Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: 48Zze74CPKsrnjdG/eKLQmK1ptcbHzxjU7Q63XWDQd8=
Subject key identifier: DC:EB:18:B3:2D:95:53:67:6B:AE:83:BD:83:74:AF:2F:58:DD:FB:2F
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 01958C96E1E742837FE7E98335AC45DAD1E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1498
Signing time: Wed 12 Mar 2025 23:00:53 +0000
Manifest this update: Wed 12 Mar 2025 23:00:53 +0000
Manifest next update: Thu 13 Mar 2025 23:00:53 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: U188fh5yCzQ+xb76lAjFbfHo/r+NfYgaHJETuAkYNc4=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:96:e1:e7:42:83:7f:e7:e9:83:35:ac:45:da:d1:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: Mar 12 23:00:53 2025 GMT
Not After : Mar 13 23:00:53 2025 GMT
Subject: CN=dceb18b32d9553676bae83bd8374af2f58ddfb2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:10:23:05:77:d3:17:fd:44:b1:0d:7e:aa:bd:
dc:f1:92:94:d2:d8:21:43:ad:92:38:29:b2:3e:64:
8c:80:11:e2:43:45:72:f1:fe:20:b9:0c:44:5b:68:
3c:d6:45:68:5e:e3:ca:ef:8d:de:0e:2e:a0:79:60:
e5:7c:d9:2e:ea:f7:7b:1f:ba:64:c4:cd:01:95:03:
95:14:82:9d:ac:95:31:ad:81:b2:c1:bf:0f:a6:e5:
34:5a:b1:bc:fe:13:b4:14:bc:c9:6a:69:6c:88:43:
b6:14:77:35:bb:11:5a:05:f7:0b:ac:a3:df:1b:e1:
eb:dc:4d:cb:75:d4:0e:1a:54:ea:83:eb:47:14:52:
1c:ca:f4:86:ec:5f:60:85:bd:b2:99:21:fa:8b:23:
33:1f:04:8c:ba:6f:a7:e4:c0:3f:85:a4:11:8e:ca:
e0:49:b0:26:45:39:ed:06:40:15:cd:b6:bf:ce:88:
ba:57:40:f7:0a:1c:ce:ee:e6:f8:02:2f:69:63:f0:
ad:ef:59:3e:da:40:99:a8:26:45:7b:0f:d3:1a:a3:
d7:fa:fb:a6:81:bf:67:b8:aa:5f:4d:31:17:d1:15:
e7:4e:dc:39:d2:5d:99:b7:d0:d5:8a:6c:2d:9e:6b:
81:51:44:36:4e:92:d7:d0:d7:46:8b:f5:62:ee:e8:
82:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:EB:18:B3:2D:95:53:67:6B:AE:83:BD:83:74:AF:2F:58:DD:FB:2F
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:42:fd:6b:5a:db:e7:9c:13:10:f3:82:14:c8:7d:f6:d3:30:
a5:5a:0c:6b:43:c6:a3:da:c8:96:e6:81:5d:89:8c:77:85:6b:
76:35:65:c6:8e:ca:d3:13:69:3b:8c:16:ea:99:d0:eb:6c:87:
1a:0e:d6:ae:a0:7b:96:2d:de:19:6f:7e:37:93:25:ba:99:98:
9d:c9:2a:4a:8d:f2:29:b8:f7:58:c1:e4:8a:63:de:6a:07:45:
0c:61:12:a4:b9:22:3d:64:5c:bf:b2:cd:3b:99:49:7b:15:53:
5a:86:47:d5:c0:26:94:8d:98:b4:07:cf:f6:4c:87:db:66:2e:
b0:43:6a:c9:fe:04:07:45:d8:64:d8:a7:05:29:fe:69:d3:f0:
e8:fb:1d:b4:f0:33:51:03:40:27:b2:8d:7e:45:6c:68:a9:4c:
ed:59:16:77:58:b9:be:85:bb:92:94:1b:a1:2b:06:b2:c7:69:
7c:3e:9f:b2:49:4e:2f:58:45:29:a8:a6:15:28:c0:ce:6f:29:
d6:d4:96:07:29:b0:22:fe:6e:23:40:79:d6:48:17:11:ff:f2:
bb:7f:d9:d7:86:a5:36:97:d7:91:62:dc:50:0a:f1:7e:37:a4:
2f:60:3d:0e:98:20:6c:40:52:9c:4c:2d:7a:48:eb:7f:f3:b3:
e8:c6:55:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:48 2025 by rpki-client