Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
File: kTkWd63vei6bCw5A6TssSvxNs14.mft (raw, json)
Hash identifier: 4xXdS0cZgU4R7htkIiqsmW5QTzD6BLPIrKxqSboYvtg=
Subject key identifier: 38:96:B8:73:EC:28:EF:8A:E5:53:76:21:03:C7:E5:BB:36:77:62:C1
Authority key identifier: 91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
Certificate issuer: /CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Certificate serial: 019677FB285AF5DCC06E875328DF56BC3DB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
Manifest number: 0E6C
Signing time: Sun 27 Apr 2025 16:01:10 +0000
Manifest this update: Sun 27 Apr 2025 16:01:10 +0000
Manifest next update: Mon 28 Apr 2025 16:01:10 +0000
Files and hashes: 1: kTkWd63vei6bCw5A6TssSvxNs14.crl (hash: srHXUSynuF12e7plRs/XjvXWYjq/T+9b/vyJJAOuDXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:77:fb:28:5a:f5:dc:c0:6e:87:53:28:df:56:bc:3d:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91391677adef7a2e9b0b0e40e93b2c4afc4db35e
Validity
Not Before: Apr 27 16:01:10 2025 GMT
Not After : Apr 28 16:01:10 2025 GMT
Subject: CN=3896b873ec28ef8ae553762103c7e5bb367762c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:45:8f:f9:a0:73:0e:c9:1f:7f:41:23:ba:
d1:95:68:fc:81:90:75:be:21:9e:f7:ad:3c:a3:4a:
4f:8e:88:89:43:ca:98:30:73:1e:e2:8b:48:3e:0c:
22:0a:18:dd:c8:9c:c4:f2:59:fe:51:b4:93:2d:de:
34:d6:5c:4a:09:21:e4:2c:ef:c2:c4:33:ff:2f:8a:
6c:7c:0a:80:02:8f:54:89:f4:52:25:46:26:fa:95:
7e:e7:99:67:5e:14:a3:22:2b:7d:f4:c2:01:f9:13:
4b:dc:ef:dc:fe:f1:c5:45:d9:f5:e7:82:53:42:36:
55:98:b4:50:5b:45:c1:3d:b4:5b:ae:af:bd:74:01:
c8:d8:34:5a:74:09:11:86:2a:ea:c2:4e:32:d4:3a:
00:e2:c1:17:75:65:96:99:40:ae:27:e8:8e:d7:e6:
69:24:22:e0:7a:c4:37:b1:fa:0e:64:83:57:1c:67:
a7:36:e7:3c:8e:76:23:02:56:15:74:e8:f5:c4:82:
1c:db:eb:d9:41:4f:42:ac:c9:e8:60:f7:a5:20:8f:
60:20:94:09:bc:0e:97:d5:41:4a:03:63:7a:76:84:
39:26:24:83:79:e1:da:55:42:fe:91:61:fb:0f:f2:
cd:b6:30:ec:90:de:80:5c:b0:0d:9c:cd:d0:b8:9d:
a2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:96:B8:73:EC:28:EF:8A:E5:53:76:21:03:C7:E5:BB:36:77:62:C1
X509v3 Authority Key Identifier:
keyid:91:39:16:77:AD:EF:7A:2E:9B:0B:0E:40:E9:3B:2C:4A:FC:4D:B3:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kTkWd63vei6bCw5A6TssSvxNs14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/cfdef4-0329-48d1-a3c3-46bcb36df4b3/1/kTkWd63vei6bCw5A6TssSvxNs14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1e:70:2d:59:d1:aa:56:9a:ef:48:12:47:0e:7f:7e:38:5f:
09:8c:5b:1f:05:4a:de:4b:f9:0c:2e:78:b2:6a:ef:d9:7b:8e:
9c:cc:91:ec:a7:74:8c:75:22:ce:a9:34:29:06:18:f1:28:72:
15:7b:7c:cf:ac:a0:46:9b:17:ee:3a:0d:6f:01:1c:9e:e1:b5:
02:74:a7:f1:50:ac:0a:78:6b:6f:70:12:7a:8a:55:ce:36:83:
80:f2:a4:a6:45:fd:e1:b7:bf:e1:27:b2:61:56:c1:9b:21:75:
77:3f:67:58:9b:a8:de:fe:35:38:40:2c:3d:8a:06:0c:9b:c1:
1c:d3:d0:a9:08:42:db:c4:5f:bc:41:25:50:4d:90:7e:f8:0d:
9a:01:65:79:3d:1b:1d:1a:4b:07:62:e2:ed:3d:40:54:f6:da:
1a:3d:cc:66:1d:b3:18:4c:53:c2:cb:d6:6f:2d:25:bf:1f:3c:
de:22:a9:da:b7:e4:67:52:a2:cc:5e:42:99:c3:1c:62:84:49:
8d:d7:ec:f9:a7:94:e6:86:d2:b5:bf:b6:5f:35:c3:16:a9:a7:
16:a5:47:84:d8:88:04:fc:b1:38:69:7c:39:d5:64:16:01:8a:
2d:9f:5d:0b:04:c7:79:fa:88:09:b0:49:3d:37:f0:40:62:a6:
f3:66:08:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 22:54:23 2025 by rpki-client