Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
File: KTbYQje3g8aiQFErjKckFhwNYds.mft (raw, json)
Hash identifier: u5OFzn08shTHIdbBtgNZOGUt7XiLiO7YgQ4PpCfQFPs=
Subject key identifier: 93:E3:28:9D:53:D4:5C:39:8C:44:AF:E8:62:DD:EE:BE:60:EF:2E:08
Authority key identifier: 29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
Certificate issuer: /CN=2936d84237b783c6a240512b8ca724161c0d61db
Certificate serial: 019769CE9250237D20CFBAC58AA7015DE123
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
Manifest number: 158A
Signing time: Fri 13 Jun 2025 15:00:34 +0000
Manifest this update: Fri 13 Jun 2025 15:00:34 +0000
Manifest next update: Sat 14 Jun 2025 15:00:34 +0000
Files and hashes: 1: KTbYQje3g8aiQFErjKckFhwNYds.crl (hash: cOn+hV8BdQlhD+IqB5kUKTpj75kR2Q/FIP9Aw3JRDSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:92:50:23:7d:20:cf:ba:c5:8a:a7:01:5d:e1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2936d84237b783c6a240512b8ca724161c0d61db
Validity
Not Before: Jun 13 15:00:34 2025 GMT
Not After : Jun 14 15:00:34 2025 GMT
Subject: CN=93e3289d53d45c398c44afe862ddeebe60ef2e08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a7:96:03:52:fa:ae:b4:b8:66:e4:70:8f:ff:
b7:8d:15:fe:3e:f8:d0:a2:24:2e:5b:d2:f7:f6:e8:
f1:d3:dd:f1:1f:af:ff:8e:b2:51:6f:83:8e:90:8a:
87:1f:cb:80:7b:95:49:af:e7:cd:ce:11:c7:c6:53:
5c:aa:4e:bd:e3:7f:1f:5d:76:a0:4e:ca:b7:c5:f9:
94:a7:7c:e0:f3:76:4b:ae:4a:24:93:d1:5c:2b:3a:
6e:e6:28:82:29:8d:19:03:36:bf:17:af:0a:62:99:
58:19:a3:25:56:53:17:6a:e6:f2:80:f6:f4:c2:e0:
f6:52:de:aa:18:e5:1c:ba:80:9d:6d:de:93:0a:d9:
c3:9a:04:0a:b4:ae:d0:13:52:b7:97:a5:7b:0f:64:
78:9c:56:d4:29:1e:b1:34:9d:d5:31:b0:ee:43:d9:
27:8d:5a:30:05:94:ed:10:f7:2b:db:2a:ef:ef:d8:
7c:ed:cb:c8:4a:8a:94:85:56:1b:4f:87:16:1a:04:
6c:9f:a4:cb:cd:2d:a4:27:93:47:67:fd:43:2b:67:
f3:a1:4b:f7:2c:36:4c:34:27:2b:44:f8:a1:f8:d5:
4f:36:1f:f6:ee:01:fb:05:6e:39:c6:eb:07:23:69:
6a:24:da:86:32:25:19:0d:3a:9f:59:36:d7:84:f7:
57:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E3:28:9D:53:D4:5C:39:8C:44:AF:E8:62:DD:EE:BE:60:EF:2E:08
X509v3 Authority Key Identifier:
keyid:29:36:D8:42:37:B7:83:C6:A2:40:51:2B:8C:A7:24:16:1C:0D:61:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTbYQje3g8aiQFErjKckFhwNYds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/5437ad-80af-4fdd-8724-af7e17ad8fb3/1/KTbYQje3g8aiQFErjKckFhwNYds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:50:7e:f2:2e:26:d7:55:dc:98:6e:4b:42:41:9b:92:e0:75:
53:44:ff:bc:65:14:c9:23:e1:88:5f:20:9b:1e:61:99:b3:01:
83:c1:e9:48:43:22:6d:9d:63:f2:29:23:ff:a4:e5:6d:7f:9e:
24:0b:25:17:83:1c:d3:9b:e9:ab:85:00:2b:90:9b:3b:63:ca:
e2:8a:74:79:09:44:85:13:5f:36:24:63:b2:0b:7e:d3:31:9a:
17:3c:0a:4e:34:95:3d:48:b9:ad:18:e2:13:62:85:b2:8e:14:
60:02:29:99:15:ae:22:f8:e6:71:36:7e:f8:1a:56:41:4e:5b:
59:9b:d7:f1:0e:49:40:15:88:c1:da:fb:a7:18:1a:94:e5:b8:
f0:e1:b8:4d:53:76:a3:f4:8c:0b:96:a6:81:df:f7:d3:f8:4a:
ae:99:5c:78:07:f3:c0:c9:63:97:91:d9:87:59:3e:be:8e:eb:
d3:7c:f3:2d:0e:62:35:e9:fc:4e:18:2d:6d:2c:36:ad:4a:09:
c6:ba:ee:cd:99:75:d0:17:0f:66:57:14:f1:ba:b5:91:c7:5c:
03:eb:8c:84:da:f3:fc:c5:5b:57:b0:62:20:61:88:dd:be:7a:
25:5d:ef:58:9a:cc:b8:ed:4f:8c:bc:7a:0e:f4:fd:6f:2d:ac:
b0:86:4d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:18 2025 by rpki-client