Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
File: KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft (raw, json)
Hash identifier: 0NSWjUy0ejm11tH/Q68doxggC0lz8Sp4dXsEKNTlpQo=
Subject key identifier: 94:42:03:83:87:20:93:4B:86:E1:BF:BE:C4:E6:B4:BB:A8:8F:36:22
Authority key identifier: 28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
Certificate issuer: /CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Certificate serial: 01969002E2285F9454C87A372CF5F67289CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
Manifest number: 0F17
Signing time: Fri 02 May 2025 08:00:30 +0000
Manifest this update: Fri 02 May 2025 08:00:30 +0000
Manifest next update: Sat 03 May 2025 08:00:30 +0000
Files and hashes: 1: KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl (hash: 5pIBmhom+Z5FTXQg8QLKpN2K1YxYm1ps3RA+JIkOkbU=)
2: NdfWSMRABwv2F_yFFl7X4UZH0vA.roa (hash: cuV8z/cxgYl0ffX7fgAA/EzOTZZ9e9S+JYGHmQ2nzxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:90:02:e2:28:5f:94:54:c8:7a:37:2c:f5:f6:72:89:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2845f1f4d59f811d6323db4d86d4f41854ede744
Validity
Not Before: May 2 08:00:30 2025 GMT
Not After : May 3 08:00:30 2025 GMT
Subject: CN=944203838720934b86e1bfbec4e6b4bba88f3622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:81:c8:87:f0:44:23:c2:6c:ce:fc:46:e3:ad:
72:ca:df:3f:98:43:32:54:d6:1e:07:12:02:09:12:
a4:ed:c5:63:65:39:eb:dd:d5:ce:bb:49:b3:10:c3:
65:86:a6:e9:53:88:8e:97:3b:a6:e3:94:66:a1:0f:
7c:3b:0f:d9:e7:eb:d5:13:f9:6a:94:17:a3:12:83:
f1:e0:0d:2b:df:cc:5b:6c:95:fa:83:fb:f5:e8:14:
e1:78:70:8c:2b:78:1a:2f:f8:a1:34:67:2d:63:4d:
bf:62:2b:45:36:2e:84:b0:f8:f8:e1:76:42:6c:9b:
ae:76:ae:0e:27:7b:27:65:9f:00:49:2b:19:a9:d3:
70:90:ee:85:21:c2:18:30:36:1b:d9:25:e3:23:3c:
ac:80:21:88:d5:91:25:6a:53:4a:47:97:2d:af:c0:
07:2f:f7:38:d8:aa:bc:e8:60:39:de:d6:b2:71:a7:
75:97:6a:bc:23:d7:87:0b:fa:e5:02:65:17:9f:3e:
84:b2:65:1d:a9:48:65:a5:1a:b9:1c:a0:fd:01:19:
5a:1b:7b:c5:a8:f2:b7:c5:ad:5a:a4:dd:86:2d:7b:
4a:44:6e:47:5f:4d:3d:3b:16:a4:8e:04:b1:fb:13:
61:cd:e5:64:88:ce:3e:0d:d2:7c:57:ab:6a:c6:71:
0e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:42:03:83:87:20:93:4B:86:E1:BF:BE:C4:E6:B4:BB:A8:8F:36:22
X509v3 Authority Key Identifier:
keyid:28:45:F1:F4:D5:9F:81:1D:63:23:DB:4D:86:D4:F4:18:54:ED:E7:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KEXx9NWfgR1jI9tNhtT0GFTt50Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/9069ce-dfe1-4b8a-af03-226f3b8031b7/1/KEXx9NWfgR1jI9tNhtT0GFTt50Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d5:e2:0b:8f:52:15:fb:b4:36:19:31:61:54:6e:6d:2a:a4:
fc:84:0c:9d:3e:21:f1:77:3e:67:4a:8b:94:85:d7:bd:80:b3:
f3:25:c4:a3:f1:53:59:80:2b:f3:2b:42:c3:cb:07:36:34:e0:
c7:78:11:e8:9c:38:f7:cc:85:cd:eb:71:83:c8:da:f4:bd:f0:
18:a9:01:5d:95:1d:ed:3c:4e:f8:f9:95:36:3e:e7:56:30:42:
89:ac:f4:e4:97:c8:c5:a0:0f:b4:05:b5:f0:d8:3a:45:60:2e:
5c:9d:72:54:23:30:1e:22:4b:90:a3:84:b5:3f:cf:6c:d9:84:
9c:16:4c:fe:bc:86:9f:56:df:9a:fa:f0:0d:5d:1d:a1:d3:67:
91:fb:2f:53:d3:a9:df:ef:97:61:0b:6d:64:f1:d7:6d:6d:c5:
54:fa:59:e7:2c:9a:15:f8:27:e7:16:65:06:25:ea:27:15:c5:
e0:16:54:e9:db:33:15:0a:a4:7d:8b:d7:24:a7:fa:ee:da:79:
52:d8:49:bc:68:ec:db:e3:df:48:6e:17:4b:73:6d:cb:f8:21:
62:64:90:e3:1a:12:28:96:4a:ab:da:62:a3:ae:6b:27:e2:35:
63:ff:21:e5:3a:a0:62:3a:4f:95:0b:86:86:80:50:65:91:41:
ed:78:ef:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 16:30:18 2025 by rpki-client