Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: iRpQ9USPaAlAtjVHt0LEFIKSUbXHdKzS+3KFar7bJQk=
Subject key identifier: D9:3D:49:5F:59:DE:B5:DC:F2:E6:5A:F2:E3:0D:58:D3:D9:E7:B1:72
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 019752A21C42455B1B2C9E3059A79CA11BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 157F
Signing time: Mon 09 Jun 2025 03:00:45 +0000
Manifest this update: Mon 09 Jun 2025 03:00:45 +0000
Manifest next update: Tue 10 Jun 2025 03:00:45 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 34r6jj7+U44dMEF9o8UZ8fRMg7bFbsjSJjqbakmtCvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:1c:42:45:5b:1b:2c:9e:30:59:a7:9c:a1:1b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Jun 9 03:00:45 2025 GMT
Not After : Jun 10 03:00:45 2025 GMT
Subject: CN=d93d495f59deb5dcf2e65af2e30d58d3d9e7b172
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c2:55:56:2c:76:86:41:44:e4:cc:e9:b9:e1:
68:6b:13:ec:10:58:ec:16:bd:3e:1c:e1:22:99:88:
3a:62:f8:e2:72:7e:9a:63:41:9d:41:3a:3b:4f:e1:
01:1a:9f:dc:15:ff:6b:17:e6:03:5b:42:0e:88:f9:
41:31:a5:59:04:8c:06:2c:dd:59:5b:7b:60:60:55:
1a:02:8e:21:9a:fe:c1:d1:4a:eb:ff:f9:a7:b4:fa:
03:3f:48:cf:25:bb:e8:9e:e2:78:4b:6d:32:c4:23:
bc:12:36:a5:c3:08:21:f9:82:56:0c:0e:42:a0:5b:
c2:bc:a7:de:76:0f:6c:77:21:5e:42:30:2c:eb:f8:
2b:96:b6:27:17:08:1a:d1:8a:6b:6b:a3:72:e0:29:
6c:97:a6:42:30:bc:3a:86:19:2d:b0:d1:37:89:d3:
5e:91:87:44:0f:37:0c:ba:1e:ea:86:80:b3:89:8f:
77:47:bd:6d:81:ba:70:11:2d:d2:23:ba:bf:21:21:
b1:1f:55:4a:94:bb:9e:cf:cf:10:69:d4:e4:72:37:
07:f9:64:8a:42:00:24:44:2b:0c:c9:33:5e:33:f1:
b1:82:38:d7:09:b0:06:46:6d:37:9b:82:2b:03:d8:
9a:92:f2:5e:d5:09:4d:2e:bd:4d:cd:fa:d9:0e:ee:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3D:49:5F:59:DE:B5:DC:F2:E6:5A:F2:E3:0D:58:D3:D9:E7:B1:72
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:29:8b:72:a7:87:93:3d:c5:cf:af:11:c9:74:1a:f4:ab:d7:
82:6c:83:a0:a5:b7:50:84:2e:f7:db:a4:6d:1b:7f:fb:6a:ef:
8a:bf:21:d8:33:ec:47:2d:94:6a:41:de:75:c0:fb:9f:56:8f:
ec:3f:63:0c:9f:60:54:b3:8b:c9:0d:af:92:2c:76:90:6b:ce:
94:d7:94:97:b1:9f:ad:d7:db:18:fa:d1:a2:53:e8:fd:0e:f5:
75:01:64:f4:b5:42:e1:df:c9:1e:ab:fc:23:d2:94:7c:f2:70:
66:90:25:ce:32:79:4c:d4:ef:ca:2f:ed:40:78:e1:7c:9a:69:
e4:3f:b9:a9:bd:5f:c1:05:77:67:b4:29:1d:3c:a8:b0:fb:53:
db:0c:db:50:4d:1a:c3:5a:ab:dc:b1:70:a7:71:28:66:72:82:
ee:98:cb:9b:0c:07:5d:24:58:d2:89:bd:a9:c3:7f:f9:bc:21:
65:13:a5:6f:16:bc:09:4a:db:35:5d:f7:2d:b8:b7:be:4a:81:
70:44:6c:72:df:c7:34:14:69:a3:02:24:f9:3d:06:01:9c:8f:
cd:38:11:31:e2:cc:65:3e:02:f8:bf:8e:09:ef:28:2b:4a:87:
38:fa:4f:56:b9:13:1e:21:a5:e7:42:e8:ea:90:1f:0b:98:c0:
20:fa:93:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:00:37 2025 by rpki-client