Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
File: R_KdK9FeAku5fnKyEkK1I9yRUYE.mft (raw, json)
Hash identifier: iO5oOF8PG8PveJf5FLruxpQXLDyTsmYBpW2f5MVyKWY=
Subject key identifier: E7:05:5C:ED:5C:8B:B4:3D:BE:67:EB:49:29:E8:D1:AF:03:DC:F9:89
Authority key identifier: 47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
Certificate issuer: /CN=47f29d2bd15e024bb97e72b21242b523dc915181
Certificate serial: 019692CCC8530E242690286129CD865708FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
Manifest number: 151E
Signing time: Fri 02 May 2025 21:00:16 +0000
Manifest this update: Fri 02 May 2025 21:00:16 +0000
Manifest next update: Sat 03 May 2025 21:00:16 +0000
Files and hashes: 1: 2uH1JtbsSh2LEaKnPX8lAgWOEU4.roa (hash: GbQEJijg5o1dTfC76oTK57kNzuLPFqCLUWGp9VxRb9I=)
2: R_KdK9FeAku5fnKyEkK1I9yRUYE.crl (hash: hIZTV7wFpfDEe6eFOXqd+Y1+Poqbhw1tpU25INDvzVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:cc:c8:53:0e:24:26:90:28:61:29:cd:86:57:08:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47f29d2bd15e024bb97e72b21242b523dc915181
Validity
Not Before: May 2 21:00:16 2025 GMT
Not After : May 3 21:00:16 2025 GMT
Subject: CN=e7055ced5c8bb43dbe67eb4929e8d1af03dcf989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:bf:29:44:24:20:bb:84:ed:17:88:8e:c8:
cb:eb:12:e0:f4:d1:0a:fb:78:29:f1:85:63:3a:b5:
15:39:38:c3:bf:2a:ac:34:f8:77:ab:31:c9:a8:6c:
9c:45:0c:21:41:ac:c4:3f:10:ba:1d:86:be:3b:79:
14:23:92:b4:40:ee:27:fd:00:60:6f:7a:f0:46:59:
13:eb:60:56:e4:9b:d3:a0:a4:81:0d:41:6b:c9:ae:
9e:a2:4a:b4:db:a4:22:5b:97:fc:05:95:92:14:3b:
76:b9:e2:4e:d9:75:46:2b:b4:7e:92:22:df:0b:5a:
0f:3e:1d:ed:1c:67:c3:0d:7e:79:b0:9e:9a:1f:d4:
f0:8e:aa:1e:22:b4:d2:06:a6:cc:f8:60:50:ff:0a:
75:0f:53:2c:83:5e:9a:75:6b:ac:7d:ad:e0:84:d3:
c6:70:21:7b:bd:a2:83:b7:64:fe:d7:2e:b3:0d:32:
db:b6:88:16:f7:e2:a5:8e:d1:9d:8b:a0:99:9d:ac:
22:4b:72:e2:05:3e:13:5e:f0:3c:f9:45:da:3d:c4:
59:b1:6b:7a:0b:5e:20:a0:5f:af:9c:da:fe:f3:d1:
0a:8b:63:c4:27:23:c9:e7:42:8b:a4:a1:d5:97:29:
da:07:fe:f5:18:56:90:41:50:09:af:15:09:0c:e6:
bb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:05:5C:ED:5C:8B:B4:3D:BE:67:EB:49:29:E8:D1:AF:03:DC:F9:89
X509v3 Authority Key Identifier:
keyid:47:F2:9D:2B:D1:5E:02:4B:B9:7E:72:B2:12:42:B5:23:DC:91:51:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R_KdK9FeAku5fnKyEkK1I9yRUYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c32598-2a95-43c4-9b6a-0166532dac56/1/R_KdK9FeAku5fnKyEkK1I9yRUYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:0b:84:8a:8e:57:61:9b:08:4d:a6:27:a4:2c:09:f1:97:2e:
90:ce:f4:3f:7b:a0:da:c0:75:69:f2:70:f8:fd:49:a5:5d:80:
c3:cc:f4:5b:37:3d:da:91:14:f1:5f:25:57:a9:1c:4b:1e:ef:
b6:68:ac:9e:4d:53:56:9c:26:30:95:df:f9:9b:79:41:8f:10:
a5:0b:0c:86:cd:32:f8:ee:b3:df:a1:06:96:7e:8c:5f:ce:1a:
5f:27:56:b7:c3:ff:10:8f:ca:2a:cc:8b:51:50:2c:1a:a4:cb:
f5:8a:d3:21:dc:a9:d3:54:44:7c:c4:b5:4c:ec:c8:50:81:99:
b6:14:79:b2:f4:19:45:8e:72:4b:4e:ca:db:db:9a:fc:af:3b:
95:1a:ff:5a:50:17:db:5d:c3:d0:47:ba:bd:11:97:32:d9:d7:
dc:e2:e3:76:d8:c1:d7:57:85:3f:32:b5:52:43:13:3e:ee:83:
1d:ed:70:ab:40:30:d6:2e:6a:51:91:50:a4:3f:24:0c:37:30:
ea:d2:45:0a:76:6e:05:dc:64:83:67:a8:99:ab:7d:dd:25:92:
7c:7f:84:f1:3f:6b:e6:17:3f:a5:e3:56:d1:ca:9b:1c:79:cb:
37:27:3d:8d:7d:a7:a6:55:60:31:49:37:93:8c:97:2b:57:8e:
c4:dc:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 03:09:06 2025 by rpki-client