Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
File: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft (raw, json)
Hash identifier: JVMkAPkFlyc27XdS8scehd3T0s1Zc0tlU4YjfMyRlgM=
Subject key identifier: DA:F0:6E:A5:1B:C1:21:81:5E:7E:F2:5A:30:50:04:93:D2:13:AF:AB
Authority key identifier: 2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
Certificate issuer: /CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Certificate serial: 019617DA202515111571A2B33AA766E0E686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
Manifest number: 148D
Signing time: Wed 09 Apr 2025 00:01:32 +0000
Manifest this update: Wed 09 Apr 2025 00:01:32 +0000
Manifest next update: Thu 10 Apr 2025 00:01:32 +0000
Files and hashes: 1: Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl (hash: WS7NpPpBiKxLms2tTQe6SD4FeYMFb1Nk7J+LNqopwrk=)
2: iKZxL2ITs2UEzwBih25U8l0JZY4.roa (hash: vWT6oURLAcf2YPbSqMzxuY7JjVV7uzKdKfyzAxVTuCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:17:da:20:25:15:11:15:71:a2:b3:3a:a7:66:e0:e6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2acd8d1682e6622c1c09237bc41aa516669672b7
Validity
Not Before: Apr 9 00:01:32 2025 GMT
Not After : Apr 10 00:01:32 2025 GMT
Subject: CN=daf06ea51bc121815e7ef25a30500493d213afab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:e5:33:33:51:e7:9d:5c:8b:83:dc:bf:23:
c9:f7:a2:e8:ae:5c:fd:74:42:87:c4:c6:0c:a6:65:
0b:34:69:89:63:5f:e6:10:72:ed:9c:78:43:2a:df:
4e:20:18:d8:37:2f:16:9b:11:e0:37:4d:07:81:d1:
09:41:18:71:59:ba:40:cf:43:d5:c2:05:cd:e6:07:
be:36:4f:9c:14:36:f3:85:ef:16:57:7f:b8:93:34:
69:17:63:2e:46:be:c0:5b:3a:75:b1:e6:a8:2a:4b:
1e:e7:37:e7:6a:51:b3:6a:c8:7b:08:0e:f3:b4:58:
c2:44:18:bb:1b:c4:5b:9d:99:eb:3f:f9:6b:b0:04:
d0:75:2b:ac:dd:5e:44:d2:69:85:41:74:47:57:db:
fc:76:ec:b0:d5:dd:d4:1c:1b:7f:3a:63:51:63:ef:
43:f8:3b:b7:8c:2d:8d:c1:5c:87:75:a7:30:b6:2c:
10:80:d1:8a:b8:ca:f0:e3:0f:ee:d0:ee:d3:8c:f6:
45:cb:f1:01:83:3f:46:48:8e:71:64:d9:0a:8f:36:
7d:1f:6f:b0:6b:34:2b:1e:49:0b:fd:60:b9:fd:0a:
91:f4:02:5d:3b:97:fe:61:e9:32:e9:a2:de:27:68:
17:b0:22:d0:23:b9:13:64:7e:18:9b:46:f4:35:18:
7b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F0:6E:A5:1B:C1:21:81:5E:7E:F2:5A:30:50:04:93:D2:13:AF:AB
X509v3 Authority Key Identifier:
keyid:2A:CD:8D:16:82:E6:62:2C:1C:09:23:7B:C4:1A:A5:16:66:96:72:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/95dbce-d4e9-41f1-82dc-e84cb1da21bd/1/Ks2NFoLmYiwcCSN7xBqlFmaWcrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:45:48:07:50:f3:1e:96:88:df:c9:10:c9:73:45:64:a5:f4:
c3:e4:2f:76:72:ab:d0:4c:da:7f:80:0b:10:23:ee:bc:9a:c5:
4e:e7:e5:4e:0d:ce:6e:f7:85:9c:9c:f6:c6:e7:dc:92:79:6d:
ab:ae:5d:d3:fc:ff:79:ae:3d:f3:4d:35:9b:3c:00:d3:53:60:
ac:65:a8:b6:0b:1a:d5:3e:68:a4:86:d9:fb:f0:97:1c:a9:38:
a6:91:d4:28:e6:f5:b2:de:65:b2:c6:16:d7:cb:ec:6c:18:20:
d1:22:03:e0:62:d9:10:49:0b:31:ba:1a:77:8d:e7:b6:03:29:
1a:99:40:9b:84:c0:27:c2:08:5a:fd:90:19:78:42:cb:80:26:
d9:2d:05:56:9b:c4:f2:ad:19:50:98:4e:35:e0:9a:80:15:d2:
00:0b:85:04:a2:66:77:3c:8e:60:2f:9a:f8:a1:0f:78:43:89:
8f:80:6a:86:2d:2a:2a:c7:8e:b7:fa:49:07:df:2f:b0:e1:3a:
57:ad:0e:cd:8f:38:50:a0:9d:32:97:e1:e1:12:70:3c:04:65:
8e:1b:80:91:07:00:8b:b2:0b:94:95:47:2f:db:51:24:21:26:
23:04:ae:05:bf:d5:1a:fa:8a:ff:d2:47:d4:d4:ae:82:86:7e:
cb:f9:19:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:21:52 2025 by rpki-client