Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
File: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft (raw, json)
Hash identifier: /+mYWWRCZiYQoBU35ZiSlE39g03CxGCvpNxl9OcGEaE=
Subject key identifier: CB:E3:D7:FF:62:CB:43:25:90:75:8C:A1:E1:71:FB:0A:1E:11:0E:25
Authority key identifier: 2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
Certificate issuer: /CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Certificate serial: 0196586FE93C6D137E260497AD3E62EC851F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
Manifest number: 05A0
Signing time: Mon 21 Apr 2025 13:00:51 +0000
Manifest this update: Mon 21 Apr 2025 13:00:51 +0000
Manifest next update: Tue 22 Apr 2025 13:00:51 +0000
Files and hashes: 1: Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl (hash: HjhOBcieRgIXGK6zvT/sOio3Ur6eXjnWBMav1105HMg=)
2: rGYm_uYpmZhwpYcdJzQVjEwEpj8.roa (hash: jRbiNS0Ka01gqXF1TeFMzqMm+Pa1Z/+jEZGkmARhwF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:6f:e9:3c:6d:13:7e:26:04:97:ad:3e:62:ec:85:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2abb5cd85f525302fd04ff2b6721862b204064d4
Validity
Not Before: Apr 21 13:00:51 2025 GMT
Not After : Apr 22 13:00:51 2025 GMT
Subject: CN=cbe3d7ff62cb432590758ca1e171fb0a1e110e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:e0:96:23:f1:dd:ff:e3:7f:97:b2:06:95:
2d:47:29:c9:cc:87:fa:81:38:ae:50:c2:8b:5a:7a:
f5:a3:a2:47:6e:53:ca:ac:01:c7:02:c8:9c:ee:11:
26:65:dd:0c:0a:fd:c4:96:f6:6d:44:19:94:86:4f:
70:cd:bd:54:c9:57:d3:34:cd:6d:ba:b8:3b:11:20:
26:e3:07:38:d7:ad:2c:71:2d:67:68:54:74:ce:a3:
37:b8:ab:87:19:81:3e:74:7e:c7:8d:35:0f:13:51:
96:d6:fc:13:56:0c:1d:fc:4e:b8:a7:0a:fb:be:4e:
7a:c7:10:de:19:fd:cd:53:c5:6c:a2:5f:aa:f3:18:
6c:f7:0a:e9:02:5e:36:71:91:3f:0c:e3:6e:c4:bf:
77:99:e4:01:63:52:57:18:38:82:f3:01:c6:85:35:
e0:d4:be:17:1a:08:11:c9:af:d3:a2:19:43:90:54:
19:c7:82:73:30:21:8e:37:12:cb:5d:30:d1:b2:c1:
5a:9d:92:e2:a0:d4:59:36:92:47:44:09:83:de:af:
a6:cb:6d:94:bd:d9:bd:c6:bb:bb:6e:3d:3c:37:bd:
fe:76:c2:5b:89:81:b2:50:5a:25:d9:e9:45:31:f3:
bb:9b:dc:90:8f:f5:e3:e3:5a:7f:23:78:f8:ec:93:
b9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E3:D7:FF:62:CB:43:25:90:75:8C:A1:E1:71:FB:0A:1E:11:0E:25
X509v3 Authority Key Identifier:
keyid:2A:BB:5C:D8:5F:52:53:02:FD:04:FF:2B:67:21:86:2B:20:40:64:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/690482-9dec-49f2-ab55-721d252f3526/1/Krtc2F9SUwL9BP8rZyGGKyBAZNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:50:00:a5:88:2a:50:62:b4:bd:5e:dc:b4:0f:94:e4:75:20:
d3:2d:a7:98:61:02:d4:94:f5:58:74:8a:d6:00:d3:f3:18:96:
40:ff:72:f0:3b:1b:fa:56:f0:f7:2c:02:11:65:77:6a:b1:e7:
cf:eb:45:a9:6f:aa:51:54:d5:29:1c:fe:43:f2:a2:9e:5f:97:
56:38:03:10:b5:ed:6c:45:62:3e:ae:c4:1a:7f:5b:fa:ba:d3:
53:d1:6e:f9:ae:ea:39:6b:be:cb:b4:43:6c:fb:de:54:e5:f8:
4d:e2:96:6a:b0:f7:d0:63:3c:3a:a9:1d:62:ed:f1:69:11:bd:
de:c0:de:75:c7:fd:12:fb:9b:77:67:f2:35:30:2c:23:72:5c:
33:a5:64:3b:7a:25:8f:24:46:0c:2a:d3:12:da:4f:1c:a9:b0:
5c:56:17:26:26:25:6d:19:a4:b5:43:fa:01:ab:65:3e:e5:6a:
c4:af:15:da:92:20:56:a6:01:08:09:dd:a2:4a:1c:4d:d5:21:
ee:09:8b:a8:b9:6a:75:1a:ef:44:95:d1:2b:e5:c5:05:8c:ef:
e0:f0:92:d0:bc:50:f6:42:70:f1:cb:03:bc:fa:fd:41:54:56:
96:28:4f:65:73:7c:5c:dc:ee:30:60:fc:d9:39:b8:31:b6:12:
ff:e5:3c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:33 2025 by rpki-client