
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: kFZEVCt+SFImFcU1N72JiY7AfVx1zuajr3Q4/vhAhGQ=
Subject key identifier: 62:95:37:E0:45:6A:66:7F:85:06:E1:1F:43:D9:A7:D5:54:43:F4:D3
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 01967A5735A31F016C83392D72484A0E1EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 14C0
Signing time: Mon 28 Apr 2025 03:00:57 +0000
Manifest this update: Mon 28 Apr 2025 03:00:57 +0000
Manifest next update: Tue 29 Apr 2025 03:00:57 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: 3/FrwfZ4QYJ3Nm4A58Ucub+QefHXihJA7mXl9F1qlWQ=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:57:35:a3:1f:01:6c:83:39:2d:72:48:4a:0e:1e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Apr 28 03:00:57 2025 GMT
Not After : Apr 29 03:00:57 2025 GMT
Subject: CN=629537e0456a667f8506e11f43d9a7d55443f4d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:b8:bf:33:43:4c:ea:7e:b2:af:0f:1c:b3:
ca:ea:d3:ed:c0:55:f6:08:1a:b1:d9:ac:e4:7b:f0:
bf:8d:31:2c:50:3f:3b:3b:55:09:1d:20:d6:92:9e:
ff:48:c0:c8:54:11:ec:4f:0c:12:3a:4b:99:4d:47:
14:27:3c:0f:fe:a1:21:f1:ab:71:57:df:8e:d2:08:
e4:e8:8d:89:e9:24:45:38:86:ed:92:ca:33:2b:ba:
f8:e7:89:8f:51:64:94:5e:ee:2c:8b:62:13:4f:de:
23:f2:2a:7b:59:1c:a9:8a:78:66:a6:08:83:d4:41:
20:50:4b:b5:9f:e1:f0:36:40:77:1c:df:1f:85:4e:
af:71:c1:14:c3:d4:90:0b:f9:6e:19:63:b3:87:ba:
c9:35:d6:8f:2a:4b:14:a7:3b:52:54:7f:1c:58:d8:
41:02:75:d7:01:13:72:2e:c2:01:8b:8b:56:40:6c:
61:c8:54:ad:ad:84:a1:c6:23:ca:9d:a7:a3:f9:ce:
17:3b:6d:90:a1:63:cf:ef:1e:fd:4b:a5:1a:37:ce:
3f:46:6b:17:52:88:87:27:e5:23:18:01:a2:66:38:
e0:88:5e:6c:db:4d:c2:bd:53:4f:81:49:6f:93:10:
da:f4:41:c2:e0:0a:09:f5:87:3a:42:f9:43:2d:b3:
9d:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:37:E0:45:6A:66:7F:85:06:E1:1F:43:D9:A7:D5:54:43:F4:D3
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:e4:de:89:3c:25:9f:f5:50:22:0c:86:78:8d:7b:8d:9e:db:
f6:3e:b2:16:8b:15:72:46:20:9c:75:2e:36:55:9a:8f:94:b5:
76:f6:58:ba:be:36:11:a9:f0:8c:89:22:a0:08:e6:0e:30:c2:
3c:45:eb:c1:de:2d:98:01:06:63:8d:0f:7c:9b:38:24:93:b3:
93:49:0b:56:62:44:71:f0:32:67:1a:2d:b8:d2:03:fd:b6:ee:
79:e4:c9:ea:44:d1:c3:97:2f:fd:23:a3:3e:68:eb:d7:cc:50:
a0:2a:48:90:fb:26:71:4c:dd:39:ee:a5:a4:5d:26:46:4b:f3:
82:7c:69:1e:f4:04:71:ae:7e:cb:f9:36:35:ef:6d:55:c9:0f:
83:8d:05:e7:7b:db:ee:65:d5:34:7e:5e:e3:91:b9:88:dc:72:
71:c6:49:18:7b:20:a3:93:ef:24:f6:8a:ed:e8:30:53:72:d3:
23:44:f1:19:05:16:3d:9d:09:ba:ff:99:e5:ee:15:3a:fe:aa:
90:ac:98:32:66:e1:4b:05:57:02:56:f5:25:cc:20:c3:58:16:
ab:4b:9e:fe:e8:3a:cb:e8:75:64:9f:ff:e3:2b:47:5b:ba:80:
1a:9a:8c:6d:83:36:11:30:e8:c2:72:58:77:0a:95:55:82:ba:
ca:7e:f1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:58:59 2025 by rpki-client