Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
File: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft (raw, json)
Hash identifier: JNBrPfDkJ2ipW2eyUBNgYj8dPbmFNzxW5TfkBAg9vHQ=
Subject key identifier: 38:1C:CC:59:4B:D4:D2:EB:88:3C:61:1E:13:97:E7:6C:2B:D3:3A:51
Authority key identifier: 2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
Certificate issuer: /CN=2a5275ad89c9976b51030c5bd256799b7926560c
Certificate serial: 0196DC66B86937F4B1F526BCCBB419D850E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
Manifest number: 08F4
Signing time: Sat 17 May 2025 04:00:41 +0000
Manifest this update: Sat 17 May 2025 04:00:41 +0000
Manifest next update: Sun 18 May 2025 04:00:41 +0000
Files and hashes: 1: KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl (hash: BC89U22j/O56A9HgyB0SY+WId2htXAx3J7tzGJ7YzLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 04:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dc:66:b8:69:37:f4:b1:f5:26:bc:cb:b4:19:d8:50:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a5275ad89c9976b51030c5bd256799b7926560c
Validity
Not Before: May 17 04:00:41 2025 GMT
Not After : May 18 04:00:41 2025 GMT
Subject: CN=381ccc594bd4d2eb883c611e1397e76c2bd33a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cd:f5:64:28:08:12:33:14:6a:79:76:2e:a8:
17:64:ff:7d:97:fc:a2:0d:57:ff:40:8e:cb:8c:cb:
dc:8f:5e:af:b5:1d:85:bc:96:e7:36:ca:e3:6c:09:
42:53:bb:d3:cb:81:12:98:30:20:9b:71:86:54:5b:
ba:98:da:9c:34:e3:41:e7:eb:b0:aa:8f:56:ee:ef:
3a:04:c3:e3:c0:07:6b:8c:7f:e6:e7:51:6a:f5:df:
ea:d6:22:2f:d4:de:6d:67:6b:d4:7b:35:4a:37:65:
78:24:cf:2f:d0:e3:c2:b1:b8:cc:9d:af:bd:41:f3:
c3:fa:58:0d:5e:17:3f:7b:68:89:10:1a:cd:60:d5:
58:89:df:ba:1f:9d:b3:83:8c:fc:32:41:57:0e:e2:
bd:84:23:5f:18:ed:99:3f:76:2a:6e:ad:0b:5d:0f:
17:7e:64:1f:c1:f5:60:ed:dc:3c:6c:c9:0e:d3:88:
2b:36:2a:f6:de:11:60:c5:de:cc:e5:a7:83:fa:45:
c6:49:45:45:0a:a8:67:3b:97:fc:3a:2e:87:0f:e2:
d7:38:e2:d4:b6:6c:e9:56:90:1b:2b:ed:e6:e2:b6:
a4:89:27:cd:30:5c:40:62:4e:65:fc:e3:e0:ad:2d:
89:dd:21:3a:f1:13:4f:aa:fd:cf:54:a2:a2:54:a3:
7c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1C:CC:59:4B:D4:D2:EB:88:3C:61:1E:13:97:E7:6C:2B:D3:3A:51
X509v3 Authority Key Identifier:
keyid:2A:52:75:AD:89:C9:97:6B:51:03:0C:5B:D2:56:79:9B:79:26:56:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9bc2d8-9320-4a31-a7d4-1156690a43b5/1/KlJ1rYnJl2tRAwxb0lZ5m3kmVgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:81:04:69:c1:a9:90:3e:b6:1a:d7:03:67:6c:35:7b:08:16:
16:0e:46:94:0d:f0:84:5e:3f:05:8d:c5:53:12:46:c3:c8:8d:
46:3a:62:d2:55:41:92:30:b9:49:2d:cc:78:88:64:0c:ff:05:
ff:0d:63:dd:f6:d1:ba:64:b9:d0:b5:24:16:13:f8:a4:ad:23:
98:7d:6a:de:f1:3e:d3:cf:af:ae:2b:b4:6c:b2:e3:a2:6f:87:
17:23:3f:73:4e:20:65:84:35:77:50:4a:2c:3e:51:b6:50:87:
68:ce:35:d5:3e:6d:94:59:92:ba:63:1a:1a:ff:67:7b:70:1c:
de:61:7a:34:30:53:6d:0c:f3:0d:0b:2e:f5:3a:c3:97:5d:c6:
68:ca:d9:1f:1a:85:9a:75:f6:36:8e:6e:28:f4:01:a4:bd:47:
d1:83:dc:b8:29:25:ef:cd:5d:c7:71:7c:4e:d5:5b:e6:68:21:
91:da:45:95:16:e3:ec:59:5d:04:af:fe:4a:a4:4e:cc:5d:06:
89:37:c8:c8:de:d9:b9:a2:cc:c8:90:51:15:c4:44:57:e4:69:
f5:9b:1e:9c:66:2d:d6:60:cc:96:cb:a0:80:19:62:2d:98:fa:
4f:d9:0f:39:83:1b:35:a2:a7:3e:17:60:09:b2:5f:ca:9d:ea:
5e:eb:66:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 13:56:19 2025 by rpki-client