Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
File: _KXnwS9jZpo_aAySaEpD-ohO0Uw.mft (raw, json)
Hash identifier: 48br0TCD9ZMmUfFDIRWZLtqjBSWvQO/ckRLLYCtrumc=
Subject key identifier: 62:15:A8:E8:D9:36:71:A6:31:41:E7:E4:46:F1:A7:FD:0C:F9:B3:5E
Authority key identifier: FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
Certificate issuer: /CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Certificate serial: 0196A6C19D6533A84D69AF25F12A2D039A39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
Manifest number: 142A
Signing time: Tue 06 May 2025 18:00:28 +0000
Manifest this update: Tue 06 May 2025 18:00:28 +0000
Manifest next update: Wed 07 May 2025 18:00:28 +0000
Files and hashes: 1: _KXnwS9jZpo_aAySaEpD-ohO0Uw.crl (hash: 6T8Z1qH1YCMb02G3hzHK8Wyx3aXzdEX/shkxdymtGSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 14:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a6:c1:9d:65:33:a8:4d:69:af:25:f1:2a:2d:03:9a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fca5e7c12f63669a3f680c92684a43fa884ed14c
Validity
Not Before: May 6 18:00:28 2025 GMT
Not After : May 7 18:00:28 2025 GMT
Subject: CN=6215a8e8d93671a63141e7e446f1a7fd0cf9b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:d9:a0:53:ce:f4:b8:df:a3:71:41:c9:90:
f6:18:e4:75:36:e0:04:23:9a:83:b2:2b:f8:0a:c8:
20:6a:84:5b:a5:78:73:75:f2:6e:4c:2f:79:c4:e5:
26:34:bf:56:3c:15:be:9c:85:47:fe:0d:26:ba:0b:
84:dd:0f:fa:8f:f3:78:8c:48:4d:7c:f6:b4:48:9e:
1b:b3:32:52:a7:2b:78:c3:50:fd:51:fd:55:e2:7b:
83:75:0b:d9:99:a7:8e:9c:e3:f2:24:e5:5f:42:3e:
93:e0:c2:0b:4d:37:8c:88:5e:82:41:fa:68:80:68:
c9:ac:25:36:9f:11:f0:fd:aa:c9:b2:6c:b0:93:ad:
f6:fb:b9:01:11:ac:58:d9:6b:c7:1c:cd:ed:89:4a:
7c:51:76:df:9f:32:f7:dc:d3:bc:1d:67:e4:46:f6:
20:d6:32:3d:ef:54:c6:c1:4c:3a:37:96:e0:aa:40:
4e:fe:aa:22:dc:51:3a:b6:54:09:dd:67:14:67:fa:
de:b4:a9:8c:79:9b:af:ca:9a:af:c5:f1:b1:22:ed:
f7:b2:a9:fb:67:c9:37:52:06:51:d2:c3:e3:06:8e:
59:50:ca:0c:20:b4:e9:91:7c:1b:0f:65:c4:aa:0f:
42:49:bd:b2:90:f8:b7:26:a6:c1:4c:8d:87:87:1b:
12:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:15:A8:E8:D9:36:71:A6:31:41:E7:E4:46:F1:A7:FD:0C:F9:B3:5E
X509v3 Authority Key Identifier:
keyid:FC:A5:E7:C1:2F:63:66:9A:3F:68:0C:92:68:4A:43:FA:88:4E:D1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KXnwS9jZpo_aAySaEpD-ohO0Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/69da12-bf4f-4755-87ae-5e94f0482a1d/1/_KXnwS9jZpo_aAySaEpD-ohO0Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:77:4e:94:18:d2:d8:0a:d2:ae:af:9f:af:cf:30:8f:a4:c2:
77:f2:74:b7:c8:58:3e:ce:c7:3d:f8:2b:61:af:f2:bc:7e:47:
36:ff:8a:ce:9e:33:83:75:5a:4d:d2:9c:ff:46:1f:bd:bc:96:
9b:1e:25:a7:40:91:93:59:a9:ba:3a:d6:d7:ae:1b:99:55:55:
b2:c0:90:4a:51:9a:d7:b7:82:53:c1:1c:29:cf:d6:7f:0f:65:
a9:ec:dc:f8:c5:fb:1f:a9:1f:d0:29:34:90:31:67:45:24:bd:
a7:83:bd:9d:10:04:a4:f5:f6:70:89:55:bc:95:8b:76:16:52:
31:ef:e3:83:6c:9f:08:04:2a:91:26:7e:63:89:e0:9f:3c:5d:
2f:70:01:75:b5:53:84:8f:4b:1f:52:93:20:c3:93:7c:4f:f5:
53:bc:b7:f9:dc:49:47:49:85:4a:21:85:01:cc:9c:09:17:3c:
30:44:ed:20:7c:65:67:72:f5:69:46:63:f5:04:cf:0b:80:7f:
39:24:54:e4:9d:4a:0f:be:c4:8a:f1:5a:7e:e9:f7:dc:f7:57:
b6:fc:d7:6b:52:10:6a:52:e0:90:04:af:fd:a0:51:8f:4b:fa:
b1:c6:f9:3f:13:a1:c2:f7:0d:23:24:7d:38:a7:51:86:77:93:
82:a0:af:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:08:02 2025 by rpki-client