Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: hI3dPYXRA61L0W2fLGH3NYe/zY8qZEKR2Ru4dnsY77I=
Subject key identifier: D6:5C:AF:E2:A5:32:A1:52:A5:4A:39:51:74:C1:EE:3B:D7:41:E3:0B
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 01967E33FB620FA53CD2F83336EE7513F3B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 1515
Signing time: Mon 28 Apr 2025 21:00:57 +0000
Manifest this update: Mon 28 Apr 2025 21:00:57 +0000
Manifest next update: Tue 29 Apr 2025 21:00:57 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: YfCgISKnvq471xY1rYycQq39Fe7oexP1Mw5lWDIwkpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7e:33:fb:62:0f:a5:3c:d2:f8:33:36:ee:75:13:f3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Apr 28 21:00:57 2025 GMT
Not After : Apr 29 21:00:57 2025 GMT
Subject: CN=d65cafe2a532a152a54a395174c1ee3bd741e30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:15:a3:96:47:83:a7:52:45:33:96:92:c8:
04:97:62:28:f2:75:41:81:f7:87:7f:7a:8f:46:b8:
9f:18:ac:9e:b5:e3:f9:59:33:c9:e6:dc:df:84:15:
8e:86:0e:7a:63:95:f0:3f:33:d4:c1:f6:a1:35:51:
fb:6b:9a:a5:f0:e7:fb:d6:a0:b4:85:0c:52:d4:44:
af:98:9d:f1:68:03:90:fd:4a:84:7b:0a:c4:71:5b:
6f:a5:af:f8:f7:2c:bd:d5:4a:75:06:d6:ad:f0:95:
65:e9:13:89:31:07:f5:2a:6e:99:f7:f6:01:42:46:
0f:e6:0a:a2:24:9f:10:6f:8d:54:f4:94:db:5a:0a:
3a:b5:37:00:ca:2c:cc:ae:25:3b:be:99:41:57:d0:
3b:0c:83:1d:f8:49:3a:b6:65:dd:46:d0:93:db:ca:
07:c1:68:83:56:75:70:6e:3b:77:af:a5:bc:9a:a1:
96:e4:36:a8:81:5d:f1:c0:4f:4a:6d:ce:e5:81:7b:
c4:51:66:50:6f:b3:98:15:b5:bf:d5:61:c5:95:94:
ce:b8:f3:7d:0b:53:c2:4f:37:c1:c7:49:cd:15:9c:
00:72:d1:49:fe:53:28:46:a8:b4:37:b6:d7:3d:88:
52:3e:cc:12:2b:89:ce:3c:e1:3b:f8:10:eb:fa:df:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:5C:AF:E2:A5:32:A1:52:A5:4A:39:51:74:C1:EE:3B:D7:41:E3:0B
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:9c:cd:96:81:3c:ba:cf:a4:02:df:4c:ca:4e:cd:e8:7a:d2:
b4:6a:55:22:8e:8f:f2:f7:68:76:f8:89:94:89:6d:e1:66:9a:
3f:46:ff:30:03:71:76:f7:74:74:78:41:68:1d:23:da:a2:1d:
ba:1a:88:24:46:7a:e4:53:ab:b7:9a:8e:3a:b2:b9:eb:1c:41:
bf:5e:65:c8:34:64:54:05:bb:d4:af:51:0c:c1:78:54:dd:c2:
94:f6:c9:e5:52:3d:07:2f:72:5f:ec:6e:b5:3b:09:4d:35:ea:
67:8f:46:78:f5:66:8b:08:cb:ab:f8:97:cd:a1:90:92:31:d6:
de:51:ed:60:d1:d9:30:99:27:8e:6a:98:05:14:25:ca:76:82:
a4:53:aa:bd:6e:b4:29:93:3b:7d:15:88:45:3e:88:a6:0e:22:
67:99:06:48:69:16:85:74:20:c4:bb:fb:01:45:bb:17:98:28:
b8:bb:b3:29:93:8e:ba:97:31:10:9c:14:81:54:9d:7f:34:1e:
1c:f1:43:77:57:20:9a:f7:b4:93:28:b6:96:8a:33:cb:6f:2f:
8a:2d:07:b2:96:39:99:aa:bc:cd:7a:ba:ed:c0:7c:5f:00:13:
f7:c3:b6:10:cd:aa:b8:99:d3:31:73:c6:20:17:21:b4:88:98:
4b:0b:80:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:06:18 2025 by rpki-client