Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
File: K4V9n2ATsKvwt13vPuHIGbbCWEs.mft (raw, json)
Hash identifier: O8PBrCZbvsTsujfhDYSgL4BheUjrbguBsPtCXnfrj4E=
Subject key identifier: 5B:7C:B7:40:6C:2B:D5:45:57:A3:D2:43:59:34:A1:0F:4F:35:CA:4A
Authority key identifier: 2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
Certificate issuer: /CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Certificate serial: 0196789FB285BF6DB0C9A9F487A7FB946AAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
Manifest number: 11C1
Signing time: Sun 27 Apr 2025 19:00:53 +0000
Manifest this update: Sun 27 Apr 2025 19:00:53 +0000
Manifest next update: Mon 28 Apr 2025 19:00:53 +0000
Files and hashes: 1: K4V9n2ATsKvwt13vPuHIGbbCWEs.crl (hash: QzN182C3OrYorcLgJq7Ea/Ebzz6Edgf3osUSoNxvp0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:b2:85:bf:6d:b0:c9:a9:f4:87:a7:fb:94:6a:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b857d9f6013b0abf0b75def3ee1c819b6c2584b
Validity
Not Before: Apr 27 19:00:53 2025 GMT
Not After : Apr 28 19:00:53 2025 GMT
Subject: CN=5b7cb7406c2bd54557a3d2435934a10f4f35ca4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:ad:bf:c3:5b:ba:d8:85:aa:7e:d9:9a:5e:
9f:1f:85:6d:e7:bf:4a:4b:e2:bc:c5:5e:ad:92:23:
6f:db:1f:8d:16:63:a2:56:f8:9e:3f:65:52:df:7b:
c4:79:e8:85:7d:e3:e1:3a:dc:47:6f:7a:87:d1:ac:
f2:fe:ef:71:e4:cf:b8:00:1e:a9:57:7c:80:e2:be:
6b:1a:40:ca:94:a5:df:78:17:34:af:26:19:65:a0:
3e:8a:73:83:b1:a0:90:17:4b:77:38:73:0f:8a:9b:
5b:4c:7b:20:b3:a7:46:94:3a:18:44:b2:14:83:ac:
99:98:2b:3d:92:ad:90:54:e9:54:dc:d3:bf:8a:ac:
ec:99:98:ed:5d:52:39:d9:53:5f:fc:42:a6:b8:06:
2c:5a:6b:eb:01:36:80:cd:c7:a4:18:cf:08:a4:78:
3d:53:22:78:bb:81:e3:0a:d7:ef:ec:8b:3d:a2:fe:
4f:30:e7:89:98:dc:92:1d:d6:01:b7:12:73:cf:09:
d3:a2:e1:16:27:56:e4:41:72:f6:d3:c6:29:93:f0:
b8:90:20:9e:aa:47:fa:0b:23:49:d4:79:c7:97:76:
98:6a:d6:30:8b:6f:4b:3e:4d:e4:df:1e:9c:dc:ef:
f7:82:09:a2:92:b8:63:02:82:ae:cb:ce:23:c4:25:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:7C:B7:40:6C:2B:D5:45:57:A3:D2:43:59:34:A1:0F:4F:35:CA:4A
X509v3 Authority Key Identifier:
keyid:2B:85:7D:9F:60:13:B0:AB:F0:B7:5D:EF:3E:E1:C8:19:B6:C2:58:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K4V9n2ATsKvwt13vPuHIGbbCWEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/378a0d-270e-4f5b-91e8-eaa9d6123f57/1/K4V9n2ATsKvwt13vPuHIGbbCWEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:24:1e:bb:e0:56:0c:79:66:13:a7:40:28:75:fa:f4:55:de:
b8:58:ee:a2:b8:b3:f1:40:42:19:06:75:ee:73:ea:23:1e:ce:
76:8e:6c:be:c6:12:96:d8:3d:62:d4:c5:96:ab:5c:30:c5:c2:
c7:60:c1:d0:d9:4c:49:7c:ce:1b:f4:48:66:39:b0:1b:33:d3:
2e:97:0c:87:af:e5:8f:2a:12:b2:b3:1a:a8:41:7b:fb:0e:21:
e1:71:7e:fc:9a:d2:70:f1:1e:38:20:52:08:13:c4:96:3c:0d:
23:ad:2b:54:13:1a:33:4b:38:f1:07:10:cb:29:ca:c3:29:16:
2d:4c:ae:ac:4b:a9:6e:96:a1:3a:fe:b2:36:98:8c:95:7f:89:
01:37:61:ef:9a:22:0b:21:3c:ce:07:3b:07:96:89:d5:6a:6a:
31:66:71:52:2d:d9:22:9f:5d:da:29:bb:91:bb:98:d7:c6:e7:
31:87:51:76:c6:84:d3:1d:62:6d:28:6f:21:3a:88:0e:e3:be:
cd:7f:ae:92:72:60:48:32:db:9b:6d:ae:8c:29:61:be:36:0f:
21:06:26:d2:8f:6b:b5:38:59:c7:5e:73:ba:d9:92:56:a0:62:
3e:bc:72:ed:94:cd:fd:70:cd:62:27:35:f1:48:87:fa:11:cf:
25:de:5f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:03:12 2025 by rpki-client