Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
File: Km9uXKXbQ3eec6znzhbs4O55R5k.mft (raw, json)
Hash identifier: nD78lDI9biXy79LU3fxFDO7uYtJV73GouyD7PSYWRsY=
Subject key identifier: D2:66:00:D1:95:45:D8:E0:39:10:AD:9E:96:00:88:0E:65:6E:EC:4C
Authority key identifier: 2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
Certificate issuer: /CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Certificate serial: 01965380771BEFBB7B347D455FA12F6C3D0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
Manifest number: 037F
Signing time: Sun 20 Apr 2025 14:00:50 +0000
Manifest this update: Sun 20 Apr 2025 14:00:50 +0000
Manifest next update: Mon 21 Apr 2025 14:00:50 +0000
Files and hashes: 1: Km9uXKXbQ3eec6znzhbs4O55R5k.crl (hash: WDIULTlRzipt08QPypeqyGMbM4MWwS5uBe7niowW7Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:53:80:77:1b:ef:bb:7b:34:7d:45:5f:a1:2f:6c:3d:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a6f6e5ca5db43779e73ace7ce16ece0ee794799
Validity
Not Before: Apr 20 14:00:50 2025 GMT
Not After : Apr 21 14:00:50 2025 GMT
Subject: CN=d26600d19545d8e03910ad9e9600880e656eec4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:18:54:00:d2:50:37:c1:de:6d:c7:6e:47:8b:
88:1f:41:a2:2f:09:48:71:7c:21:d6:ec:4f:46:4c:
34:39:b9:8a:f7:c3:7c:cb:d3:49:73:74:a2:9c:25:
53:b8:02:72:0b:5c:5c:a1:ef:58:c8:58:54:d9:fc:
36:65:63:bd:ad:b3:fc:4e:7b:5d:4b:e7:a5:a0:8d:
85:f9:ac:3d:f5:ce:e0:fc:f2:54:99:3d:45:29:08:
e4:9f:d7:2b:81:85:15:c2:23:84:49:e5:a7:cf:08:
76:2e:5c:37:69:33:a4:50:e9:2b:03:16:f0:2f:9c:
04:dc:fe:05:f5:e0:39:76:e1:f4:66:36:ce:49:6b:
45:49:1a:06:2d:eb:22:40:88:95:30:6c:ca:a6:01:
5c:28:8d:2f:b0:2c:1f:d5:8a:1d:fa:4b:1f:db:ca:
08:c6:29:8b:72:8e:04:8f:86:08:fe:bf:99:84:11:
2a:6c:7c:9c:31:7a:f0:76:f3:dc:5c:08:ca:8d:cf:
5e:78:37:be:7b:13:da:7f:7d:ab:c0:6c:17:9a:b7:
d1:75:5d:54:30:df:34:dd:02:38:a2:1f:ed:69:9f:
d9:06:6f:40:df:01:b6:6a:86:e6:e4:fb:6d:51:79:
9e:e4:f6:f1:9d:89:ec:47:17:d4:37:92:00:3e:72:
ee:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:66:00:D1:95:45:D8:E0:39:10:AD:9E:96:00:88:0E:65:6E:EC:4C
X509v3 Authority Key Identifier:
keyid:2A:6F:6E:5C:A5:DB:43:77:9E:73:AC:E7:CE:16:EC:E0:EE:79:47:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Km9uXKXbQ3eec6znzhbs4O55R5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0a611-f6f4-40f7-8628-72e99ee4766d/1/Km9uXKXbQ3eec6znzhbs4O55R5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:51:f4:6a:c1:2a:c4:7c:a5:4a:26:73:94:9a:88:29:9a:7b:
71:be:f5:e3:c8:11:bc:bd:31:d8:4b:6c:3f:fa:cf:e5:7d:2e:
fe:c0:39:cb:6a:f6:d5:2d:0a:b9:95:c3:62:50:ee:24:37:af:
76:02:4d:af:9f:67:8f:8f:1c:ad:db:57:06:ea:fe:fd:63:1d:
0c:36:21:f6:61:4e:c7:1f:86:e4:00:23:33:f0:37:36:57:c0:
cb:13:89:21:7f:92:06:15:27:d9:af:ac:b0:06:1e:82:6b:55:
34:88:34:17:4e:fe:20:04:ea:64:f3:22:ab:8e:39:9c:bc:0b:
8c:82:95:10:cc:b5:a8:ae:8d:33:d4:d7:12:1b:1e:78:e9:23:
94:86:3b:b1:09:80:b3:c9:d4:9b:7b:93:c5:30:94:41:7c:3f:
f3:3f:85:9b:ce:1a:15:10:d1:1a:9e:f1:f2:b4:a0:3c:e2:cb:
45:f9:0c:b4:75:88:f3:89:54:99:9e:60:46:a6:d9:a8:4e:53:
7f:92:74:90:4f:34:bd:fb:21:25:7e:1e:ac:23:b8:de:76:4b:
b8:bd:b6:8d:93:63:fe:e5:52:be:93:55:37:3b:65:0f:dc:da:
32:15:25:05:dc:fc:13:ab:8c:d1:17:d0:5d:d3:30:37:d1:96:
a5:e6:b1:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 18:16:39 2025 by rpki-client