Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
File: kXWIXPl40u9mE3YhRTC57WjFtFg.mft (raw, json)
Hash identifier: oe14zePm2w1MMJdaHE1/HXb64byIzSjcuxtVP29m5F8=
Subject key identifier: 1D:6B:A2:92:E3:04:38:88:F9:95:3D:FB:10:98:D2:BF:BE:6F:4A:B9
Authority key identifier: 91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
Certificate issuer: /CN=9175885cf978d2ef661376214530b9ed68c5b458
Certificate serial: 019679B1B39DA3C99F96BAD88EF5A879022F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
Manifest number: 082E
Signing time: Mon 28 Apr 2025 00:00:11 +0000
Manifest this update: Mon 28 Apr 2025 00:00:11 +0000
Manifest next update: Tue 29 Apr 2025 00:00:11 +0000
Files and hashes: 1: kXWIXPl40u9mE3YhRTC57WjFtFg.crl (hash: TFHEQhQZjFdzHcjFkipTwqrwiMi2m0UJNhmfVNVcjAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:79:b1:b3:9d:a3:c9:9f:96:ba:d8:8e:f5:a8:79:02:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9175885cf978d2ef661376214530b9ed68c5b458
Validity
Not Before: Apr 28 00:00:11 2025 GMT
Not After : Apr 29 00:00:11 2025 GMT
Subject: CN=1d6ba292e3043888f9953dfb1098d2bfbe6f4ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2b:67:ac:9c:8f:ca:d7:18:96:42:ac:57:cd:
31:10:8e:9d:d0:32:d5:56:3a:7f:50:de:4a:dc:e2:
c7:d4:72:7d:01:a6:f3:95:df:5a:b7:82:ef:f2:a1:
80:d8:0d:66:be:e0:99:8e:37:c5:eb:b3:37:4c:91:
81:f7:0a:2d:1c:0e:67:86:9b:2e:7b:87:38:e1:19:
99:c0:a9:2b:fe:13:c1:21:e5:df:d0:1a:e7:d1:d9:
f0:e8:7b:e0:30:69:58:b7:49:3d:77:e0:cc:12:cc:
0b:5d:31:27:23:58:70:32:7b:be:97:3d:7d:7d:b5:
48:c8:eb:d2:eb:23:c6:71:22:0e:4c:3e:13:12:91:
93:31:8a:2c:05:aa:bc:df:93:11:6a:22:f9:31:c9:
c8:56:ca:4e:18:92:95:f1:c2:23:ae:68:b8:68:98:
e9:3a:da:98:4d:19:3d:2f:48:d8:95:a9:fe:15:d8:
60:ab:8a:a9:02:e5:2e:49:43:6d:35:59:a7:fb:24:
54:00:c1:6b:3e:7f:76:54:2c:bd:c0:0b:85:a2:eb:
cf:6b:4f:4d:fc:75:67:29:27:74:54:d1:39:27:e1:
09:55:6a:d6:3f:4d:3e:10:b8:92:a0:1e:19:4b:b2:
b0:50:18:a1:52:f6:30:4f:ed:e5:c3:d3:1b:bf:f3:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6B:A2:92:E3:04:38:88:F9:95:3D:FB:10:98:D2:BF:BE:6F:4A:B9
X509v3 Authority Key Identifier:
keyid:91:75:88:5C:F9:78:D2:EF:66:13:76:21:45:30:B9:ED:68:C5:B4:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXWIXPl40u9mE3YhRTC57WjFtFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c485d9-2736-49b1-9a44-1b95819cfc9c/1/kXWIXPl40u9mE3YhRTC57WjFtFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:4c:d0:3b:bc:28:4f:2f:cc:75:7d:d0:e2:9d:0a:94:f6:3a:
a2:dc:3a:26:da:de:b7:96:ec:ff:30:a0:52:4a:63:80:c3:43:
2d:96:9a:12:49:46:54:65:e3:94:31:2f:0e:a1:fa:ca:fb:d9:
db:cc:c7:b7:e4:6b:79:d2:03:79:5f:51:2f:41:42:0c:ad:a9:
0b:fb:12:39:8e:02:5f:6c:1e:f1:e9:12:41:14:58:e7:55:56:
8f:b6:41:fb:66:68:f2:f8:6a:ea:b9:33:b9:74:db:49:4d:21:
e5:55:23:4a:ab:2d:85:1f:18:fa:f4:fc:e7:e6:42:26:f8:e9:
ef:70:c0:04:f4:63:9d:51:f3:01:0e:e0:05:67:81:3b:6f:22:
4c:ba:51:f9:7e:c9:31:44:1c:c2:8d:e3:22:54:82:9d:70:c7:
29:fa:99:72:77:11:18:f6:ab:a7:56:67:ca:3d:78:53:c4:d3:
02:c9:3b:56:99:bf:ed:c9:f3:b1:c6:e2:c5:cd:d9:ef:34:57:
16:7f:09:6f:53:b9:34:f6:db:25:a4:5b:4f:d8:6e:d5:88:ae:
f5:65:66:0f:97:bc:0a:83:f4:03:a8:9b:2b:c8:03:cd:2e:da:
67:4a:0e:06:41:8e:d1:47:a2:39:79:f9:3d:df:57:74:46:f1:
88:23:f8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:45:14 2025 by rpki-client