Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
File: KpTH34VXtlNEfD4G-0s3LVEgoiI.mft (raw, json)
Hash identifier: 1XTq1xyRZssU/Pra5dqmOKjPLMlunXGuEKLV/224vDU=
Subject key identifier: 01:73:FB:3D:3D:FA:0E:B8:8E:60:20:62:1A:6E:DF:76:83:1D:F8:12
Authority key identifier: 2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
Certificate issuer: /CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Certificate serial: 0197469ECB2E9AF0B34D411B6AB25D89AAAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 19:01:41 +0000
Manifest this update: Fri 06 Jun 2025 19:01:41 +0000
Manifest next update: Sat 07 Jun 2025 19:01:41 +0000
Files and hashes: 1: KpTH34VXtlNEfD4G-0s3LVEgoiI.crl (hash: 9IHUbs71qcYsQGmxIq/wkz34YFDAmyiLUdOT/BMlRSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:cb:2e:9a:f0:b3:4d:41:1b:6a:b2:5d:89:aa:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94c7df8557b653447c3e06fb4b372d5120a222
Validity
Not Before: Jun 6 19:01:41 2025 GMT
Not After : Jun 7 19:01:41 2025 GMT
Subject: CN=0173fb3d3dfa0eb88e6020621a6edf76831df812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:67:e2:e3:83:f2:31:33:25:81:e2:2d:3a:fc:
22:dd:ff:94:2e:dc:18:67:db:37:b2:20:b2:83:0a:
15:5c:1d:e8:cc:4e:a3:5e:2e:c0:2d:42:4f:4b:56:
fe:24:4f:7f:75:54:df:3f:71:e1:e9:9a:24:8b:6e:
45:b3:4a:ac:df:3a:99:81:46:6e:25:ec:17:72:f9:
1c:6a:c1:d1:da:ca:42:04:46:67:5c:aa:9a:65:64:
e3:58:bd:6b:f2:10:3d:6c:2b:cc:c5:41:68:3c:6b:
25:7d:1a:c1:8f:9e:09:6c:fb:a1:1c:7a:f3:1d:92:
d2:80:07:46:a6:a8:0b:26:17:e0:ba:0f:05:c0:37:
d5:87:81:d9:64:a7:3c:eb:d3:fb:44:f3:85:0c:f1:
4c:0c:6a:0a:35:a3:72:88:74:6c:a7:1e:e5:6a:0a:
78:b0:f1:b5:e2:a2:03:6b:3e:6b:a6:47:b0:8c:36:
6e:81:0e:72:26:af:76:3a:ce:53:bf:fd:6a:6a:46:
b4:48:89:9d:40:7f:58:5f:31:e1:c9:1c:42:e0:f2:
f6:68:4b:d4:ea:89:54:8c:f3:fd:96:52:de:8c:08:
6a:9e:3e:52:d8:00:55:11:0a:0e:9a:3b:0a:9c:ad:
00:49:a4:73:0c:9c:5a:ad:48:23:b6:57:0a:83:8e:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:73:FB:3D:3D:FA:0E:B8:8E:60:20:62:1A:6E:DF:76:83:1D:F8:12
X509v3 Authority Key Identifier:
keyid:2A:94:C7:DF:85:57:B6:53:44:7C:3E:06:FB:4B:37:2D:51:20:A2:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpTH34VXtlNEfD4G-0s3LVEgoiI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/67caee-4c11-4a6f-bf63-5518b0e86566/1/KpTH34VXtlNEfD4G-0s3LVEgoiI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:34:44:df:19:6c:25:94:ef:88:9d:f8:2c:87:8e:bf:6e:86:
27:f7:f9:3f:0b:98:91:b8:91:d9:73:7b:5e:3a:c6:b0:23:fa:
b0:e2:1e:d1:31:f3:f3:25:1d:f5:e7:0e:8a:38:42:7e:b0:fc:
5a:ab:3f:e7:89:29:ea:02:a2:37:91:58:21:d7:e2:86:d0:81:
a0:a1:eb:57:be:cb:82:bb:22:06:6d:44:ff:47:3a:8e:60:1b:
74:ae:6b:c2:f7:31:60:45:36:16:98:f7:f1:e3:3d:6d:51:aa:
a6:7c:15:f2:a8:8a:8a:9d:08:76:08:29:bf:33:9f:bd:c8:b8:
3b:d3:76:f5:66:4e:56:6c:a5:d7:8d:f8:16:c5:7e:e3:8b:75:
bf:35:20:10:be:05:31:76:96:61:fe:27:2f:36:c0:bd:be:09:
c4:af:60:a2:22:dc:3b:35:f6:2c:d9:d8:61:12:17:9a:24:a4:
23:20:19:c8:34:51:42:90:f1:ab:01:32:ea:c0:37:91:ad:40:
fe:35:c0:40:a6:c6:88:6a:b8:22:6d:32:b2:14:f4:50:82:c9:
47:de:1f:bc:99:90:ee:01:32:98:63:73:ca:c5:f7:4e:89:3d:
4a:92:5e:5f:b0:f8:14:85:cf:00:b6:fc:6d:94:4f:44:16:fc:
7b:51:1a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:10:32 2025 by rpki-client