 Authority Key Identifier:
keyid:29:49:37:31:EF:CC:C7:4A:D5:C2:73:87:4B:93:60:F7:AA:68:94:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KUk3Me_Mx0rVwnOHS5Ng96polGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/af4c09-c8c2-4893-a10b-0cd8a69729b7/1/KUk3Me_Mx0rVwnOHS5Ng96polGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f3:2a:d9:d3:10:cd:c8:0c:25:0c:00:04:13:27:b6:b1:13:
60:d6:24:53:23:4e:16:8b:e7:50:34:f5:bc:f0:f7:c4:08:52:
dd:34:08:98:32:ae:61:9d:79:fb:37:85:1c:4d:ee:2f:19:91:
37:0b:0a:69:38:56:e7:11:5b:0d:f5:d9:f6:04:71:a0:74:f8:
f6:25:6d:c5:d4:30:3d:0d:19:36:74:c7:72:f0:59:72:b1:3b:
2d:4f:3a:39:67:f2:89:0b:6d:63:66:26:98:76:6d:01:4c:8f:
35:b2:e9:d4:97:17:2f:d9:ce:06:1e:54:c4:df:6c:e0:c2:b7:
6a:a2:d3:b2:9d:59:24:97:65:7f:73:5d:4c:bf:b2:f4:25:07:
d9:f9:ff:14:30:fc:a2:92:19:1d:e6:72:04:e7:0d:16:ef:4f:
c1:ea:35:6b:13:f1:81:e7:e7:e2:3b:05:75:12:60:50:d2:d9:
8e:39:3d:0a:ad:a7:05:45:f6:a1:3e:22:d0:ca:f7:44:f4:f9:
18:c4:a1:34:07:bc:3c:db:20:54:c9:e0:66:b6:00:54:6c:22:
0e:2e:48:97:4a:61:8c:d2:ea:51:e9:65:47:51:17:8b:d8:3b:
d5:8f:0f:db:ad:d6:b3:d0:6f:4b:79:73:73:39:45:56:5a:9e:
37:d5:ad:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:24:05 2025 by rpki-client