Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: 9fvfCc/mEJZzSfzbgwt7bp0s7Ng1vd9GgItLxb7ge/M=
Subject key identifier: 2B:3D:1E:94:49:0A:A1:FD:9F:F3:80:F2:00:64:DD:7A:BB:0B:F6:7D
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 0196DEC2EDF6E0ED35DD8AE0EE9113B3CABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 083A
Signing time: Sat 17 May 2025 15:00:38 +0000
Manifest this update: Sat 17 May 2025 15:00:38 +0000
Manifest next update: Sun 18 May 2025 15:00:38 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: litedbRas/cN8fA5IFpJLkDiOwsymhgorfMheZCmKtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:de:c2:ed:f6:e0:ed:35:dd:8a:e0:ee:91:13:b3:ca:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: May 17 15:00:38 2025 GMT
Not After : May 18 15:00:38 2025 GMT
Subject: CN=2b3d1e94490aa1fd9ff380f20064dd7abb0bf67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:40:55:bf:51:56:3d:8a:5d:e5:20:4f:f5:d1:
6c:3b:bc:78:45:c3:1a:9b:cb:15:17:c5:ad:df:27:
e8:99:44:b7:5b:a4:d8:ed:79:a5:39:e9:e6:34:73:
8e:63:c0:ed:7f:7d:aa:bf:9c:7b:a7:c0:ce:dc:9b:
5b:35:e4:21:5b:30:9e:b0:fc:d3:ef:ad:5a:a3:6c:
4c:db:9c:d6:af:15:17:16:dc:43:68:67:8d:e1:39:
ce:3b:a1:ef:fc:5e:78:35:ae:0f:5e:8f:6b:ef:23:
f6:f8:f3:d8:b7:e9:38:01:6d:37:29:47:5f:32:49:
f5:5f:80:8e:7e:0e:31:f8:21:a5:0d:80:73:a3:f1:
0f:5b:97:00:dd:35:e0:fe:40:33:bd:fa:d0:39:aa:
58:d3:db:e1:cf:70:37:e1:98:cc:26:e4:de:7d:80:
1b:ed:e8:0a:5c:af:21:f1:c5:cc:80:5d:f1:dd:52:
80:b7:02:ef:d4:e2:79:ef:74:61:14:42:ac:42:3a:
02:69:df:db:ca:99:76:e7:7a:13:70:e3:51:83:56:
3c:f8:31:3c:78:d8:b8:e8:69:0e:d2:b9:49:1e:67:
82:a6:c1:ba:3e:7f:83:e1:ed:ae:77:16:05:58:59:
e0:02:de:e6:08:bc:ca:0b:f8:b8:ff:6d:98:b4:5e:
dc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3D:1E:94:49:0A:A1:FD:9F:F3:80:F2:00:64:DD:7A:BB:0B:F6:7D
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e0:8e:6f:c2:ef:0c:be:1d:6d:5f:0c:dd:3f:da:48:c4:de:
ad:b5:94:10:f9:3e:ad:e7:5e:7a:62:70:d2:82:3d:86:b0:54:
33:e8:3b:9d:f7:2a:f9:28:8d:c9:9f:02:dd:69:f9:3f:59:5f:
d7:a8:c5:8a:66:58:7d:0c:14:b8:05:a8:00:b0:28:75:7d:6f:
ac:00:2e:48:f8:87:ce:f2:a4:49:e1:a2:23:e4:d6:08:42:72:
35:5c:4b:67:e4:47:a3:3f:39:92:86:33:15:42:0e:f1:45:2b:
79:36:f1:68:e9:d4:a4:63:91:23:00:84:4d:c8:d5:46:12:ab:
49:4e:7b:e8:9f:28:75:f6:22:b3:67:34:62:41:c7:ef:8e:1f:
96:49:c5:9b:9f:d4:59:94:c7:1e:92:1e:5f:b9:74:58:66:1b:
ae:e3:24:5f:31:51:45:4d:2b:95:9e:66:9e:27:ee:f0:93:74:
00:6d:4e:98:5b:60:6f:09:a8:2f:63:3b:87:93:1f:aa:4d:f0:
b3:f2:34:66:be:55:2f:e7:d2:4a:46:c5:fa:42:3a:da:12:bc:
f9:94:12:c5:05:a8:f5:84:de:6f:c1:de:81:a3:12:02:c9:82:
60:ed:44:f8:e3:b0:59:69:83:13:f0:74:4c:f2:0f:c2:76:38:
b5:39:56:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:38:27 2025 by rpki-client