Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
File: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft (raw, json)
Hash identifier: iHM6SS3s2uKRvfZUIOunxJGhxR6U0Md61/xuha99OAk=
Subject key identifier: 00:8B:F9:5D:22:17:8F:F1:7C:A7:C7:27:03:8D:35:E9:05:47:A1:69
Authority key identifier: 90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
Certificate issuer: /CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Certificate serial: 0196A465BB4F6A730CF1FF7AB9C91291D55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
Manifest number: 0677
Signing time: Tue 06 May 2025 07:00:52 +0000
Manifest this update: Tue 06 May 2025 07:00:52 +0000
Manifest next update: Wed 07 May 2025 07:00:52 +0000
Files and hashes: 1: kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl (hash: j1W1IoECgOEW6QPSIkMzr8mwDh8vDYtP8LT4RRq9RYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:65:bb:4f:6a:73:0c:f1:ff:7a:b9:c9:12:91:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f5928c752ad9a08cfeb1b88f463c3c0dd2e85d
Validity
Not Before: May 6 07:00:52 2025 GMT
Not After : May 7 07:00:52 2025 GMT
Subject: CN=008bf95d22178ff17ca7c727038d35e90547a169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b5:3e:8a:91:df:88:cb:83:de:aa:3a:17:06:
53:57:62:2e:e9:26:8c:5f:b6:de:43:18:fc:34:20:
d0:ea:0e:46:de:40:53:3b:3a:ff:46:93:18:04:52:
62:e4:ff:e9:77:ab:d2:34:6f:4c:3f:ab:73:4a:f8:
4b:bd:2d:62:ae:a4:22:49:ed:cc:f0:67:f0:51:7c:
8c:4d:da:0a:29:c3:60:e7:ad:ed:4e:9e:52:fb:06:
9e:21:1a:89:f5:93:d0:fb:85:f8:0b:cf:02:7f:75:
1b:c1:2b:f8:a8:c4:72:86:ea:1a:fb:81:51:bb:41:
1c:0b:50:2c:6e:2d:2f:b0:c2:9d:96:f1:46:9b:c4:
87:ba:83:44:d2:b4:3a:1b:7c:47:8a:bc:1d:2a:89:
f1:cd:92:46:0f:d9:4f:d2:d1:9d:8c:68:83:f1:b3:
40:28:6d:75:d5:a2:49:33:f0:f6:20:f6:34:b7:bd:
6f:5d:53:a2:3f:45:50:9a:d8:0e:3c:02:33:b6:17:
4c:1e:58:e6:b2:b7:64:11:55:70:f1:1d:43:2c:e1:
81:9c:a1:04:7b:96:60:ff:af:22:26:a4:3c:da:e9:
dc:6a:35:14:80:45:5d:f0:52:88:f2:e4:bf:0a:9f:
78:9b:b5:c8:94:a3:0b:d3:1a:0d:04:06:a2:76:94:
44:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:F9:5D:22:17:8F:F1:7C:A7:C7:27:03:8D:35:E9:05:47:A1:69
X509v3 Authority Key Identifier:
keyid:90:F5:92:8C:75:2A:D9:A0:8C:FE:B1:B8:8F:46:3C:3C:0D:D2:E8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/31a20a-77d0-4ac8-a09f-04a6cd816a03/1/kPWSjHUq2aCM_rG4j0Y8PA3S6F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:65:ae:2a:94:63:74:e3:0d:a5:a8:30:37:54:20:6b:35:e3:
ee:7a:50:90:83:b5:a5:0c:61:84:4d:19:1b:5f:90:f7:a0:f9:
28:6f:20:48:79:11:92:49:bc:21:71:29:7c:9c:10:7d:7c:af:
4c:db:93:91:4c:c6:dd:ea:1e:87:8a:63:bf:71:30:d2:6a:5d:
72:67:2a:97:ba:3d:9d:e7:bd:84:07:29:ac:13:2a:13:22:1f:
db:28:88:d8:7f:ea:1a:00:1b:58:af:ee:77:ba:50:a0:93:40:
b5:2d:79:3e:47:84:c7:7c:3c:a9:8b:34:b4:47:d0:57:91:08:
a4:52:b4:f3:94:d8:27:88:d9:a3:14:25:f0:64:52:99:7d:ca:
98:ee:22:d0:dd:d9:3e:7d:4f:7f:3b:92:5f:fe:e2:b1:38:20:
f9:01:d5:4b:57:5a:e4:a2:66:26:10:34:33:c6:33:fd:52:e2:
c7:9f:71:28:68:d6:34:e7:c0:dd:f0:7c:3b:54:30:a9:89:24:
a6:70:5a:ab:14:23:63:b6:04:b5:ff:ee:df:f3:5a:15:eb:c2:
aa:09:da:3c:40:6b:b2:3a:69:df:b5:df:3e:d2:18:c6:d1:3d:
b2:8d:ec:a8:e3:3d:de:7a:06:3c:6d:cf:9f:e7:45:68:de:cf:
ea:68:3d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 13:42:17 2025 by rpki-client