Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
File: K1ATo25hvsQKEqDkHEjxkYYwca8.mft (raw, json)
Hash identifier: LsCJ3/KTzQfgpavZaynNhopD2VNz2ohWUhKNPgK46Mw=
Subject key identifier: 16:FB:00:89:10:CF:1B:6C:30:CF:D3:31:7D:F1:94:B4:E3:18:38:F8
Authority key identifier: 2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
Certificate issuer: /CN=2b5013a36e61bec40a12a0e41c48f191863071af
Certificate serial: 01958C6041B6637E805CEDC1AD2116BE1667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
Manifest number: 1494
Signing time: Wed 12 Mar 2025 22:01:13 +0000
Manifest this update: Wed 12 Mar 2025 22:01:13 +0000
Manifest next update: Thu 13 Mar 2025 22:01:13 +0000
Files and hashes: 1: K1ATo25hvsQKEqDkHEjxkYYwca8.crl (hash: 8QjgDdPrHGsSLIPR6SkwcRIIIcH2UrjXkvn97do5K9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 19:14:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8c:60:41:b6:63:7e:80:5c:ed:c1:ad:21:16:be:16:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b5013a36e61bec40a12a0e41c48f191863071af
Validity
Not Before: Mar 12 22:01:13 2025 GMT
Not After : Mar 13 22:01:13 2025 GMT
Subject: CN=16fb008910cf1b6c30cfd3317df194b4e31838f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:19:9f:c9:c4:e2:85:c8:5c:de:25:e3:8d:
c1:d0:d4:f4:15:50:a5:56:f5:ca:e4:ea:3e:1d:f1:
3f:96:6b:ff:8a:e2:db:04:0c:6b:b7:73:f0:33:54:
8a:c4:6e:aa:0d:ac:8c:c0:19:c6:73:5f:38:45:b8:
fc:8f:c9:97:f1:6b:23:6a:ab:68:93:fe:b0:f1:0c:
40:72:c0:92:50:c5:d0:c2:ce:0b:72:b3:fe:fc:25:
75:61:25:25:03:6b:93:c1:69:c5:dc:08:8d:5c:68:
8b:b0:b9:d7:93:3b:70:5d:66:52:58:af:2f:21:4a:
49:49:86:51:dc:54:25:ae:bd:0d:a2:f1:ea:9c:4e:
38:ad:e1:90:98:96:67:aa:75:28:16:ec:5e:88:f9:
5a:e0:a4:bc:16:2f:ae:3b:41:cf:81:85:66:82:e8:
6c:03:ba:da:b5:cc:4f:ad:d7:04:f1:c6:03:5b:7e:
c0:b7:67:49:13:98:65:41:c5:77:a6:2f:31:da:f4:
45:92:3c:77:cd:93:0e:f2:46:17:39:57:9f:5e:36:
03:59:53:71:20:47:1b:12:a0:22:12:7d:e9:c3:1a:
64:7c:46:aa:0a:c8:60:83:34:d7:b9:20:19:2a:ce:
97:42:4b:74:6c:c9:e5:66:2f:db:b6:cf:d3:a5:ac:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:00:89:10:CF:1B:6C:30:CF:D3:31:7D:F1:94:B4:E3:18:38:F8
X509v3 Authority Key Identifier:
keyid:2B:50:13:A3:6E:61:BE:C4:0A:12:A0:E4:1C:48:F1:91:86:30:71:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K1ATo25hvsQKEqDkHEjxkYYwca8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/16ad8f-1f13-469a-a7f5-f432e9d8c4d7/1/K1ATo25hvsQKEqDkHEjxkYYwca8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:9e:e9:8f:1a:28:a5:31:44:6d:86:d9:46:6f:24:b7:c3:26:
2a:35:fe:a7:20:a0:72:89:38:85:fb:1d:ec:84:05:3c:65:d3:
33:63:d4:dc:a1:da:18:72:cc:5c:1d:ae:79:9f:35:a2:0a:5b:
f2:61:22:b0:30:19:d7:54:b9:d0:62:f9:54:f3:db:fd:eb:17:
f4:3d:f2:cf:dc:b5:2d:a5:57:82:06:82:66:88:03:16:61:28:
ce:08:8c:f6:d3:5a:e3:9c:d2:ef:e0:54:fc:0f:63:9f:01:f2:
49:61:63:4c:84:7b:c2:ec:48:45:08:04:61:56:23:52:ea:0d:
b6:19:06:7c:50:98:60:dc:a1:0f:9a:90:cc:64:07:2e:d9:e4:
ea:e8:37:09:a6:e2:bb:df:af:d2:72:7c:fb:ff:70:46:14:88:
a4:17:7d:3b:37:94:bc:20:85:ae:85:53:bf:54:51:55:38:c0:
80:e6:c2:f9:de:e4:fa:3b:ac:be:f3:cc:9d:88:ce:ef:1e:40:
63:52:5d:4e:e6:6d:6d:98:b5:7a:42:6c:11:c7:ea:c0:c5:2e:
fc:43:64:10:fa:21:3e:95:37:87:2f:48:72:21:15:12:9d:94:
dd:28:99:82:84:c0:ad:b3:df:7b:4d:58:27:32:ef:fe:01:2e:
d3:46:ba:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:37 2025 by rpki-client