Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
File: kNRNBKKqhYbulMejNTbDaBatoWM.mft (raw, json)
Hash identifier: OPFm4Q5IHkFL5f+ZpEfag8O5auLLmj0SwjpJshaUvEA=
Subject key identifier: C2:4A:29:F7:54:17:F4:A8:87:62:55:8E:77:1F:66:F2:7A:13:7B:9A
Authority key identifier: 90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
Certificate issuer: /CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Certificate serial: 01974C6917E4D89E910BFCD729DD087BF219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 22:00:45 +0000
Manifest this update: Sat 07 Jun 2025 22:00:45 +0000
Manifest next update: Sun 08 Jun 2025 22:00:45 +0000
Files and hashes: 1: kNRNBKKqhYbulMejNTbDaBatoWM.crl (hash: Sr5vME6b6h4YwE8yqkHOcFhJTipWvEsgQcDYLdapdeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:17:e4:d8:9e:91:0b:fc:d7:29:dd:08:7b:f2:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90d44d04a2aa8586ee94c7a33536c36816ada163
Validity
Not Before: Jun 7 22:00:45 2025 GMT
Not After : Jun 8 22:00:45 2025 GMT
Subject: CN=c24a29f75417f4a88762558e771f66f27a137b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a6:a5:58:66:e1:88:84:83:ce:3d:13:53:a9:
a4:d0:36:d1:56:df:b7:1b:cf:a3:44:8d:41:2b:df:
2c:e9:b2:04:08:7b:47:73:a9:e5:22:98:3d:80:65:
7e:de:3f:4c:f1:7d:91:25:0b:c3:ce:45:d6:14:39:
0c:97:f3:03:13:99:cb:ca:f6:5d:b8:f5:2b:6b:b0:
ba:ac:b8:d5:c1:c8:5d:c3:57:ed:e0:f4:2b:2c:a8:
67:17:5a:ee:11:a8:2b:77:11:c4:66:05:c0:83:87:
54:ed:6a:0c:48:07:35:bd:23:1d:48:05:8e:1c:c8:
3e:e1:c9:15:98:05:d1:15:0b:bd:c1:ec:94:b7:d5:
a3:27:4b:59:53:72:5b:33:68:87:11:60:d1:80:94:
69:e3:7d:ba:1f:b1:bd:3f:a8:0d:7e:1c:66:93:ac:
c0:08:2c:44:b0:83:bf:bb:ab:c9:7a:11:6c:33:5a:
d0:12:1a:b6:ce:dd:7e:0c:0a:5c:6d:ea:19:b2:98:
17:ea:ac:f8:cf:1f:4b:03:3f:b4:40:7d:8c:6c:dd:
40:4a:97:a6:03:54:4a:b1:ec:02:5a:13:6b:69:cc:
d9:18:6d:57:c9:09:e2:9f:a8:2c:65:44:48:c5:bc:
8d:6f:b2:ad:f2:72:d5:99:a9:46:35:0b:ed:2f:c4:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4A:29:F7:54:17:F4:A8:87:62:55:8E:77:1F:66:F2:7A:13:7B:9A
X509v3 Authority Key Identifier:
keyid:90:D4:4D:04:A2:AA:85:86:EE:94:C7:A3:35:36:C3:68:16:AD:A1:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kNRNBKKqhYbulMejNTbDaBatoWM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/e7c692-9941-4bc1-b4c2-6f8cacc12339/1/kNRNBKKqhYbulMejNTbDaBatoWM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:d8:2b:2c:21:36:b8:be:0c:70:d0:55:a4:e0:fc:a2:f5:94:
1d:96:49:56:fa:4d:67:15:b6:ea:9a:f4:2a:58:76:ba:02:7e:
48:a6:82:45:ba:24:dd:c4:13:36:1e:04:ec:2b:53:93:77:32:
a6:60:ad:14:55:b2:a7:75:ce:56:4e:52:68:57:cd:2e:75:c0:
9a:fb:57:29:15:15:65:1e:2a:dc:68:58:9b:67:e3:69:4e:4e:
42:d2:27:3b:7e:97:32:7f:75:b9:7f:6d:d1:29:d3:6b:89:3e:
8a:57:c4:5f:d3:d2:96:48:60:6e:0e:49:d9:e3:f6:c8:2d:9b:
14:c1:a5:f3:a5:a3:c0:dc:0a:47:fe:bf:9e:de:aa:ea:ce:99:
83:09:e3:6e:59:06:76:66:d3:42:e8:21:d1:2d:8e:2b:35:e6:
f6:df:6a:f2:91:7d:24:5b:41:00:6e:53:25:0f:0e:fd:a9:ce:
6c:37:ed:c1:6e:6b:ee:a0:a5:8c:0f:44:b5:bd:24:74:15:8e:
40:e3:45:50:f9:ce:b4:6c:48:cf:cb:79:9c:93:80:f5:ea:d7:
ec:14:c4:f3:bd:96:7a:94:70:b3:e4:9a:ab:44:17:27:cf:72:
b4:f6:fb:bc:bd:b1:27:24:d6:ce:ca:ae:5f:a2:25:d1:8d:8a:
25:14:aa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:32:05 2025 by rpki-client