Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
File: kLW7gP7vNEZQqadz9h8LLPv3zow.mft (raw, json)
Hash identifier: m2S1dDsWKlGHiUrPri9y9ZkzsXZ5Dr9Vhgru2kYBMas=
Subject key identifier: 1C:CA:D3:A4:1B:B6:C5:A5:74:9C:C7:8F:91:53:67:25:29:D4:AF:E0
Authority key identifier: 90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
Certificate issuer: /CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Certificate serial: 01958EBD3373B3DEB7F0BC5FB99AC623CE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
Manifest number: 1499
Signing time: Thu 13 Mar 2025 09:01:58 +0000
Manifest this update: Thu 13 Mar 2025 09:01:58 +0000
Manifest next update: Fri 14 Mar 2025 09:01:58 +0000
Files and hashes: 1: FGJLDNwIe5pLjXrqbymC0a0gPJo.roa (hash: kQgzQHprcEB53dC9DqKWQUqd46ovamQ0wepPNfm8eyk=)
2: kLW7gP7vNEZQqadz9h8LLPv3zow.crl (hash: DiVA3t2QYdtU41OZ/6RrzegmuLCUK9JF6fACNt/LG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 09:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8e:bd:33:73:b3:de:b7:f0:bc:5f:b9:9a:c6:23:ce:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b5bb80feef344650a9a773f61f0b2cfbf7ce8c
Validity
Not Before: Mar 13 09:01:58 2025 GMT
Not After : Mar 14 09:01:58 2025 GMT
Subject: CN=1ccad3a41bb6c5a5749cc78f9153672529d4afe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:91:aa:fc:ff:1f:ef:6a:d8:ad:c0:44:e5:
03:91:1c:fe:98:d1:ac:28:5c:71:13:1d:0c:e0:7b:
66:cc:d2:90:8d:de:72:ac:4c:78:cb:5a:e8:a4:3d:
b4:c2:0f:e3:7b:84:5d:02:e4:81:e8:8b:bb:8f:af:
69:e4:b9:82:6f:83:03:6f:7f:48:ef:90:17:d4:eb:
67:ce:10:ba:88:5a:0a:b1:8c:40:08:93:8b:39:e8:
86:fd:05:c6:df:1d:99:27:6e:da:9d:65:a3:40:cb:
96:ea:7a:5c:35:65:07:ee:82:05:cf:fd:05:86:7c:
cb:3c:4e:51:1e:58:c6:72:d2:e9:5f:24:f6:0f:1c:
43:99:a9:f6:41:4f:81:d5:0f:a0:8f:81:bb:90:11:
da:a8:e4:73:f7:52:7a:83:5d:eb:1e:83:e9:d1:e3:
75:29:ec:5e:7f:b0:06:3f:f2:dc:98:7b:0f:82:44:
9c:53:be:fb:f8:48:37:44:6d:f5:c9:8f:3f:ad:94:
26:df:0f:5f:5d:5f:cc:76:d2:13:93:27:f7:d3:7e:
b1:10:61:48:9b:55:ca:ba:11:d1:2f:59:e4:9b:bc:
d2:50:eb:20:59:59:3d:f1:dc:8c:92:69:5e:23:7f:
e8:63:4b:94:36:54:eb:48:2b:10:4a:af:0f:da:45:
a0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CA:D3:A4:1B:B6:C5:A5:74:9C:C7:8F:91:53:67:25:29:D4:AF:E0
X509v3 Authority Key Identifier:
keyid:90:B5:BB:80:FE:EF:34:46:50:A9:A7:73:F6:1F:0B:2C:FB:F7:CE:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLW7gP7vNEZQqadz9h8LLPv3zow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/052118-c46b-48b4-87dc-5ed5270edf23/1/kLW7gP7vNEZQqadz9h8LLPv3zow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:44:d9:94:29:01:7d:15:b9:1f:29:0a:44:72:dd:44:b9:1e:
f3:d2:f6:cc:32:f9:0b:4f:e1:26:8d:0b:30:04:e8:87:c2:c3:
d6:0b:81:2b:cf:ae:62:d3:55:cf:a8:4b:0a:29:b7:12:e6:50:
c1:ff:85:83:27:0a:b5:0d:53:b1:f0:d1:66:77:24:82:3e:11:
fc:69:f7:93:56:46:38:07:87:f2:9b:cc:46:37:9a:9b:0f:d3:
d6:d0:56:eb:3f:db:af:b1:27:4e:c8:b6:b7:49:1d:03:e4:a9:
d1:22:96:90:b8:9e:cb:a4:e0:d4:f6:88:2d:2c:0f:d9:6c:26:
eb:c9:fa:03:06:fd:9d:30:ce:ac:b0:c5:24:38:ab:29:38:a8:
20:a9:70:f0:43:75:08:9a:0a:63:b8:c0:1e:74:cc:61:21:8a:
0f:ae:3f:e7:2b:0f:65:9e:1b:e0:f8:06:b4:88:54:87:d4:50:
fe:6e:6c:60:1c:37:8f:3e:08:5b:ef:fc:8d:1f:4a:cd:ac:57:
74:6a:05:d7:78:1e:ea:3e:b1:b3:51:00:4c:d4:8d:eb:ad:b4:
85:2e:6b:19:71:2a:2e:5f:cb:34:43:58:22:8a:95:80:4b:d8:
3d:93:75:e2:59:4f:5a:47:34:87:f4:9e:02:2a:7a:2e:26:70:
76:b3:ae:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:54 2025 by rpki-client