Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File: rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier: 2sSC+BCPYV5Wo7vQ5AwnN+On7vPLJo5miDNMEi5BKMU=
Subject key identifier: E4:67:CF:D5:8D:78:2B:B7:7E:1C:6D:8A:68:FE:6E:AF:6B:A2:7E:A3
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer: /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial: 01968B4A8AFEE0ABFB74CB210D89B0A28325
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number: 1515
Signing time: Thu 01 May 2025 10:00:40 +0000
Manifest this update: Thu 01 May 2025 10:00:40 +0000
Manifest next update: Fri 02 May 2025 10:00:40 +0000
Files and hashes: 1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: q0D6mgNu4K9hwZWDMmSl0CXLehHSWjtVnS+/ZgPlnIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8b:4a:8a:fe:e0:ab:fb:74:cb:21:0d:89:b0:a2:83:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Validity
Not Before: May 1 10:00:40 2025 GMT
Not After : May 2 10:00:40 2025 GMT
Subject: CN=e467cfd58d782bb77e1c6d8a68fe6eaf6ba27ea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f6:49:f0:e4:83:a3:44:9c:80:25:0a:6d:32:
79:06:e6:44:e1:a6:05:c6:ab:83:84:e7:ab:a2:5e:
71:3b:5f:de:b6:99:d1:76:00:bb:93:60:c7:7e:93:
48:16:e8:c5:27:a0:29:04:d6:52:79:16:11:7c:5a:
44:c3:64:ad:9e:b3:37:a1:ac:c8:2b:81:2b:01:12:
58:2c:95:c1:52:b7:86:17:cc:d2:da:f3:7e:da:f2:
0e:e3:f8:0e:cd:1d:b3:9a:6e:aa:32:62:b6:7c:99:
ff:9d:cd:1c:b7:3b:0a:e3:c2:4b:b4:e3:73:5f:3c:
0d:fa:3e:73:34:fe:5c:40:ff:2f:2e:95:39:89:1e:
81:d2:a7:0d:a1:b4:97:32:db:a9:23:36:4e:ec:2e:
b4:e3:3d:28:4c:3b:35:64:4f:2e:b7:ba:40:bc:db:
47:f3:5b:ad:3d:9e:a1:51:dd:b0:da:af:41:bc:f6:
48:ad:8d:67:4e:2d:05:21:a6:e5:33:1d:83:ff:0c:
9c:96:cd:58:fb:3e:57:07:40:2a:06:5f:f6:2f:67:
eb:08:91:26:34:a6:ac:25:a5:7e:e4:a8:66:af:17:
8a:57:5b:30:96:39:50:3f:99:00:0a:90:be:49:db:
60:9f:53:79:13:b7:08:e2:15:49:26:bd:e0:bd:f1:
b9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:67:CF:D5:8D:78:2B:B7:7E:1C:6D:8A:68:FE:6E:AF:6B:A2:7E:A3
X509v3 Authority Key Identifier:
keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f3:b7:fc:78:99:23:97:b8:b0:75:f7:76:af:ee:e3:61:f6:
91:1e:57:27:ef:ae:24:d7:4a:5b:aa:17:52:e5:59:3a:ad:0e:
ab:b6:19:0a:f9:c6:33:8c:b8:1f:bc:76:ae:b1:9f:88:84:35:
45:0a:7e:cf:75:35:ce:5f:6d:4a:e6:43:00:89:62:ba:2e:41:
51:2b:2a:51:3a:bd:d6:30:82:55:e4:bf:ef:20:2c:c5:6d:81:
9e:cb:0b:1f:34:d3:9a:a2:75:ee:05:4b:d7:2e:16:81:38:44:
ed:39:dd:ef:36:b2:16:11:8f:22:ac:11:f0:e4:64:f4:b7:2d:
d0:e5:42:c5:23:6e:0b:d0:9f:15:c0:51:96:83:74:3f:ae:bd:
4b:86:78:a9:fd:f2:c8:09:a3:12:05:d0:b5:57:ed:1f:b6:39:
8f:91:dd:37:96:99:32:c6:b6:8c:7d:c3:60:4f:84:a1:d0:6f:
83:88:78:44:8d:da:59:25:48:46:fe:5f:c9:9b:55:13:36:9e:
3e:61:26:ef:08:9e:40:3d:21:29:8b:18:81:a8:1a:42:44:08:
b7:4a:d9:61:1a:d4:5b:70:7e:d4:51:d1:3e:b0:9d:8c:c4:a4:
85:d4:9f:4f:e5:d3:36:6e:27:66:2b:21:cd:ec:a4:ea:e9:4c:
55:46:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 18:26:35 2025 by rpki-client