Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: MysJ7qu+yYm0u8g9PRFJ0KytCqVBbofTTwZAdgo0FXo=
Subject key identifier: 8F:6C:5E:D4:BF:BC:B8:95:E1:A5:5D:EC:55:61:DC:38:46:61:A3:86
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 01964F6CE924A57F42D081089C2ED53BE688
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 14F9
Signing time: Sat 19 Apr 2025 19:00:59 +0000
Manifest this update: Sat 19 Apr 2025 19:00:59 +0000
Manifest next update: Sun 20 Apr 2025 19:00:59 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: MaWhaVPNl9UlcpQCWvPykiCXFYCMY/ZesMOkQmUms8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:6c:e9:24:a5:7f:42:d0:81:08:9c:2e:d5:3b:e6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Apr 19 19:00:59 2025 GMT
Not After : Apr 20 19:00:59 2025 GMT
Subject: CN=8f6c5ed4bfbcb895e1a55dec5561dc384661a386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:78:dd:ae:d9:b3:41:77:a5:b5:2b:93:15:f5:
55:cf:58:d4:66:41:08:98:84:b9:64:c9:6f:4b:de:
ea:20:47:3b:3f:8c:ea:c2:26:ec:30:f1:6b:a3:94:
59:86:69:ea:f1:d7:5f:2e:5d:e2:41:83:1e:68:00:
b9:ce:e7:ec:39:5e:14:ac:f9:72:fb:9e:ae:b5:ee:
9c:37:9c:b2:a0:1b:bd:03:6f:2a:87:33:87:6e:66:
ce:0b:04:05:da:62:da:73:f6:b2:d6:c4:be:b8:2f:
00:af:38:15:80:db:81:ed:7e:06:a2:9c:dd:6d:36:
db:e2:89:69:4b:94:d7:45:6f:42:80:af:7e:3f:2b:
7d:4c:fb:85:a3:cd:8f:b9:27:ea:20:0f:20:0e:47:
a6:40:8d:57:b4:43:c0:cb:ad:c7:57:f3:56:bb:fe:
68:41:74:ba:4a:22:da:bb:20:3e:66:91:70:d3:ad:
11:d3:06:a0:1b:b3:69:cd:e2:5c:f1:83:a5:69:e0:
e4:92:6f:e3:a7:d8:e2:3b:41:b9:60:e0:da:f4:77:
5d:b8:92:bc:ad:af:21:58:a0:80:80:2e:e7:07:03:
5f:c3:23:ac:6f:1d:ee:74:6c:82:05:25:14:7a:a9:
9e:52:78:a2:2f:b2:d5:69:f6:18:e2:65:08:4a:2b:
1f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:5E:D4:BF:BC:B8:95:E1:A5:5D:EC:55:61:DC:38:46:61:A3:86
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:73:3f:49:87:09:f0:3b:18:58:20:da:9a:cd:7e:01:f4:ef:
dc:e1:e6:98:18:84:a8:3a:ec:47:0f:cc:87:6f:a3:49:d3:fc:
1b:36:35:2b:0b:78:4f:ec:8a:a9:58:e7:07:6c:ab:38:0f:91:
a0:f6:8b:6b:ce:9a:de:d6:f2:90:d1:44:59:58:0f:8b:df:34:
2e:4b:b6:cb:07:ae:da:a8:82:d0:c4:36:cb:17:fe:fe:be:b2:
76:d4:e2:c9:2d:d8:63:a8:34:13:b9:5c:22:b6:24:3e:8f:21:
7c:1a:1e:bc:f2:98:f0:48:20:8d:a6:18:fa:8d:fd:39:84:fc:
38:0a:92:09:87:27:02:7d:76:9e:73:ea:6c:32:5b:57:32:b9:
f5:2e:88:13:35:8e:12:87:e1:e6:63:cf:d5:d7:25:84:5d:ab:
ff:cf:a3:6a:8a:21:af:8f:f2:de:a5:c6:27:91:59:57:e7:e4:
56:c8:b0:bd:19:6b:20:a3:bf:05:a7:a4:bb:40:d3:f8:d9:df:
8c:21:1b:3f:05:19:0e:70:d2:56:a9:ee:63:5e:a0:22:41:dd:
57:88:27:e7:0b:51:7c:bb:e5:5a:63:ab:26:b0:60:16:f6:1e:
6f:23:65:8f:b5:7d:28:c2:a1:97:94:7f:a7:e5:36:02:1a:ce:
44:fb:46:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:06:33 2025 by rpki-client