Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
File: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft (raw, json)
Hash identifier: m2Ua5wi7FPE93LfRHc4TdSHlPMLNuABHFlKoAiFmlGs=
Subject key identifier: BA:E3:37:ED:59:16:56:1F:06:C9:F4:CE:2D:34:B0:7A:25:3E:02:48
Authority key identifier: 2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
Certificate issuer: /CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Certificate serial: 01967AC52B2BCF41554EC23E4B03CC47DA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
Manifest number: 1475
Signing time: Mon 28 Apr 2025 05:01:04 +0000
Manifest this update: Mon 28 Apr 2025 05:01:04 +0000
Manifest next update: Tue 29 Apr 2025 05:01:04 +0000
Files and hashes: 1: Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl (hash: wNB8CY6L0PKTleph96K9aSW3S3I0QIKvrU6D7d69GsI=)
2: fXL0uaR8EGTfgjwNeLPfkR-XYZ0.roa (hash: XcBDg6SFO9es9ohuelGMBtP1Av1BLAYbIVQZ992NLeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:c5:2b:2b:cf:41:55:4e:c2:3e:4b:03:cc:47:da:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b1dc205e24a23a5a0454a13f1d4a0c9637a439d
Validity
Not Before: Apr 28 05:01:04 2025 GMT
Not After : Apr 29 05:01:04 2025 GMT
Subject: CN=bae337ed5916561f06c9f4ce2d34b07a253e0248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:0a:38:05:29:b8:28:7e:4e:d3:e6:5e:91:3b:
c0:ca:39:c9:ab:a0:50:93:49:28:bd:a3:02:29:1d:
85:2b:36:a7:79:71:81:be:22:6c:b6:6e:7a:81:99:
c0:c1:74:8c:69:b4:08:6f:0e:6c:8b:c6:8a:e4:2e:
e7:85:90:5d:4a:54:13:7c:83:0a:18:07:0d:ac:cc:
22:23:13:e1:ad:e9:fa:97:e4:57:50:02:8d:ea:5c:
83:be:44:57:63:7f:ac:bc:c9:83:3f:cc:9c:6a:15:
fb:31:65:28:69:35:c0:d0:74:43:53:11:5b:2a:5d:
65:00:b6:8f:cf:79:cd:fc:1c:74:34:52:76:68:10:
69:e5:80:7e:dd:04:f6:26:7f:56:e2:91:07:0d:d6:
82:3b:a2:d9:a2:ff:5a:69:f2:61:7e:31:a3:b6:80:
18:e8:13:cd:ba:52:42:14:c9:63:0a:97:ff:66:e6:
c1:34:46:14:16:19:d4:c6:fd:4a:43:62:fc:db:2f:
87:c8:6d:b1:b3:db:e5:cf:1f:0c:eb:77:7f:bb:bb:
9a:a5:27:d3:a6:0c:3b:31:ff:59:36:b2:09:f4:f1:
3d:2d:d8:c6:15:03:b0:99:90:b8:c8:2a:1e:3b:c1:
aa:7d:d9:80:65:1c:97:a0:11:47:7c:b9:4e:56:47:
e7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:E3:37:ED:59:16:56:1F:06:C9:F4:CE:2D:34:B0:7A:25:3E:02:48
X509v3 Authority Key Identifier:
keyid:2B:1D:C2:05:E2:4A:23:A5:A0:45:4A:13:F1:D4:A0:C9:63:7A:43:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/47422f-2fd0-4b32-9354-dbc9a522cd12/1/Kx3CBeJKI6WgRUoT8dSgyWN6Q50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:f0:57:b5:1e:23:02:23:3f:8e:1d:be:9a:b0:bb:20:dd:f2:
4c:41:3c:92:bd:01:6d:ef:b5:4c:2d:a6:84:a7:a1:67:16:a4:
1c:cd:96:50:9a:48:01:3b:5e:79:2e:86:a3:35:fb:68:6c:90:
20:f8:1f:cd:25:05:06:97:e2:b9:9b:96:34:6c:b8:2a:78:de:
6f:52:41:7e:b1:99:28:f5:72:09:b4:9d:fb:2b:c2:9f:8b:51:
c7:d2:fb:f7:1d:70:29:4b:23:4b:22:a4:a9:df:9f:5d:d9:2e:
f8:a8:f1:81:6b:f2:8d:2b:e1:fa:2e:1d:81:b2:05:b6:fb:2b:
7b:8b:43:f7:bf:e4:74:ea:4e:e0:bb:04:f5:6e:9c:19:e9:17:
5f:c7:c7:f7:7d:a3:70:50:c0:7a:2d:71:a5:00:f4:f5:f5:b4:
81:18:ca:de:9d:1d:5a:53:dd:e2:30:f2:9e:d0:d7:7f:36:f3:
07:2e:6e:e9:12:07:17:a3:77:8b:fd:46:33:1d:84:45:fe:f2:
4a:b7:8d:4d:40:66:ef:75:cc:f9:68:1e:ef:75:48:9b:53:01:
52:7a:ad:2a:cd:40:1e:96:d9:c4:7d:84:f4:b7:ba:37:d3:89:
80:c3:6d:80:30:65:23:e9:25:6c:03:8b:9e:c2:15:e8:5f:98:
95:4e:0f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:25:08 2025 by rpki-client