Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
File: kv6qMsTg4Zca0NWLFyztFyEFaFw.mft (raw, json)
Hash identifier: bcmIJteS1wcLxsqSCmi+TV0p0gbdjWo8/CTxp8NeAUQ=
Subject key identifier: 9A:31:8D:F6:BC:82:E5:A2:F2:D3:D7:26:97:CC:52:8B:B3:77:35:78
Authority key identifier: 92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
Certificate issuer: /CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Certificate serial: 01967B3271FF160F6889438D921BAFE58E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
Manifest number: 150E
Signing time: Mon 28 Apr 2025 07:00:25 +0000
Manifest this update: Mon 28 Apr 2025 07:00:25 +0000
Manifest next update: Tue 29 Apr 2025 07:00:25 +0000
Files and hashes: 1: kv6qMsTg4Zca0NWLFyztFyEFaFw.crl (hash: Uiz+HLmdeYPlUpIyD992ViQHnQR+rFI1KFphEzkxfHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7b:32:71:ff:16:0f:68:89:43:8d:92:1b:af:e5:8e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92feaa32c4e0e1971ad0d58b172ced172105685c
Validity
Not Before: Apr 28 07:00:25 2025 GMT
Not After : Apr 29 07:00:25 2025 GMT
Subject: CN=9a318df6bc82e5a2f2d3d72697cc528bb3773578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:7a:a4:53:a9:d3:fc:1a:62:bd:46:d0:4b:
f0:98:99:89:da:ff:2d:a7:f1:fa:bd:ff:65:48:44:
91:2a:60:80:4b:cf:7a:8d:0a:d3:d3:e5:a7:88:36:
69:48:83:2e:5d:fa:66:21:33:af:3c:6a:a5:f9:7a:
15:6f:5a:10:3d:8c:93:02:c8:28:a1:83:6a:34:b0:
5e:37:50:5b:ed:a1:12:3c:61:40:3c:19:36:50:99:
6f:a0:89:85:3a:b4:6f:b8:e2:33:e7:f7:9b:6a:e5:
e6:f3:28:ab:bf:12:75:f0:02:9f:81:cf:bd:e7:fb:
8d:a7:67:5a:0c:f7:35:88:9f:b2:88:3f:c9:1e:ce:
ba:03:c8:34:e3:9b:b4:8d:24:ab:e2:c5:aa:4c:49:
42:04:cd:c6:4b:4e:f7:2f:f3:da:46:c2:ed:9f:25:
d5:9c:8c:5d:d7:b0:7e:83:32:59:41:7d:fc:93:1b:
49:17:44:08:8e:88:32:9d:34:d4:7a:d1:6a:93:16:
c5:83:a4:8b:6e:c9:62:02:07:66:53:55:55:c6:3c:
90:57:36:73:75:9f:ef:11:f3:0e:22:b4:e1:f4:52:
ad:9a:a2:c3:c5:cf:f2:10:f7:dd:94:92:59:fb:92:
1f:62:3b:e7:52:63:57:7f:85:de:96:86:ea:0d:73:
93:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:31:8D:F6:BC:82:E5:A2:F2:D3:D7:26:97:CC:52:8B:B3:77:35:78
X509v3 Authority Key Identifier:
keyid:92:FE:AA:32:C4:E0:E1:97:1A:D0:D5:8B:17:2C:ED:17:21:05:68:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kv6qMsTg4Zca0NWLFyztFyEFaFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/df76ea-f75f-4ef3-806a-05ea22ddd723/1/kv6qMsTg4Zca0NWLFyztFyEFaFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:4f:ed:dd:ec:1e:59:10:e7:9b:61:67:5d:3f:f9:24:e0:50:
3b:46:f0:f6:a2:a6:4f:05:ea:25:23:c5:cd:76:8a:2c:8b:9f:
b2:3a:aa:41:86:ad:53:c3:93:1d:a0:8f:df:e5:60:4b:c3:16:
45:2f:ec:4e:aa:5a:25:68:42:7c:ba:f2:3f:34:e1:4b:4d:7f:
0f:8d:d6:69:b4:e1:cc:d0:97:04:1b:70:25:76:9e:ad:aa:05:
c9:2a:b1:2e:d2:2b:6a:33:d4:be:4b:56:18:af:fc:91:5c:26:
1d:0d:e9:9c:37:05:b4:26:07:f3:83:94:0e:0f:96:00:4b:1f:
75:7f:e7:77:37:5f:1f:39:48:27:4e:59:8f:50:42:61:45:65:
ac:67:f6:82:5a:b9:17:b1:71:d2:09:64:59:43:80:0c:10:13:
fa:6e:80:f6:6c:04:a7:56:71:93:c2:02:02:a5:a4:94:c0:bb:
0c:6d:a3:e8:c2:b5:f3:60:44:ce:cf:a5:b6:8d:0b:c6:b1:e0:
8b:58:5e:9f:cb:8a:b3:0f:9f:d3:ae:14:54:d9:16:32:eb:8a:
4a:0e:ef:25:d6:5f:c9:01:f9:9c:79:f4:f7:ff:3f:59:3c:a4:
39:eb:13:f5:b6:05:1b:78:f4:e9:23:74:43:79:1a:54:b7:b1:
6a:38:47:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:56:31 2025 by rpki-client