Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
File: kVijd10MXrOPIPDvmjYRBhpRlbM.mft (raw, json)
Hash identifier: BUBEl4dr+csZRU2sBbtb0BP2oedxTkuSpFVO3IKe82Q=
Subject key identifier: A0:2F:F5:2B:49:67:69:86:68:34:16:18:8D:61:28:BD:A3:AE:DD:C4
Authority key identifier: 91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
Certificate issuer: /CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Certificate serial: 0196A98C154E5841917D48916A9ACB28BBC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
Manifest number: 1527
Signing time: Wed 07 May 2025 07:00:52 +0000
Manifest this update: Wed 07 May 2025 07:00:52 +0000
Manifest next update: Thu 08 May 2025 07:00:52 +0000
Files and hashes: 1: kVijd10MXrOPIPDvmjYRBhpRlbM.crl (hash: Ys4+Nx3tKkbzjeOCYWnMsxYAJzbLE5G8bYsZ6xi8UgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a9:8c:15:4e:58:41:91:7d:48:91:6a:9a:cb:28:bb:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9158a3775d0c5eb38f20f0ef9a3611061a5195b3
Validity
Not Before: May 7 07:00:52 2025 GMT
Not After : May 8 07:00:52 2025 GMT
Subject: CN=a02ff52b49676986683416188d6128bda3aeddc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:56:58:b1:42:10:88:80:07:5b:68:ca:6d:f1:
0a:51:fb:09:3d:a3:3b:13:0e:01:e2:46:ca:fb:a0:
4a:c4:f3:6c:51:e5:23:b4:54:d4:bb:98:cb:57:e5:
7d:8b:85:20:ca:a1:37:25:19:83:01:35:8c:35:8e:
8b:24:84:aa:2a:8c:9d:42:1c:fe:32:bf:60:3c:c3:
e2:c3:75:81:19:ed:e3:8b:9b:44:73:1b:af:06:a5:
90:39:36:22:18:92:c7:69:b4:14:66:7c:90:9e:25:
ae:af:95:e3:d1:b2:96:d8:7d:27:11:79:38:2d:04:
f1:14:3d:5c:8f:4a:f8:e8:3b:59:72:02:be:a0:b8:
1e:79:2c:6a:8e:de:7d:47:da:e2:ed:d1:d1:03:92:
8f:fe:a8:6d:ff:fb:03:aa:ec:93:88:e0:0b:7c:4c:
70:60:b0:c5:47:b4:ab:20:7e:8b:ae:54:55:b3:6e:
f6:6c:69:15:5a:71:6f:d8:64:43:16:98:af:9d:8a:
01:2d:cd:af:69:b5:81:bd:cc:e7:3b:f3:0f:2f:d4:
45:c8:19:23:6b:f6:72:b5:07:bc:a6:2a:4d:08:d6:
39:75:55:ac:40:f6:e4:78:dd:da:eb:21:c5:fb:cd:
03:ba:10:87:6b:f2:2c:ca:c8:fb:47:4f:04:c6:bd:
79:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:2F:F5:2B:49:67:69:86:68:34:16:18:8D:61:28:BD:A3:AE:DD:C4
X509v3 Authority Key Identifier:
keyid:91:58:A3:77:5D:0C:5E:B3:8F:20:F0:EF:9A:36:11:06:1A:51:95:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVijd10MXrOPIPDvmjYRBhpRlbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5c765c-83f3-45d1-8930-8d04f8779423/1/kVijd10MXrOPIPDvmjYRBhpRlbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:39:99:ec:3a:3b:1f:ac:e5:be:f5:f0:08:a7:84:22:ba:
95:19:ed:42:2d:bc:5d:b6:1e:ec:51:1f:2a:e3:70:b4:1e:44:
f3:63:a1:1a:af:48:d8:78:00:f5:87:e0:d8:6b:90:eb:93:54:
19:ec:98:3b:c9:1e:76:24:0c:22:85:70:27:87:bd:d4:e5:3a:
83:83:13:97:17:f4:fb:4f:71:17:cb:29:f1:40:54:22:c7:48:
34:75:17:f0:73:ed:f7:c5:5e:b1:6a:e7:6a:34:99:3d:27:14:
ac:7b:9b:93:fb:bb:2a:4e:fd:91:93:a6:e5:0d:0a:82:02:e5:
f9:21:03:62:14:df:23:90:40:91:31:ce:a3:af:cc:08:7e:bb:
87:23:ce:c9:34:a3:d1:d1:9a:be:31:3c:0e:76:94:32:5c:65:
8a:65:b6:94:66:9a:43:b3:e6:7c:74:ab:c3:3f:ec:84:9a:b8:
82:92:8f:94:b9:aa:dd:64:08:55:3c:34:76:45:6d:68:31:73:
4e:4b:e0:2d:e3:56:e1:73:74:b4:e8:f9:d6:31:10:ab:10:00:
7b:50:ce:a8:74:4f:02:18:94:41:f2:7d:11:20:96:31:36:e9:
b2:f7:06:90:52:88:2c:f6:bc:83:51:b0:73:fe:8e:e0:92:16:
78:e2:a0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 10:54:48 2025 by rpki-client