Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
File: K-zvlD00yA4KD9gUJuYTazFQj-4.mft (raw, json)
Hash identifier: hHnXPiwhFqh6UGe0GH903gaejK/fM2KJO10UxH5iIP0=
Subject key identifier: 27:72:EE:C9:46:68:C1:30:B2:36:F1:C3:6A:01:7D:B8:28:87:C9:25
Authority key identifier: 2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
Certificate issuer: /CN=2becef943d34c80e0a0fd81426e6136b31508fee
Certificate serial: 019673AFF7AF268FA197CCD5B519CC9C3920
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
Manifest number: 11AD
Signing time: Sat 26 Apr 2025 20:00:34 +0000
Manifest this update: Sat 26 Apr 2025 20:00:34 +0000
Manifest next update: Sun 27 Apr 2025 20:00:34 +0000
Files and hashes: 1: K-zvlD00yA4KD9gUJuYTazFQj-4.crl (hash: NZpWNAMeJ1h7rxi/fjzF8SZrjxiotjvf6XONjAAsGqQ=)
2: uyTAYMzc27HPC3St2DUdxuZl0vQ.roa (hash: nhOGHiWnpfS9y1HiircEbA65FySC+R6VBPodKzedGIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:af:f7:af:26:8f:a1:97:cc:d5:b5:19:cc:9c:39:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2becef943d34c80e0a0fd81426e6136b31508fee
Validity
Not Before: Apr 26 20:00:34 2025 GMT
Not After : Apr 27 20:00:34 2025 GMT
Subject: CN=2772eec94668c130b236f1c36a017db82887c925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4b:5f:88:0b:b6:fa:e5:8f:13:88:1a:93:da:
18:9a:e2:f6:db:0e:60:01:71:c5:60:8c:a1:2e:90:
56:c9:f1:78:92:9d:80:66:86:32:b0:73:84:66:00:
e2:87:88:79:2a:3a:0f:60:27:41:91:a2:8f:13:ed:
41:94:1c:2b:52:d4:dd:6c:66:8b:1d:65:4e:58:6c:
c8:30:b5:4d:6c:33:4a:eb:4c:e4:5a:18:da:30:64:
6f:ed:9c:bf:f4:aa:4c:0b:84:97:2e:26:17:5e:e1:
ac:3c:b9:eb:79:5d:fe:eb:a3:c5:aa:5e:88:62:77:
d5:6d:4f:90:4a:49:2b:a8:72:90:dc:28:bc:60:8d:
37:2f:ed:73:11:34:d5:03:b0:25:23:99:1e:9d:28:
e5:ff:8f:27:a8:01:1b:6c:56:e7:53:1a:a8:df:91:
96:87:08:84:ff:5f:b0:89:b6:fa:54:df:06:3e:bf:
32:9a:2d:bc:8e:53:ae:a1:75:64:ca:a0:bf:3b:24:
29:ff:fa:6c:63:0b:56:70:6d:0e:b1:ce:71:a0:12:
72:5a:3a:c7:f8:a5:23:26:7a:db:db:a2:7d:ef:1f:
84:0f:92:fc:97:39:96:f0:ee:69:88:c0:11:99:9d:
98:8c:7d:d5:3f:92:ea:d3:fe:0e:03:a5:4a:99:84:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:72:EE:C9:46:68:C1:30:B2:36:F1:C3:6A:01:7D:B8:28:87:C9:25
X509v3 Authority Key Identifier:
keyid:2B:EC:EF:94:3D:34:C8:0E:0A:0F:D8:14:26:E6:13:6B:31:50:8F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K-zvlD00yA4KD9gUJuYTazFQj-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/efba93-2973-4213-b6f1-449124ace026/1/K-zvlD00yA4KD9gUJuYTazFQj-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0a:f6:b3:54:46:d2:eb:71:c1:e2:de:84:92:22:71:7a:5a:
58:55:85:a4:cb:2d:51:b0:87:d1:ae:dc:91:2e:1f:5a:e8:64:
8e:d6:8f:6f:b7:f9:07:23:97:4f:8a:b5:99:b7:68:3a:1f:d0:
1c:8a:3c:39:bc:0b:7a:83:34:73:14:f9:5d:75:7f:a5:40:06:
e3:ed:44:21:63:4e:23:36:39:98:fc:74:46:82:0d:04:7e:20:
1f:02:66:82:d4:11:e4:9a:4d:13:76:a8:e6:0d:8e:c9:7b:84:
2f:ed:90:1c:d1:32:a1:69:88:6c:13:02:e5:a1:ff:c8:51:e7:
24:a4:06:c9:5f:7b:10:ba:be:1c:b3:1b:fe:91:f5:df:be:08:
bd:7d:12:42:63:c9:9d:fb:ad:d5:82:0d:b0:eb:6f:5c:82:a6:
e8:17:89:a6:23:13:91:49:4f:66:60:bc:d3:8e:8b:86:80:d0:
a1:6f:9b:1a:ac:7d:4a:2c:3a:3c:f1:ce:95:d9:19:11:dc:45:
ce:63:03:6e:d0:1e:95:1d:85:ab:1d:be:d1:94:29:51:8d:35:
0d:a9:04:cc:e9:94:c5:ed:0b:47:0b:45:52:ea:7f:73:18:be:
9b:91:c9:fd:05:ee:b5:84:3a:5c:44:a0:d3:57:3d:52:ee:a7:
8d:b3:57:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:54:19 2025 by rpki-client