Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
File: KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft (raw, json)
Hash identifier: SstSYs79F5eQmqYhWXCzH2mgfjDPH3RPhxZNMGtWxhY=
Subject key identifier: E5:37:51:FE:5F:79:BB:8A:C4:AE:8D:7F:C2:A4:C2:9F:05:46:AA:72
Authority key identifier: 2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
Certificate issuer: /CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Certificate serial: 01965BA7B0E82E9A842B0B60919071962305
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
Manifest number: 123E
Signing time: Tue 22 Apr 2025 04:00:38 +0000
Manifest this update: Tue 22 Apr 2025 04:00:38 +0000
Manifest next update: Wed 23 Apr 2025 04:00:38 +0000
Files and hashes: 1: KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl (hash: z0ky7bFUiFHAt5S01/xu2ZFzuxsQ6fh7vQyVJgTM+Xc=)
2: jVEebkEC2-oHzNPCTqPYuC9aoqE.roa (hash: J11dJEoO4oOPIGJkgBui1oSiw1WMmsHoIDwoMRNd+jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:b0:e8:2e:9a:84:2b:0b:60:91:90:71:96:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a9100a145dcb7b3795379bb0938fe89aa861924
Validity
Not Before: Apr 22 04:00:38 2025 GMT
Not After : Apr 23 04:00:38 2025 GMT
Subject: CN=e53751fe5f79bb8ac4ae8d7fc2a4c29f0546aa72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:d8:4c:43:4e:90:3e:81:17:f0:0b:80:8a:
4a:1c:21:33:1e:a0:c1:ae:33:52:47:38:c4:fd:ca:
19:34:99:b2:ce:a5:62:4a:d0:7e:83:e3:ae:ee:99:
8b:7a:c9:82:1a:eb:6c:cb:1b:49:52:16:b3:9e:e4:
01:5b:ff:5e:b8:cc:3f:61:a0:b9:17:45:62:77:88:
56:c8:ee:f5:e3:be:b7:de:1d:d8:66:1a:f2:06:0d:
9f:9f:32:01:8a:1f:19:f9:16:12:7a:d8:a9:19:06:
bf:05:08:61:5e:f3:58:b6:81:75:77:40:45:c4:b0:
2d:a2:f4:b1:3e:51:ba:00:e0:c2:ea:25:6c:47:fd:
d7:8e:4d:5f:2e:39:d3:08:f2:a8:e9:ee:d8:a1:62:
86:1f:39:e5:d7:fa:4f:1d:93:20:5f:d4:73:0a:73:
80:0c:4f:b4:88:7b:46:6c:5b:ba:df:a4:e3:e8:e5:
d3:8e:f1:24:f2:7c:2f:52:90:ee:81:c4:26:bf:7f:
f1:8d:38:38:b9:42:a4:5f:43:61:19:cc:c7:02:ab:
83:71:13:9f:22:c6:1b:41:fe:dd:c9:8a:41:25:83:
c0:d1:40:d6:81:0f:56:61:be:46:1f:c0:3d:1f:34:
67:f4:4e:2e:93:0f:75:41:99:83:0c:2d:86:05:f6:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:37:51:FE:5F:79:BB:8A:C4:AE:8D:7F:C2:A4:C2:9F:05:46:AA:72
X509v3 Authority Key Identifier:
keyid:2A:91:00:A1:45:DC:B7:B3:79:53:79:BB:09:38:FE:89:AA:86:19:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KpEAoUXct7N5U3m7CTj-iaqGGSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a398eb-c429-4837-8e77-79246c894591/1/KpEAoUXct7N5U3m7CTj-iaqGGSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0f:d1:1d:e5:c4:7d:0c:00:de:87:3f:ae:ad:a9:01:93:fd:
28:7d:33:bb:a7:3f:9b:42:74:aa:1c:36:78:f1:38:d8:33:3a:
38:0e:de:86:76:11:88:d9:b6:c5:13:71:60:7a:e8:c0:d6:3e:
f9:e8:d8:8e:e4:92:6f:f8:b7:b6:99:03:7b:9c:e6:79:10:e7:
05:81:cd:70:71:02:2a:bc:09:cb:20:9a:b4:a0:31:63:10:ee:
57:25:16:07:c9:db:23:c6:4b:a7:dc:24:e6:6d:58:76:5c:7c:
4e:73:1e:66:ae:a0:7e:6a:29:bd:82:ee:5c:db:5f:ce:5f:dc:
18:4d:c0:75:15:f3:a5:ed:ad:1f:d7:03:df:8b:38:1d:2e:19:
a2:55:13:02:39:8c:53:75:95:c2:07:3f:9e:33:de:c5:15:d1:
f2:68:54:0e:f0:77:c3:c6:66:d3:7f:66:a1:29:cb:33:00:7e:
24:8c:2c:c9:18:96:d3:42:c2:7c:a7:97:ae:35:f3:ef:3a:fd:
8a:d6:23:94:0d:0b:67:f3:72:e8:b6:b3:e1:90:7b:6b:c1:e6:
de:98:bd:cf:54:3e:30:74:87:7f:d0:30:67:b0:4b:6f:ea:d9:
93:06:a7:ad:4c:1d:db:d5:c0:37:de:35:d3:15:dc:91:f2:74:
ae:f8:f3:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:06:37 2025 by rpki-client