Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: 2T4CEPZM4pmLjv5poSAOgXJeCJYSyAMFX7zm9JLUcVA=
Subject key identifier: 91:BB:5B:EB:CC:9E:F2:28:6E:E9:EF:87:43:77:52:E5:FB:92:94:5B
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 0196D174E70C6B19E55BA2EF5D0C1ABF1B07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 127B
Signing time: Thu 15 May 2025 01:00:21 +0000
Manifest this update: Thu 15 May 2025 01:00:21 +0000
Manifest next update: Fri 16 May 2025 01:00:21 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: e1WKsyN9cfttSlDxdVWsd/FBFENwb9JBix/LRqpbTzE=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 17:32:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d1:74:e7:0c:6b:19:e5:5b:a2:ef:5d:0c:1a:bf:1b:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: May 15 01:00:21 2025 GMT
Not After : May 16 01:00:21 2025 GMT
Subject: CN=91bb5bebcc9ef2286ee9ef87437752e5fb92945b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:23:67:07:6d:93:35:06:33:06:57:ac:80:21:
02:87:58:ee:88:08:48:e7:64:34:1c:fb:ad:4c:a2:
c0:26:f8:e9:26:6f:56:5a:7f:12:ba:46:cc:25:7e:
a2:a8:e2:cf:9a:c9:a8:17:6e:23:c6:8f:98:9e:5f:
76:bf:e2:46:0d:af:ba:fb:50:0f:e4:b5:2e:bf:79:
cd:b4:13:47:c5:2f:37:64:64:bc:d8:27:31:a8:21:
47:ed:54:de:48:eb:48:88:4a:48:d7:4b:43:f1:2b:
8a:e5:3e:45:6b:ea:29:31:77:dc:d0:a6:53:2d:2f:
a2:8d:96:94:d4:5c:1c:de:eb:16:f8:e2:a5:41:ed:
1e:f9:31:75:ba:15:42:df:50:ac:a4:e7:ef:65:2c:
db:c3:a3:c2:70:8d:f0:14:d8:a2:19:46:41:b4:a6:
b5:03:07:82:d4:be:4c:26:da:cc:74:cb:8a:50:8c:
68:61:87:fc:b0:c7:61:7e:50:3e:dd:0b:b2:65:dc:
47:7e:b3:04:9f:9c:4a:59:75:c2:da:44:15:e4:09:
6f:b3:57:86:e8:c4:c3:c4:41:cf:a5:7a:8e:a2:8a:
3c:05:15:58:e4:cb:fd:27:a5:09:6e:91:7e:ac:27:
03:bc:e8:ff:53:9b:c5:87:c1:ad:cf:89:8d:cb:6f:
52:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:5B:EB:CC:9E:F2:28:6E:E9:EF:87:43:77:52:E5:FB:92:94:5B
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:55:d2:99:ce:69:87:6b:bc:e2:87:66:bb:c8:b9:d8:cb:d9:
be:b3:17:8d:70:c3:f3:1b:a0:d7:c5:38:b9:76:4f:8b:fe:c2:
65:bc:e4:d7:f8:ba:40:80:0a:59:e4:2b:24:00:3b:58:82:b3:
45:15:82:49:b4:f6:ee:2b:7c:8c:9e:bb:3e:58:24:d4:51:2a:
ca:69:c0:e7:66:61:68:b7:53:81:4d:c4:0f:fe:90:a8:82:00:
c1:4b:ed:4b:10:ff:bb:d2:23:33:9c:ed:3f:61:35:95:7c:a4:
95:27:9b:b4:9b:a6:49:8c:e6:c3:1f:63:94:52:5e:aa:0c:7e:
37:dc:7a:63:88:ba:6e:df:04:d3:5c:32:66:f0:0c:0a:da:5a:
a5:14:21:62:4b:a7:c9:fe:ff:ad:a2:d2:9c:22:4b:88:88:b5:
72:a9:75:31:d9:8c:49:bd:32:7d:c8:5b:d3:91:82:4a:4f:87:
e4:20:2a:82:26:2a:a1:6f:0c:bf:38:95:84:a4:28:3d:c6:8e:
35:ed:b5:b2:19:2b:80:13:fd:c6:5a:0e:23:7c:73:7c:31:3b:
28:e8:af:55:70:d6:ec:c0:a8:e6:53:fd:ff:12:10:ad:e7:a0:
3f:59:63:2c:95:1c:c0:1c:d0:25:1f:41:9a:2e:9b:88:9f:fa:
4a:b8:38:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:27:10 2025 by rpki-client