Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
File: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft (raw, json)
Hash identifier: EijLRuBn74BdKUdidlAd9YlhkAc+TfpO4Xw2ypF1+tw=
Subject key identifier: 7A:FF:9B:F5:E1:41:8D:EF:4B:71:28:84:D4:10:0E:D7:B3:AD:E3:47
Authority key identifier: 92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
Certificate issuer: /CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Certificate serial: 0196B069556132CAF6526BEB83CAF2B86E0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
Manifest number: 152D
Signing time: Thu 08 May 2025 15:00:15 +0000
Manifest this update: Thu 08 May 2025 15:00:15 +0000
Manifest next update: Fri 09 May 2025 15:00:15 +0000
Files and hashes: 1: khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl (hash: aoVSgBNMXGmm6o1ZIF/DDSY2agB5POAPuHwRfit0+4A=)
2: yGFlSDdiFlFUJBTzkBDJlODQZoY.roa (hash: 5kgFGMiEYqgnd4sbR3CvLQA6/mpT37R4CFK6/AUcK/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:69:55:61:32:ca:f6:52:6b:eb:83:ca:f2:b8:6e:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=921b4c85caa8d8b16619bf945a2fd6af1c77fc78
Validity
Not Before: May 8 15:00:15 2025 GMT
Not After : May 9 15:00:15 2025 GMT
Subject: CN=7aff9bf5e1418def4b712884d4100ed7b3ade347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:56:45:c1:ab:78:46:10:12:64:24:6e:34:
55:f8:0b:3a:cc:cd:8d:1d:d3:d2:71:ec:74:83:c6:
df:04:92:92:bf:4d:44:64:ec:d2:92:3c:10:90:34:
96:54:1f:32:aa:48:d9:c7:c1:f2:0d:66:3f:ac:31:
f6:50:d6:b2:81:e7:a9:b9:a2:ca:c9:48:ba:ef:ed:
6d:7a:4b:d4:a8:78:37:90:20:7b:50:9f:ad:fe:65:
90:d4:35:ba:6f:0d:2d:e0:21:9e:29:e1:ff:cc:01:
8d:17:63:8a:7e:f2:71:c7:32:85:e5:0e:ad:1d:44:
93:ea:bd:4c:c1:55:88:6b:ad:fb:7c:24:1f:3f:d7:
f8:2f:2a:d3:4c:51:e2:dc:0c:39:e7:f1:3c:c7:ee:
4b:a4:b6:6a:a5:41:73:f8:f1:83:d6:9b:bc:86:bf:
b7:81:b2:63:5d:7f:e3:2d:41:33:3b:76:ae:49:bc:
2b:eb:fe:20:5f:67:b4:d7:3e:2c:9b:ac:5b:f7:a7:
6f:71:9d:d2:ef:5f:64:17:19:aa:54:bf:c9:5d:a4:
5c:04:c6:97:58:8f:c8:76:03:08:93:e8:a7:76:62:
d4:e4:33:4d:2b:e1:37:65:14:81:5f:8a:92:55:56:
a3:a3:8e:95:d1:6d:9d:32:9c:c3:dd:0e:40:94:86:
21:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:FF:9B:F5:E1:41:8D:EF:4B:71:28:84:D4:10:0E:D7:B3:AD:E3:47
X509v3 Authority Key Identifier:
keyid:92:1B:4C:85:CA:A8:D8:B1:66:19:BF:94:5A:2F:D6:AF:1C:77:FC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/42b179-4790-4520-b174-50505382fd72/1/khtMhcqo2LFmGb-UWi_Wrxx3_Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:43:aa:a2:74:6c:64:bc:02:a6:bb:50:3d:ad:7b:e4:45:17:
a7:8e:98:73:57:98:49:0d:65:07:7d:6c:5c:6e:a5:b7:9a:8a:
b5:da:d2:1f:77:52:c0:a0:18:77:06:70:19:7c:d5:06:f6:55:
ba:45:7a:79:5c:89:5b:dd:d0:bb:15:f9:35:65:53:e3:f4:5c:
41:d2:5f:07:0f:cc:0e:73:08:8c:eb:ca:a3:e0:06:0d:52:30:
f1:2b:2b:0c:cc:3c:41:43:41:5e:56:ea:27:9d:d6:77:c4:8e:
56:27:3c:34:4d:70:08:f1:0a:0e:05:87:07:1d:de:cc:b9:92:
53:0b:b6:06:9d:b4:9a:58:1a:c3:ae:83:ab:11:7a:4b:b7:e8:
ed:a0:06:7e:c9:d6:54:33:94:8e:4f:8c:63:69:fb:8f:4e:48:
79:f0:02:e6:7d:b7:c9:ab:08:d7:ed:8e:9d:a2:27:7a:14:24:
62:43:4c:e6:66:6d:13:51:69:2f:9c:37:21:6b:7c:29:78:b8:
20:bd:3f:e6:03:7c:1d:22:7e:ee:d0:8d:af:e5:e7:cd:2c:b7:
4c:07:9e:5f:11:3d:ab:c2:a7:66:b4:91:89:ad:54:0a:9d:87:
b5:e1:b9:55:19:ce:48:dd:e4:ed:f4:5a:0d:d2:19:a6:2a:62:
ac:d8:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 19:12:19 2025 by rpki-client