Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
File: kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft (raw, json)
Hash identifier: ib4SPaW6kQZoz3UsAhQ0ztNOJ5g3vxs5TeFoz1VRr0o=
Subject key identifier: 97:7E:70:58:7B:DA:2E:5F:6D:DD:23:C0:C8:B2:20:A9:7D:58:3E:A7
Authority key identifier: 91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5
Certificate issuer: /CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
Certificate serial: 019674C2529C784957ECCFE2F9EC07AE040D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
Manifest number: 1050
Signing time: Sun 27 Apr 2025 01:00:14 +0000
Manifest this update: Sun 27 Apr 2025 01:00:14 +0000
Manifest next update: Mon 28 Apr 2025 01:00:14 +0000
Files and hashes: 1: kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl (hash: Dy7uhBZYn+Z2qrRNs7kzJAtAaxoqokAUQeLz8SBbgWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:52:9c:78:49:57:ec:cf:e2:f9:ec:07:ae:04:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91ce551388ccbc0e1306bfa28be633bb5dc34bf5
Validity
Not Before: Apr 27 01:00:14 2025 GMT
Not After : Apr 28 01:00:14 2025 GMT
Subject: CN=977e70587bda2e5f6ddd23c0c8b220a97d583ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:f7:56:e3:20:bb:7f:00:f4:ee:64:55:4a:1f:
01:08:bc:27:fb:26:47:ca:9b:ed:0a:5b:66:2b:db:
38:77:4b:c4:76:5e:a4:18:92:ad:f5:d0:96:e3:5b:
b0:77:e9:71:71:56:f7:56:68:c0:58:28:f4:6a:b2:
b9:92:47:5c:8c:0f:21:94:04:b4:b7:13:b5:1b:94:
5c:35:6b:77:7c:f8:66:e3:a0:b0:d0:ac:bf:7a:3e:
e1:ad:d9:b0:2a:ce:f0:ed:c8:99:78:38:a6:b1:d3:
f6:76:6d:c1:35:e3:d8:52:6f:08:c2:52:d9:2d:15:
26:9a:c4:85:8d:60:79:2c:2d:49:6a:9f:97:1c:c7:
19:0a:f3:30:c7:35:a5:48:ca:dd:bf:99:47:d7:c9:
37:d1:e6:07:91:33:c2:9e:57:50:fc:2d:95:3d:c2:
62:12:a1:8f:68:45:93:f9:c9:c5:a5:fc:a5:4b:da:
22:1d:90:83:c0:49:61:a7:59:d2:cf:8a:e5:08:92:
e2:87:b5:89:1c:96:c7:a9:f2:df:f0:d5:98:2c:f1:
4b:14:59:9d:54:3c:f9:b3:d5:04:b3:06:23:a1:dd:
e5:4e:d3:90:1a:a6:09:dc:f1:0e:be:fe:d6:35:72:
66:1e:af:4e:fc:5b:1f:dc:ce:18:bc:eb:0a:a6:32:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7E:70:58:7B:DA:2E:5F:6D:DD:23:C0:C8:B2:20:A9:7D:58:3E:A7
X509v3 Authority Key Identifier:
keyid:91:CE:55:13:88:CC:BC:0E:13:06:BF:A2:8B:E6:33:BB:5D:C3:4B:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kc5VE4jMvA4TBr-ii-Yzu13DS_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/abe2e7-8c07-4ccc-a8d1-533c375b7f80/1/kc5VE4jMvA4TBr-ii-Yzu13DS_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:2d:27:3f:78:81:d1:06:1a:1c:2a:15:5a:74:68:7a:6f:99:
33:ca:47:bb:b3:a3:a2:cd:af:a6:47:27:36:84:f3:b1:e8:82:
16:af:98:54:e3:11:da:4a:05:8a:df:ca:04:02:f0:ff:2a:58:
fb:44:20:d4:96:c7:f3:91:f2:07:14:28:01:fa:13:ce:00:d6:
2c:93:fc:c5:98:65:d9:eb:47:1a:f0:21:cc:a2:0c:0d:63:90:
9b:a5:68:05:a1:d0:92:c9:65:72:05:ee:65:3b:46:14:ae:ed:
ce:d7:64:f7:da:9d:4b:cc:24:cc:04:dd:97:3a:08:ef:44:72:
0a:e9:72:42:07:7e:50:5b:5f:5b:d0:5e:15:52:72:91:f9:53:
82:0c:d7:8d:3a:d6:05:85:2a:ab:14:ac:aa:6e:59:17:a4:92:
a8:d8:9f:b2:97:51:5c:07:aa:78:f2:a5:d5:cf:bf:88:c4:c0:
4a:91:52:61:39:e6:d9:ea:af:b7:ff:87:99:fe:8d:80:54:a9:
b2:b7:c3:cb:4f:93:f8:54:a1:ac:04:79:34:fe:56:be:29:04:
6f:29:c8:06:dd:3a:15:7e:47:c0:79:23:a5:8d:6f:e4:7c:47:
4a:75:53:6a:08:8d:aa:66:a8:26:56:8f:ee:0f:e7:ea:30:ee:
5b:7a:47:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:17:34 2025 by rpki-client