Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
File: kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft (raw, json)
Hash identifier: 4bV02DtqpyTHBYjXt0NzrBvQPDxP6nWpoVPt7EeJgbI=
Subject key identifier: F7:05:44:EF:B8:BF:A2:8F:05:F7:55:96:D4:AA:56:C6:C0:3F:65:AF
Authority key identifier: 93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
Certificate issuer: /CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Certificate serial: 019750B377F0CAEC9B2D4D7C3675C515E50B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
Manifest number: 1510
Signing time: Sun 08 Jun 2025 18:00:28 +0000
Manifest this update: Sun 08 Jun 2025 18:00:28 +0000
Manifest next update: Mon 09 Jun 2025 18:00:28 +0000
Files and hashes: 1: kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl (hash: 5FGAJ0SmPZmbaLTAie2pdcsdiY6GEqRc/r1l2W4FMXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:77:f0:ca:ec:9b:2d:4d:7c:36:75:c5:15:e5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93320e8be7c74ca655c7c3e978bc1aa60fd8db44
Validity
Not Before: Jun 8 18:00:28 2025 GMT
Not After : Jun 9 18:00:28 2025 GMT
Subject: CN=f70544efb8bfa28f05f75596d4aa56c6c03f65af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1b:8e:1a:75:85:de:26:09:a7:b8:43:01:86:
08:2c:39:98:11:7c:b5:ce:b0:f7:8e:fc:a2:96:82:
37:05:e7:d6:3a:62:cc:66:18:50:cf:8a:35:2c:20:
21:08:60:b7:a7:dd:40:ac:28:ef:69:ba:f1:45:64:
17:5e:a6:f8:5e:f2:26:e8:47:89:b4:59:33:05:d1:
c1:7b:4a:43:d7:ed:de:16:02:ec:01:e4:47:c4:17:
2b:9f:96:70:e0:b0:69:4a:bd:28:8e:b0:15:e9:d9:
aa:4e:10:5c:82:c2:11:15:a2:6e:b4:1e:49:90:cf:
b2:25:41:8d:e4:e9:10:db:6a:92:a9:12:b4:8e:44:
db:e8:e6:b1:45:cc:82:e8:8f:62:90:80:66:f1:4f:
72:6c:22:a4:95:15:a9:bf:af:58:4f:2b:d0:37:78:
0a:33:2f:c8:55:6c:09:3b:87:28:19:cb:f3:bd:04:
84:13:5d:81:a4:32:8d:14:58:80:1b:c5:46:49:98:
77:20:76:af:01:43:20:89:26:61:09:33:d9:dc:01:
80:08:ec:86:b4:f1:d2:c5:8a:15:f0:57:5b:3c:06:
02:e3:ae:13:a7:a7:3e:df:bb:a4:f4:b4:93:50:25:
17:7b:96:08:a9:56:9c:e2:c2:5d:02:c1:e3:cd:e8:
45:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:05:44:EF:B8:BF:A2:8F:05:F7:55:96:D4:AA:56:C6:C0:3F:65:AF
X509v3 Authority Key Identifier:
keyid:93:32:0E:8B:E7:C7:4C:A6:55:C7:C3:E9:78:BC:1A:A6:0F:D8:DB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kzIOi-fHTKZVx8PpeLwapg_Y20Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/e6d373-44c6-48f7-8b76-fa91c75fb9dc/1/kzIOi-fHTKZVx8PpeLwapg_Y20Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a5:19:44:92:c8:7b:c4:37:24:5f:bf:7b:b7:29:a2:de:1f:
0e:95:3d:29:99:b7:95:48:03:e6:1a:5f:17:8e:d4:a4:78:9a:
33:1d:18:2b:72:2a:1b:5e:24:85:30:a4:99:a5:2c:ca:bc:40:
09:59:d5:db:25:ba:91:02:30:8f:76:59:41:e6:ee:71:33:49:
d4:ff:b4:d7:87:1c:5d:ce:cd:7d:eb:2f:8f:59:ce:77:32:f7:
8c:f5:09:49:07:9b:5c:6c:24:7d:00:d2:b1:f1:64:d1:05:7e:
ca:84:10:e2:82:60:4a:8b:ad:c7:17:79:7a:d7:b1:85:86:01:
9a:04:de:15:95:38:0f:14:bd:d2:5a:6d:68:78:32:c5:02:a7:
ad:d4:fa:aa:66:08:1c:82:fe:33:28:3a:2c:36:34:e7:b8:06:
81:1f:fb:a5:ae:a6:5d:e8:43:31:19:81:2b:1f:13:44:80:ea:
15:18:78:e4:a0:9a:fd:9e:f5:13:87:16:5a:c0:3b:b4:d2:1d:
8b:ca:0d:f1:cd:94:8d:9e:4a:26:4f:6c:a2:a1:35:80:61:19:
d9:2f:04:65:98:5d:07:23:d2:6a:fb:ed:08:2a:a0:a4:23:36:
e9:8d:40:9a:4f:68:03:71:b5:d6:af:9e:45:d3:5f:d2:58:85:
bb:b1:54:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:48:06 2025 by rpki-client