Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
File: ks-z-7RDpLz7jyRvz6f168i5ezE.mft (raw, json)
Hash identifier: JZJXncb7dhdNKK67gzPCICWsp3iSeujdj+8WhOv1pq4=
Subject key identifier: CE:BE:24:89:C9:09:81:D2:AE:A2:4C:3F:8F:06:DA:C6:81:62:EA:D7
Authority key identifier: 92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
Certificate issuer: /CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Certificate serial: 01965D5ECD62735820C6FC689C3394CC9A6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
Manifest number: 07F7
Signing time: Tue 22 Apr 2025 12:00:15 +0000
Manifest this update: Tue 22 Apr 2025 12:00:15 +0000
Manifest next update: Wed 23 Apr 2025 12:00:15 +0000
Files and hashes: 1: ks-z-7RDpLz7jyRvz6f168i5ezE.crl (hash: 4T5YvnZoBWOojIej2pX5ujyrkwN2TxGGILCHllv76CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 12:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5d:5e:cd:62:73:58:20:c6:fc:68:9c:33:94:cc:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cfb3fbb443a4bcfb8f246fcfa7f5ebc8b97b31
Validity
Not Before: Apr 22 12:00:15 2025 GMT
Not After : Apr 23 12:00:15 2025 GMT
Subject: CN=cebe2489c90981d2aea24c3f8f06dac68162ead7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c1:e9:4a:fb:29:9c:4b:b4:dd:9c:1f:aa:43:
fa:72:85:42:66:f2:39:10:7a:9f:36:15:ed:f2:a2:
16:3f:6a:b9:17:f0:3e:f9:29:1f:fa:f8:cd:f8:36:
54:c5:bb:74:fc:ad:d8:66:26:49:10:fe:42:0b:3a:
5f:4d:9f:70:77:8b:f4:7e:4d:da:c8:cf:2a:f7:87:
7f:21:f6:3d:8f:c9:8d:58:76:77:8e:11:1c:33:62:
42:3e:04:c7:e7:05:a2:31:04:87:01:77:7f:18:0d:
e4:c7:ea:38:2f:a6:d0:f6:02:8e:f7:7a:aa:0f:cc:
fe:a5:d1:b4:2f:4d:b2:72:2d:38:68:67:24:77:3d:
11:9b:32:ae:fc:87:98:a5:ca:a8:14:f7:58:92:f5:
7f:fc:2f:57:dd:8e:0c:50:36:ec:60:6b:12:fe:79:
36:b9:ba:84:db:63:05:a7:1c:d1:c9:58:aa:26:a9:
52:e1:71:ef:5b:93:45:c6:2a:ae:4f:77:7c:a0:2b:
a0:f9:c9:c9:ea:38:97:8e:1f:6b:54:54:5a:fb:fd:
5d:b2:6c:9e:8e:13:64:d7:85:da:03:5d:5d:3d:3a:
26:68:57:80:a6:96:b0:64:37:fc:65:ff:d7:65:76:
9a:17:f9:0e:92:9d:24:7f:e1:9c:52:a6:e2:a3:9a:
14:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:BE:24:89:C9:09:81:D2:AE:A2:4C:3F:8F:06:DA:C6:81:62:EA:D7
X509v3 Authority Key Identifier:
keyid:92:CF:B3:FB:B4:43:A4:BC:FB:8F:24:6F:CF:A7:F5:EB:C8:B9:7B:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks-z-7RDpLz7jyRvz6f168i5ezE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/584cc3-7de5-415a-9220-05f0cb5ec4d8/1/ks-z-7RDpLz7jyRvz6f168i5ezE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:7b:df:c5:c4:5b:49:ad:48:40:3b:8d:2e:e2:97:93:a1:47:
2e:a0:14:31:85:99:13:66:f9:52:e7:ce:c9:c1:75:b5:d3:13:
ff:62:b3:d0:88:59:13:fb:71:9e:47:d3:be:d2:f8:1e:62:a9:
85:39:91:03:45:01:c0:04:e4:5e:6c:3b:2b:d4:68:17:bc:b4:
10:39:d3:ad:07:b0:c9:be:bf:e3:51:e3:e2:34:a8:e1:db:3c:
1b:a5:42:58:b2:c6:6e:81:1e:2a:fa:2c:75:fd:1a:d3:4e:65:
4b:a1:f3:01:e7:47:b9:f9:26:56:85:98:69:11:24:f1:1c:30:
60:0e:05:d3:7f:c3:10:6b:e9:71:3b:df:b0:ac:57:0c:d7:6b:
8d:e9:dc:06:b2:73:d0:1c:86:10:cc:d2:bb:d2:c6:d2:e7:5d:
2e:1a:c7:6e:76:0c:9c:73:65:70:b4:ff:ef:d0:25:79:6f:5e:
88:00:3f:92:2d:4a:f9:1b:50:13:49:bf:94:6d:91:4a:5c:89:
36:47:d5:d4:e9:ab:22:e2:60:2d:15:35:32:13:52:72:16:fd:
f7:a2:55:a5:95:03:9f:72:e7:91:d5:64:f7:f8:38:11:59:6d:
fd:00:49:47:e0:e5:0c:83:ff:45:7e:30:74:97:1f:dc:02:b3:
2f:8f:b9:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 22:35:39 2025 by rpki-client