Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
File: KYlkeFHvzRmJcu09FJzLvenFXAA.mft (raw, json)
Hash identifier: XkK2e/+ePSYvtBZ94LjH3219074WxQoc7oA/D/HTMwg=
Subject key identifier: CE:8C:E5:E4:44:A2:B2:DA:75:C3:0B:9E:A0:A1:84:4C:DC:7B:FD:0E
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 01969DF592E9043FBAB536313A9021EABCF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
Manifest number: 085C
Signing time: Mon 05 May 2025 01:00:38 +0000
Manifest this update: Mon 05 May 2025 01:00:38 +0000
Manifest next update: Tue 06 May 2025 01:00:38 +0000
Files and hashes: 1: 1ndyHQjZ22gElMY09b9UIH97Fd0.roa (hash: d9wD6lD21fFSwiL6i7e8/Tvl1y891h5uDv49+B9KB5s=)
2: KYlkeFHvzRmJcu09FJzLvenFXAA.crl (hash: FeWcjaNfJ9z8IwKkhq8RQqm89BgbXbe5rK2Lup37Z3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9d:f5:92:e9:04:3f:ba:b5:36:31:3a:90:21:ea:bc:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: May 5 01:00:38 2025 GMT
Not After : May 6 01:00:38 2025 GMT
Subject: CN=ce8ce5e444a2b2da75c30b9ea0a1844cdc7bfd0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:4b:44:14:39:44:0c:11:ae:c6:2c:89:1d:b7:
b5:dd:ac:2d:f6:c1:85:99:e3:64:da:13:c6:19:5f:
29:64:16:68:c0:8c:37:b3:93:3c:e2:b1:82:4e:04:
90:e3:59:e6:0d:96:2a:36:f1:36:92:3c:48:0f:e5:
e2:ba:76:72:79:2c:cf:31:bd:7b:12:45:cc:44:71:
0a:cf:5b:b3:4c:c6:50:90:0c:ae:3b:a2:d3:72:a6:
1e:4d:61:05:3a:46:83:07:8d:ca:51:10:a4:a2:99:
23:90:2e:f0:af:c8:69:ef:10:af:8d:0d:74:5c:f2:
30:a3:23:a8:ac:2e:24:01:e9:f3:65:94:2c:87:1b:
4d:bc:c8:6e:85:59:e0:b4:92:8d:9b:a3:5b:1d:17:
28:fd:74:8b:36:7c:4d:ef:cc:b8:22:34:16:58:ae:
99:9a:ac:64:23:96:ec:fd:bd:d9:24:4b:42:82:57:
bd:2c:be:96:33:9c:d9:0b:61:f1:4f:7c:75:e0:1b:
e6:c1:cd:38:33:50:f2:f9:62:ce:09:0e:85:d5:fb:
6a:5a:62:a3:0e:ef:35:4c:e6:5b:5f:dc:c7:5e:e4:
bb:43:3b:cd:d1:7c:ce:e9:c2:bb:c9:af:03:b3:0b:
42:fd:6f:fe:0b:60:a8:14:de:ca:79:60:b8:76:49:
4e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8C:E5:E4:44:A2:B2:DA:75:C3:0B:9E:A0:A1:84:4C:DC:7B:FD:0E
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e4:f7:ab:fa:17:6c:a6:59:5b:a9:e5:0f:67:6c:27:0a:d9:
f9:fc:2e:86:78:02:75:4d:23:d2:b4:50:25:14:53:92:5b:35:
36:4b:96:55:97:a8:f1:9f:c3:0c:ab:45:4d:ef:47:fc:7a:56:
ba:80:44:58:33:99:c2:37:34:83:60:14:c9:2e:1a:cb:54:cf:
12:ab:74:d3:c0:e6:bb:a3:7d:db:d2:42:98:b0:4d:c0:d9:87:
98:07:77:38:6b:0b:01:76:14:d6:54:9a:b7:f4:f5:1e:eb:be:
4a:25:e8:5f:3e:f6:0d:fd:81:82:6e:67:dc:ac:96:40:65:f1:
9b:6c:0f:9b:bf:a0:92:97:cf:8c:c2:54:b6:e3:67:9f:9c:11:
a5:4c:17:ba:4f:86:f1:55:14:b9:88:d6:04:51:38:0c:86:17:
aa:65:5f:53:e8:88:83:f3:b2:99:c9:51:af:5b:23:09:d1:31:
c9:4c:51:1b:c4:ba:c1:97:d2:81:e6:ea:93:33:1f:ee:bc:87:
10:91:36:ce:8d:f5:2e:60:b8:0e:67:ff:4e:15:8e:81:26:ca:
0a:d6:f7:50:d9:e4:3a:6d:7c:cd:ab:61:52:da:d0:6d:88:dd:
84:ce:a7:bf:52:0e:83:3e:c7:66:71:94:b9:c6:0d:53:1f:5b:
5c:18:d9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 04:21:59 2025 by rpki-client