Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: dyMcWDHSBnqgUMp480F8VjNrEObwpyvInSV0t/z92IE=
Subject key identifier: 2F:4C:8D:49:61:DE:B2:7B:A1:7A:E1:BB:F5:19:A3:52:A3:65:8D:B0
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 019688498CDD12CDDCDE0D66E2DACB80E9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 151C
Signing time: Wed 30 Apr 2025 20:00:43 +0000
Manifest this update: Wed 30 Apr 2025 20:00:43 +0000
Manifest next update: Thu 01 May 2025 20:00:43 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: iJUsIF8EtozdC4ycLrWj47qqDXzsExG0Jq0UmnIYiV4=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:88:49:8c:dd:12:cd:dc:de:0d:66:e2:da:cb:80:e9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: Apr 30 20:00:43 2025 GMT
Not After : May 1 20:00:43 2025 GMT
Subject: CN=2f4c8d4961deb27ba17ae1bbf519a352a3658db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9b:a5:8e:20:2b:70:4e:c1:8f:24:f7:6f:3f:
7a:d9:b2:2d:52:ad:15:2e:ab:ef:5b:a6:06:ce:37:
c9:d3:52:ad:2b:ba:45:d4:c3:00:2c:54:97:fe:ba:
e3:a5:46:da:f5:62:0a:2c:f6:94:04:23:f4:dc:e1:
b6:c1:c9:9e:b8:4d:e2:df:64:5d:2a:24:22:50:84:
8f:10:e0:12:29:b4:bb:bd:7c:98:8b:18:4b:3f:51:
7c:ae:ee:af:8b:a2:34:ba:a2:30:87:12:83:b9:9d:
ea:9d:0a:1a:35:bd:84:81:88:ec:07:d0:45:cf:29:
da:88:22:53:38:cd:f3:f8:8d:0f:06:97:a2:b6:d5:
8d:c1:2c:a8:ad:8c:f6:8c:b1:60:44:6e:be:59:0b:
96:34:3d:5f:ab:9e:2e:9a:4f:4e:19:ca:34:2f:fd:
48:37:b3:9f:5a:54:df:0c:2e:cd:0f:78:6d:96:a2:
76:a4:fd:ab:1b:ee:7a:2c:bb:71:77:7b:b4:00:93:
b7:af:a4:0d:e2:5c:83:9b:b6:f3:b5:e0:5d:64:af:
1c:c9:4a:3b:16:ae:6f:3e:6e:27:00:e4:72:cc:d8:
87:3f:e6:36:52:20:5f:1b:88:e7:bc:b0:da:b6:7a:
d7:35:ca:1e:2e:b1:06:c6:cc:1b:a7:74:48:f3:3c:
44:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4C:8D:49:61:DE:B2:7B:A1:7A:E1:BB:F5:19:A3:52:A3:65:8D:B0
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:93:4a:a6:20:87:08:3f:b0:6c:32:60:2e:39:ad:8c:8b:a8:
6c:e7:25:a7:fa:b6:0f:cd:79:f0:68:4e:2d:66:26:d4:9c:88:
21:9b:85:15:45:76:09:04:25:a6:c9:0e:32:db:66:7d:d8:e6:
e9:93:52:33:db:4b:b1:30:8b:62:9d:fb:1c:66:9a:32:28:9e:
65:73:48:03:29:ac:df:85:30:96:44:ef:40:dc:5d:25:ed:ca:
63:01:43:22:d3:e0:81:c3:d0:71:39:eb:d2:89:6e:d5:92:7e:
3f:ce:7a:42:7c:bb:52:8b:6b:18:f1:34:35:e0:65:a8:85:3c:
80:87:fb:5c:66:e1:b7:68:6c:bb:ba:b1:72:ed:9f:7a:3d:b8:
fb:a5:58:95:da:36:a3:7e:8a:e4:5b:bb:d6:66:b0:3b:14:03:
4f:8a:f2:c5:93:85:59:7f:a1:2a:d4:62:b0:b7:c8:a4:80:a9:
2c:6e:2a:f5:aa:ca:94:f4:c9:11:69:77:95:d5:92:29:e4:6d:
69:a9:39:67:37:4d:e5:94:13:50:ff:d6:39:0d:cf:09:3c:22:
5f:e7:9f:9f:2b:56:c3:d3:47:4f:c4:2b:95:a0:db:4b:66:56:
a3:dd:c6:94:84:88:64:85:4d:c5:75:a6:9a:d1:da:c8:f3:80:
58:82:56:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:20:18 2025 by rpki-client