Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
File: v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft (raw, json)
Hash identifier: fkhURVQBy4rKts3ACN1YdyfYvW/9cwEA0QxJ04QFYh8=
Subject key identifier: C5:A9:76:67:B1:82:DF:78:1D:6B:0F:31:AA:1E:80:DE:1B:FC:44:74
Authority key identifier: BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
Certificate issuer: /CN=bf628b93661e905887359fc8e9a1888075db3cd8
Certificate serial: 01967FB44D0051A1BC10608F0E97D114474F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 04:00:44 +0000
Manifest this update: Tue 29 Apr 2025 04:00:44 +0000
Manifest next update: Wed 30 Apr 2025 04:00:44 +0000
Files and hashes: 1: O8A-n_YJ3aGox49eBzm7Q8xhXdQ.roa (hash: EUscQTnmBwchHhwFPgGdViuEre/xVGQ6ryyvSQoTdUA=)
2: v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl (hash: 6q2Xbvvw8vMd14MvEgQ6IH5wHKgHPwQJaMPLzDBT9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:b4:4d:00:51:a1:bc:10:60:8f:0e:97:d1:14:47:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf628b93661e905887359fc8e9a1888075db3cd8
Validity
Not Before: Apr 29 04:00:44 2025 GMT
Not After : Apr 30 04:00:44 2025 GMT
Subject: CN=c5a97667b182df781d6b0f31aa1e80de1bfc4474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:24:4e:4d:dc:f9:3a:e0:b5:ce:da:60:27:
cb:93:1c:87:9c:dc:2c:34:1b:d7:fc:ff:e6:83:14:
63:b1:76:98:f1:80:c7:77:ff:1f:04:f4:88:d1:ce:
c0:cb:d1:0f:f9:f2:c4:4e:73:a5:3e:1d:fa:63:78:
a4:1d:5d:07:de:65:7b:47:e7:08:e2:60:ad:b7:f9:
73:9c:e6:9b:50:a5:95:dd:8f:a5:3f:9b:1c:40:28:
e2:0f:2d:dd:92:97:56:8c:fa:eb:ff:14:3c:6a:66:
8a:44:a6:52:b9:a2:87:81:36:28:10:25:2b:b5:b8:
f5:c0:f4:f9:cc:0d:74:a9:1e:53:62:37:59:b7:57:
52:1e:94:45:1c:5f:ba:6b:f5:f8:f0:bd:0d:d3:7a:
f2:e1:d2:43:b7:d0:fa:7d:00:dc:6c:32:08:e8:b5:
8e:07:06:d0:69:9e:95:ae:f7:3b:52:97:7e:e8:ca:
3c:01:68:3a:f0:82:2b:2f:92:6c:c3:1e:f3:96:a9:
15:d0:44:af:74:27:b0:d0:62:83:63:4c:32:78:ee:
55:99:5c:91:f2:de:3e:b1:06:85:39:e4:dd:94:fe:
61:49:7d:7a:30:a3:a9:86:15:27:71:9e:bd:06:39:
8e:ef:e1:6f:46:e1:a6:e6:44:f6:6f:30:b9:c0:40:
76:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:A9:76:67:B1:82:DF:78:1D:6B:0F:31:AA:1E:80:DE:1B:FC:44:74
X509v3 Authority Key Identifier:
keyid:BF:62:8B:93:66:1E:90:58:87:35:9F:C8:E9:A1:88:80:75:DB:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v2KLk2YekFiHNZ_I6aGIgHXbPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6c83e7-a352-4e21-a731-157b5ad6ab7b/1/v2KLk2YekFiHNZ_I6aGIgHXbPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:3d:cb:11:ae:08:43:bc:47:f1:f8:0d:a9:71:82:5b:b8:32:
9e:e4:22:66:d5:e8:0e:87:a7:2c:10:98:9d:12:22:f0:8c:c6:
4b:a6:99:f4:5f:52:da:ba:fa:1e:69:4f:de:c1:57:7a:5d:2a:
f1:f8:e5:17:2e:f0:58:17:70:e5:fd:6e:2b:4b:60:60:14:0d:
3a:f1:53:9f:1d:4a:cd:8d:5c:38:22:d3:03:fe:65:27:cd:0c:
54:1d:05:ac:1d:63:e2:5f:e8:e4:01:5f:90:35:d1:ab:cd:14:
e0:36:f0:41:03:f9:74:97:9e:12:fc:57:94:14:79:42:e9:cb:
78:ec:1f:4f:63:c9:4e:27:44:65:58:ca:d4:f1:5a:42:e5:54:
f8:85:b1:c3:ce:5e:61:6a:0e:f9:14:d9:5d:12:d1:87:a0:f9:
44:f2:af:17:f7:1a:ba:5e:b7:9e:78:65:f1:45:4e:38:1d:98:
b7:cf:86:37:95:92:84:dc:55:75:62:1f:3e:4a:1b:7d:75:80:
a4:f2:16:e0:01:f8:32:f8:b3:ab:23:ac:91:21:8f:d1:da:c8:
a6:7c:b4:ce:00:de:05:81:fb:5d:7a:78:cc:d7:67:cf:fc:8e:
b3:79:07:7a:24:f7:ff:43:59:58:43:e6:5b:a0:f8:62:0f:ec:
2c:bb:8f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:17:21 2025 by rpki-client