Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: OXQIEfvB/W4iT9VKKjAhfVJaYsKhDimM/cFUYVJAm7E=
Subject key identifier: 51:55:A1:B6:BA:93:AD:D7:46:C6:56:8E:B7:5E:6B:13:7D:81:2B:3C
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 0196564A5FDBF30A404E1EA564B0C61302E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 05D5
Signing time: Mon 21 Apr 2025 03:00:36 +0000
Manifest this update: Mon 21 Apr 2025 03:00:36 +0000
Manifest next update: Tue 22 Apr 2025 03:00:36 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: kMJRBmCgGvKSqkM4uO0nQkGTkYCmQX2HGH8IGZagiyQ=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:56:4a:5f:db:f3:0a:40:4e:1e:a5:64:b0:c6:13:02:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Apr 21 03:00:36 2025 GMT
Not After : Apr 22 03:00:36 2025 GMT
Subject: CN=5155a1b6ba93add746c6568eb75e6b137d812b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:89:25:7c:22:2f:fa:26:87:88:39:b5:44:
6a:29:27:21:8a:bb:b0:c7:18:47:8f:14:b0:7d:9d:
36:f7:96:35:7c:7a:0d:cd:a3:bd:4a:4f:f7:cb:72:
a8:d8:24:68:29:e5:55:1f:81:a0:a4:89:57:52:07:
82:6f:8c:76:fd:ea:47:6c:3a:f3:f7:2a:bf:27:d0:
13:bb:a4:52:83:e5:ba:a4:e8:03:39:6a:a9:ed:0a:
2d:36:77:aa:89:65:d6:25:b6:07:5c:69:d6:0c:5e:
c7:fa:ac:86:f6:98:2a:3d:cd:ee:4b:67:f2:23:54:
a5:92:74:35:db:78:9a:69:1a:db:7b:fe:9a:ac:7d:
87:f3:b3:4a:3e:83:f0:79:80:0e:e9:ac:19:fc:50:
1c:27:fb:ea:8b:00:d2:82:d2:16:b3:cb:ac:99:74:
ff:06:45:aa:e6:64:5c:46:06:07:5b:fc:85:48:52:
5a:26:d3:ac:5e:a9:96:e2:eb:e9:c7:bd:16:2a:2e:
a7:40:92:33:ad:67:23:e6:65:fd:ce:26:95:b5:16:
92:a4:48:4b:97:95:62:2c:77:84:8b:e8:17:30:d5:
4a:ed:09:04:67:6a:29:47:8d:fd:4d:79:d2:f1:74:
a8:95:94:19:0b:42:6c:d8:8e:2f:90:7c:bb:d5:95:
a9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:55:A1:B6:BA:93:AD:D7:46:C6:56:8E:B7:5E:6B:13:7D:81:2B:3C
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:1f:39:82:e8:d3:29:3d:40:6f:ff:c2:ce:a7:24:d1:71:50:
02:06:02:e1:ef:ec:4d:99:2e:23:04:d0:a3:b6:03:2f:01:0c:
5d:ac:98:ac:9f:e7:7d:78:a5:f6:ec:77:5d:73:6d:a8:0e:f4:
d4:cb:be:61:6d:f9:e9:7f:25:2d:57:0f:39:92:aa:92:c2:e1:
b4:16:25:6e:fe:bd:16:27:4b:9e:de:c8:65:2c:37:92:0e:c4:
b4:f6:c8:d4:48:79:81:c8:6e:97:89:ed:09:57:7b:1e:d9:c2:
5c:a9:a8:14:88:8d:da:14:43:60:24:08:43:0d:20:0a:26:a3:
38:80:2e:26:0a:4a:4d:81:f1:fe:77:c4:59:8a:e3:e8:03:20:
bb:a2:a1:a6:02:f5:88:5f:6f:db:29:f1:38:6c:1a:18:dc:2c:
f0:fa:74:38:1b:0d:c5:ea:98:96:d6:2c:38:df:35:ff:7b:fe:
09:0f:19:e4:4c:e3:a3:ad:37:e3:26:2c:ce:15:03:71:79:86:
9e:8e:83:c6:29:b4:36:d2:b6:a1:21:dc:8c:37:14:98:74:98:
a0:2c:55:3e:de:28:10:4c:21:d0:e4:b2:28:dd:c5:83:de:fe:
37:2f:7a:43:09:fd:fc:17:b7:a2:c0:58:c9:d7:1f:d5:d1:a5:
2e:e5:50:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:55:48 2025 by rpki-client