Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
File: kjK4h0AR2AOQr4EijrUHsW0CXdI.mft (raw, json)
Hash identifier: k/Syisfs9Iv8LCIX0UFOyByJ0ohq7K6qbv3+vOwB1pI=
Subject key identifier: E7:DC:E3:3A:79:01:71:D0:57:CA:AE:66:8E:B8:78:17:3B:55:74:75
Authority key identifier: 92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
Certificate issuer: /CN=9232b8874011d80390af81228eb507b16d025dd2
Certificate serial: 0196463265DCE1268FDE421CB570E99B7916
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
Manifest number: 14F4
Signing time: Fri 18 Apr 2025 00:00:30 +0000
Manifest this update: Fri 18 Apr 2025 00:00:30 +0000
Manifest next update: Sat 19 Apr 2025 00:00:30 +0000
Files and hashes: 1: kjK4h0AR2AOQr4EijrUHsW0CXdI.crl (hash: 6Mj2To43FpnHu98FamMFmPFUNRY+cj5dQ6nQwXkEWW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 00:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:46:32:65:dc:e1:26:8f:de:42:1c:b5:70:e9:9b:79:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9232b8874011d80390af81228eb507b16d025dd2
Validity
Not Before: Apr 18 00:00:30 2025 GMT
Not After : Apr 19 00:00:30 2025 GMT
Subject: CN=e7dce33a790171d057caae668eb878173b557475
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:71:b3:bb:1e:ac:98:34:82:ff:9d:3d:e9:
95:84:2c:e3:80:78:55:8b:79:77:cb:68:9b:2c:18:
16:e6:c3:d6:e1:31:8e:37:35:2c:ab:ac:86:14:17:
5b:b6:02:82:7a:f1:70:72:74:66:40:60:35:5b:4d:
29:11:0c:64:80:d1:c0:c2:c6:4c:2a:98:a8:80:2a:
5c:64:32:1b:8a:c2:68:20:08:88:4d:78:e7:8a:44:
22:02:88:73:42:96:8a:d2:ce:28:50:39:b8:1b:19:
ab:bf:cd:44:da:cb:43:b5:b9:0a:89:f5:df:7d:ca:
6a:01:38:05:86:74:b5:8b:6b:87:b6:a4:d4:cf:9d:
ab:9c:12:ce:9d:d7:06:90:76:d6:6b:d9:51:d7:76:
01:5a:ad:04:9a:64:f0:ed:63:f4:3c:dc:65:fb:be:
aa:36:70:a4:8c:b8:29:ab:bc:7e:2a:77:ed:93:70:
bb:ac:ab:0d:eb:53:15:3c:fb:17:b5:be:06:38:05:
b1:22:02:ae:87:5a:72:9a:b4:e6:51:5c:d0:c8:ce:
4c:6d:48:20:66:51:2f:96:17:91:db:68:c1:c6:89:
d2:cc:f4:35:b1:08:50:68:9e:4a:0d:cd:18:8f:3a:
16:fc:6b:7f:43:fd:47:3e:80:3e:71:ee:bc:59:81:
27:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:E3:3A:79:01:71:D0:57:CA:AE:66:8E:B8:78:17:3B:55:74:75
X509v3 Authority Key Identifier:
keyid:92:32:B8:87:40:11:D8:03:90:AF:81:22:8E:B5:07:B1:6D:02:5D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kjK4h0AR2AOQr4EijrUHsW0CXdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c497f2-409e-46ec-a039-d04812655d83/1/kjK4h0AR2AOQr4EijrUHsW0CXdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:00:23:bd:5b:4a:a4:d8:d1:84:23:72:35:4a:04:4a:b8:ee:
18:90:eb:12:94:e1:88:52:65:e5:f4:58:83:56:be:13:df:07:
92:1d:05:87:e7:a0:e6:2e:6d:b2:ba:f6:72:38:5e:48:d1:56:
60:17:77:58:48:0d:c3:81:b7:b5:35:c3:93:3b:be:9b:3f:27:
b3:e9:4d:a9:22:a5:d7:d3:e4:61:b6:bc:d7:ba:90:68:d4:3c:
1e:d2:7a:46:14:e9:9f:48:5d:3d:ec:2e:94:2e:0e:5a:04:46:
bb:bb:c0:87:49:16:4d:05:30:83:90:7d:68:87:d5:14:80:1e:
bc:af:a5:0e:69:19:86:c8:d0:09:1f:d2:01:e8:cf:a7:23:29:
5f:a7:90:2a:ce:40:f0:80:24:2e:78:9b:37:8e:03:0d:3c:a4:
ff:26:1c:6f:d8:06:dc:33:17:4f:74:0f:69:8f:99:72:ce:46:
44:1d:a7:e9:68:3b:5d:b2:eb:92:0e:da:19:bf:4a:f9:dd:f4:
93:bc:19:56:2f:98:52:8f:67:ca:9e:1c:ba:ae:c9:68:d5:12:
b2:fb:7f:6d:6d:f4:30:96:b5:fb:57:3b:fc:20:62:9d:59:b3:
6e:bc:11:3a:49:f1:53:73:cd:1a:c0:d4:7b:28:19:22:ee:99:
33:ce:d1:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:00:08 2025 by rpki-client