Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
File: K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft (raw, json)
Hash identifier: K/0W9JVFpNYhSP/jMlQ5vakfsWQnLL558l5MoU+XERY=
Subject key identifier: 15:77:0C:22:AE:6E:47:DF:76:14:A1:1C:22:62:8F:BD:04:6E:84:26
Authority key identifier: 2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
Certificate issuer: /CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Certificate serial: 01967DC6CA1110E16AEE57AEB64DA665797D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
Manifest number: 062C
Signing time: Mon 28 Apr 2025 19:01:41 +0000
Manifest this update: Mon 28 Apr 2025 19:01:41 +0000
Manifest next update: Tue 29 Apr 2025 19:01:41 +0000
Files and hashes: 1: K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl (hash: JK4S50321bGe045maCI6HaY2sPWSpv3geERBljBqW2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:ca:11:10:e1:6a:ee:57:ae:b6:4d:a6:65:79:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b57b0db0016fe625095df0c6e57fe07f1cf289f
Validity
Not Before: Apr 28 19:01:41 2025 GMT
Not After : Apr 29 19:01:41 2025 GMT
Subject: CN=15770c22ae6e47df7614a11c22628fbd046e8426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e8:78:24:63:fd:e6:a9:bb:33:93:51:4a:c3:
e3:ad:5b:3a:ab:bd:b3:e7:54:d5:c8:31:bb:4e:63:
08:02:a1:35:5e:73:c1:fd:13:76:14:c2:18:6f:aa:
93:30:68:5f:27:25:87:4a:bb:ad:81:ff:04:8d:fe:
af:b8:72:f9:9a:21:d3:ee:1d:e7:3b:29:f8:24:19:
ef:94:1b:b0:60:80:8b:0e:57:36:8c:0b:5b:95:dc:
2b:f2:bc:34:ac:e3:b4:42:91:3e:25:c6:21:93:b8:
47:e6:49:92:c7:14:40:be:e3:bc:d7:4c:e5:a9:8d:
9a:ff:0c:31:e0:4a:d3:78:2b:0e:19:fa:53:be:31:
6b:ea:2f:68:41:19:b4:1e:f6:1b:0d:52:b7:2a:e1:
8a:03:5e:ce:6d:38:15:3a:cb:93:38:85:57:b5:31:
61:1e:ff:da:4e:73:0f:5b:e5:cf:f1:16:42:20:89:
c4:17:90:c1:4c:79:83:2d:b6:43:19:07:81:55:09:
e4:80:4f:26:b8:b8:4e:01:2e:5c:49:22:be:11:f7:
5e:2a:78:0a:8a:b9:e8:8b:8a:d6:af:a8:00:38:7a:
fb:08:f2:68:7f:f8:ab:9c:c6:f8:b9:89:ab:fa:80:
54:be:26:32:de:f5:17:a6:b7:f6:ed:2c:a8:f3:4d:
d7:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:77:0C:22:AE:6E:47:DF:76:14:A1:1C:22:62:8F:BD:04:6E:84:26
X509v3 Authority Key Identifier:
keyid:2B:57:B0:DB:00:16:FE:62:50:95:DF:0C:6E:57:FE:07:F1:CF:28:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ew2wAW_mJQld8Mblf-B_HPKJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/22746e-cac8-45d3-a258-f44f35b7a95d/1/K1ew2wAW_mJQld8Mblf-B_HPKJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:8e:0b:36:7b:c2:3e:2e:20:8d:38:78:f7:70:92:a0:f8:21:
8e:26:2d:8d:27:8a:a5:79:39:be:98:79:c7:14:d7:8e:87:7b:
f9:de:c0:a1:e1:fd:88:75:ad:22:b1:f7:ce:9b:08:9a:7a:ae:
4b:69:f9:4a:a2:9d:a8:89:d7:8d:b7:6a:d4:fd:f9:ec:31:a1:
db:2a:b9:88:94:bd:e6:83:a3:b8:12:d5:2f:c3:e5:22:56:c5:
cf:d9:45:7c:3b:6d:0f:e0:5d:5a:be:80:6f:17:c5:96:3d:b7:
1f:80:d1:2e:67:e5:76:42:3d:b8:91:f8:d4:ff:e6:3f:1d:bf:
f8:d7:ad:88:f0:79:34:1d:f0:98:8a:bc:78:65:0d:11:a5:f9:
86:1e:97:d4:ad:a8:c1:95:53:30:88:27:85:54:a5:b7:00:46:
22:b8:47:6c:98:69:d4:7d:57:3d:12:c2:4e:62:fb:40:a1:ae:
81:e8:19:39:b3:36:14:e6:97:7e:1b:f7:0b:e4:14:d6:a0:65:
65:bf:4b:97:59:04:47:17:96:58:17:d6:08:b6:e1:c2:b7:da:
fc:0f:f2:99:95:e8:5a:9d:3e:ae:89:fa:f5:ba:3d:c4:90:69:
a5:61:ec:19:2b:92:1e:ef:ed:07:10:b8:de:fb:75:a3:e1:11:
4b:56:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 22:47:49 2025 by rpki-client