Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
File: K-U9NAqL9Hwb800yVeEC77GBrRk.mft (raw, json)
Hash identifier: wLp+QwMTpjROGO51YRI8DxUZa0ISsDrWpuZce0JmlOY=
Subject key identifier: 02:96:AD:61:81:15:54:FD:66:38:2C:57:83:24:4D:BA:C8:9D:5D:58
Authority key identifier: 2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
Certificate issuer: /CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Certificate serial: 0196C194248891EC7FB32B7DACFBD8F4B8E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
Manifest number: 098C
Signing time: Sun 11 May 2025 23:00:33 +0000
Manifest this update: Sun 11 May 2025 23:00:33 +0000
Manifest next update: Mon 12 May 2025 23:00:33 +0000
Files and hashes: 1: K-U9NAqL9Hwb800yVeEC77GBrRk.crl (hash: zfv/BTqT1bbLpSoZg2vS3AdBi5jN7g6Z7Zr+Xdx/Wqo=)
2: QmDTegVSmEYF6fnpKbqY_97oaSM.roa (hash: tHb5J/NaAqeZ3yJpUfHC3cRpeW6+mrRMysLZDeKxz2M=)
3: _tQcgZijvm9qlNfbL3oLbTBqXKw.roa (hash: xWDEvLw1mwcjLwMZNAz8Pf0/GCXvJ3lHopahWXf20MA=)
4: y4GLfgEHHvh7-yMgUWBtC7KLuEc.roa (hash: dQpKnxbZerxvWzLT4LUfokJhZeXYIR/y034iOg9NMks=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 23:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:94:24:88:91:ec:7f:b3:2b:7d:ac:fb:d8:f4:b8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2be53d340a8bf47c1bf34d3255e102efb181ad19
Validity
Not Before: May 11 23:00:33 2025 GMT
Not After : May 12 23:00:33 2025 GMT
Subject: CN=0296ad61811554fd66382c5783244dbac89d5d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7c:69:e4:ba:6c:36:c1:61:3f:f1:58:dc:63:
a0:95:af:7b:22:20:d7:2d:d7:c3:24:a1:2c:c1:04:
67:34:8d:e6:d0:8d:99:e0:d3:66:df:37:e3:ea:2e:
1f:30:12:aa:38:e5:36:dd:ad:b0:73:32:4b:e4:e8:
97:33:20:b0:8e:a0:42:0f:83:df:e4:e9:b8:88:bc:
5e:a7:32:99:f3:88:e2:27:c6:f6:e5:f0:71:bc:0c:
94:ea:d9:8e:d2:8a:f5:bb:f2:82:13:97:f0:df:32:
b7:f5:8d:0b:e2:3a:43:5e:a5:ba:76:76:6f:c6:6a:
30:37:fc:e7:d4:23:a7:27:82:39:50:5d:48:c2:8a:
cd:48:2c:ea:43:dd:7c:22:80:50:d3:2f:5e:88:46:
fd:b6:a3:b2:38:a6:be:ec:f6:73:9c:fa:2f:a0:43:
ba:63:a3:5a:42:98:67:b7:2f:87:8f:bc:ca:26:d5:
29:2f:c9:de:55:78:ac:d7:a8:87:b2:ac:b0:92:17:
b8:5a:c8:0c:c0:1b:ef:4b:75:9b:16:ca:1b:7c:96:
af:58:09:03:8e:23:94:7b:ed:45:0b:88:4b:89:a4:
81:8e:27:b0:85:27:d2:3b:22:36:51:73:40:ae:5d:
20:6b:d2:d9:c3:8b:1e:4d:a9:b2:a1:3f:3b:7b:23:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:96:AD:61:81:15:54:FD:66:38:2C:57:83:24:4D:BA:C8:9D:5D:58
X509v3 Authority Key Identifier:
keyid:2B:E5:3D:34:0A:8B:F4:7C:1B:F3:4D:32:55:E1:02:EF:B1:81:AD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-U9NAqL9Hwb800yVeEC77GBrRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/f72562-45f5-4019-83a1-74f0c3e663cb/1/K-U9NAqL9Hwb800yVeEC77GBrRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f5:fa:c9:87:1b:d6:45:3d:92:a2:ea:70:09:57:16:0d:65:
6a:87:62:44:e0:11:35:7f:82:1b:1f:df:30:e3:47:c6:6e:ea:
fc:57:e2:04:46:8b:ae:92:b8:b0:8d:1c:a2:cc:f2:1a:dd:6d:
76:d0:94:78:47:73:37:b3:c4:d7:c7:f8:00:2f:31:ae:3b:a6:
c1:3f:d2:24:4f:3d:10:a3:2b:c8:33:32:86:c6:2c:d3:87:30:
63:a5:7d:38:21:c9:d3:ef:a9:6e:cb:b1:5c:81:b5:55:9d:8f:
b1:63:cd:f1:52:ed:c2:a5:78:7b:03:ac:64:13:ea:51:aa:1a:
88:b6:94:65:92:6d:c6:05:af:2a:b0:a6:4a:fc:40:a6:2b:80:
2c:07:5d:3c:9e:77:9e:26:9d:7d:37:b2:a9:fb:a5:61:5e:ec:
7f:9d:42:70:87:a1:ad:11:5e:21:96:2b:13:10:dd:70:5a:ea:
47:2b:88:75:0a:d3:47:46:8d:4f:ae:29:be:1b:d7:55:9f:20:
1b:b2:8d:fd:94:0e:d8:3b:07:bf:51:6f:f3:93:a0:e4:1a:6d:
6d:86:fa:06:d4:e2:f6:63:16:c1:da:1b:4e:f1:03:2f:e0:3b:
77:0d:3c:a1:39:0b:ea:4c:4d:c2:b2:42:21:4b:b5:de:cc:1c:
51:ed:68:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 09:41:15 2025 by rpki-client