Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
File: KboKHXhI0sGyMd0-aCRCDRh5mRM.mft (raw, json)
Hash identifier: eO9biRVliqIAcABylcOfv38WZ1y3lo2AGYRg+j+OrBM=
Subject key identifier: 68:A8:F2:AF:32:4A:C3:D7:3E:BC:51:F7:15:2A:D7:0D:E9:CB:9E:D1
Authority key identifier: 29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
Certificate issuer: /CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Certificate serial: 0196C61561D4B3CC23E71AF6E52FE416FFEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
Manifest number: 153D
Signing time: Mon 12 May 2025 20:00:12 +0000
Manifest this update: Mon 12 May 2025 20:00:12 +0000
Manifest next update: Tue 13 May 2025 20:00:12 +0000
Files and hashes: 1: KboKHXhI0sGyMd0-aCRCDRh5mRM.crl (hash: +YTGM5880W1HpWf7j/0NZHZ3sfZ2jEqPxPkhXL3G1zc=)
2: eZNf3C9feSNGJ4V8vhX9W1CodHo.roa (hash: jCzejzqRu1A4u7nv7yzoXy+ymx/Nx97x4lbTMxiUYlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c6:15:61:d4:b3:cc:23:e7:1a:f6:e5:2f:e4:16:ff:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ba0a1d7848d2c1b231dd3e6824420d18799913
Validity
Not Before: May 12 20:00:12 2025 GMT
Not After : May 13 20:00:12 2025 GMT
Subject: CN=68a8f2af324ac3d73ebc51f7152ad70de9cb9ed1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:e1:f9:c9:ef:14:bd:d2:95:c5:26:1f:ed:
d7:95:54:9a:8f:91:20:52:70:13:de:e6:02:ee:e9:
1a:51:5a:6e:a9:b1:77:3e:df:07:c7:31:2b:11:d5:
d1:71:7f:dd:3e:fe:c3:a1:59:f9:ba:57:fc:71:18:
e7:90:11:e3:51:0f:a8:63:aa:ae:c9:b3:89:c8:90:
49:1f:70:34:ee:a7:66:e0:34:c9:25:4e:74:5f:dc:
ab:9a:c3:ad:bf:5c:2c:1b:72:51:cd:a2:e1:0b:eb:
9f:8c:48:43:a6:40:42:3f:7f:35:58:7f:8c:11:17:
1b:d6:e3:90:37:d7:35:f1:4c:b1:ac:7b:92:07:e8:
09:d7:d8:2a:06:f0:6f:18:2e:3f:6f:a5:30:39:3f:
a8:53:9d:d8:19:e7:0f:12:ab:fb:7e:a7:0e:73:61:
33:21:d4:6b:47:5e:4b:9b:00:90:dd:10:58:9a:e2:
e7:db:c5:67:ad:f1:8a:e2:f0:a5:bb:f8:24:c8:36:
23:28:ea:25:b6:e0:f0:d7:3b:f6:e8:90:d4:42:f9:
e2:dd:05:10:1e:3b:71:8b:f1:42:27:fc:0e:0c:73:
76:e5:b0:bd:ad:e1:1d:14:5f:f7:bc:d8:76:0f:e3:
9c:f9:14:e5:ce:50:83:11:49:4f:26:c3:9a:dc:22:
d0:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A8:F2:AF:32:4A:C3:D7:3E:BC:51:F7:15:2A:D7:0D:E9:CB:9E:D1
X509v3 Authority Key Identifier:
keyid:29:BA:0A:1D:78:48:D2:C1:B2:31:DD:3E:68:24:42:0D:18:79:99:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KboKHXhI0sGyMd0-aCRCDRh5mRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/30c0c0-9eca-464f-8b9f-6a5b5f5ca9d3/1/KboKHXhI0sGyMd0-aCRCDRh5mRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:82:6c:2d:3d:82:58:91:24:ac:dd:19:1a:44:4a:34:f7:87:
3d:d9:b9:f3:c3:52:71:db:2c:14:8c:89:b5:0d:2f:a0:81:76:
ae:06:77:62:cb:36:bc:9f:f4:40:ef:8d:e2:a2:15:3b:94:67:
ed:ab:25:ff:fb:f5:b6:ff:e3:dd:73:7f:2c:81:7c:9a:34:75:
a7:07:e5:29:39:f1:ad:6e:a6:a1:b4:0d:e4:0c:10:7a:8e:dc:
79:94:f2:a1:7e:32:83:75:a1:9f:24:12:03:65:96:01:a3:5e:
04:e0:f9:3b:e8:31:2e:97:a6:07:c3:d3:ee:27:91:6b:c5:4c:
1a:3c:87:d1:93:6d:58:14:31:98:59:16:30:01:03:b3:95:c2:
d2:e1:eb:a3:98:ef:75:3f:a6:4a:54:dc:df:f5:35:85:11:05:
68:45:f5:d3:df:bd:92:0d:97:c5:00:21:78:ea:ee:f7:f3:62:
65:0e:d5:7e:6c:ac:50:93:1b:cb:ca:1b:e8:c7:5b:09:fe:a3:
15:42:d8:db:38:36:b4:66:91:23:df:ef:2c:96:53:44:90:01:
f6:b5:d7:b2:c8:03:97:e9:09:fe:35:d7:b6:90:a2:02:ad:03:
85:7b:9c:1f:ee:a6:e8:4d:3f:4c:3b:bc:ee:66:34:b4:bd:a1:
06:95:9b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 01:58:17 2025 by rpki-client