Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
File: KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft (raw, json)
Hash identifier: Nu4yBSIJfiLv9m3xIvNwpZhAjC7aLsr9nd0aGUlAqaY=
Subject key identifier: 0F:C9:BC:B6:56:21:78:DB:1F:8B:4C:34:24:D8:A5:23:0A:D9:96:18
Authority key identifier: 28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
Certificate issuer: /CN=28c2202a443537fb8fb280567a17485f1230c411
Certificate serial: 0196A2AE18416A7464EAE7446B75A30A1040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
Manifest number: 1529
Signing time: Mon 05 May 2025 23:00:40 +0000
Manifest this update: Mon 05 May 2025 23:00:40 +0000
Manifest next update: Tue 06 May 2025 23:00:40 +0000
Files and hashes: 1: KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl (hash: zlupLuEvznmWEG8OnD/isr6YSQkbx1Vxnv3Y9F6TtaI=)
2: rzOkydR3EHFZXD3XEkRebB02-_4.roa (hash: df7jTqxQL8Sw059sbRTkyG9ltt5KtHFaW+BfP29wPTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 18:19:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a2:ae:18:41:6a:74:64:ea:e7:44:6b:75:a3:0a:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c2202a443537fb8fb280567a17485f1230c411
Validity
Not Before: May 5 23:00:40 2025 GMT
Not After : May 6 23:00:40 2025 GMT
Subject: CN=0fc9bcb6562178db1f8b4c3424d8a5230ad99618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5b:c4:dc:cd:21:bd:67:7d:c2:1e:d9:7a:8b:
4c:2a:66:83:60:7d:4e:80:5a:3f:f4:a5:56:8f:55:
01:f6:58:55:f7:77:87:0f:48:72:00:ac:86:de:06:
c4:d8:1b:5b:93:bd:9f:6b:59:75:9c:46:23:56:45:
fe:23:fb:aa:43:5d:b3:6d:4d:1c:e6:a8:1c:4c:b4:
1e:a0:1e:50:75:f6:63:18:f6:1f:82:17:64:3e:ac:
42:7b:89:12:00:d5:b4:62:3b:ff:62:79:ec:5b:06:
74:41:46:c0:3c:f6:fe:32:5a:4f:c0:de:f2:1b:92:
fe:25:73:de:b7:26:35:e8:19:bc:2d:c7:c7:d7:45:
e2:dd:e5:76:7b:18:50:4f:57:60:5c:f7:bb:d9:27:
fc:9b:b9:12:c7:43:85:bc:21:e6:c3:5a:18:1d:dc:
62:3c:5a:ca:30:5f:e1:f3:a5:23:04:1c:f1:6f:62:
8c:6a:1b:9c:d7:46:a9:ea:9b:30:11:97:63:08:87:
e2:4e:ad:ef:64:a4:ee:76:74:84:bd:f2:fe:23:d5:
75:56:d6:e3:8b:74:37:48:79:2a:62:3e:1b:6b:7b:
73:9e:58:d5:05:ee:6f:db:15:aa:f8:02:08:6e:3c:
cb:f3:be:87:cc:e9:a1:99:f9:0c:42:59:88:16:dd:
cc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:C9:BC:B6:56:21:78:DB:1F:8B:4C:34:24:D8:A5:23:0A:D9:96:18
X509v3 Authority Key Identifier:
keyid:28:C2:20:2A:44:35:37:FB:8F:B2:80:56:7A:17:48:5F:12:30:C4:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMIgKkQ1N_uPsoBWehdIXxIwxBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a2ce64-33af-45fe-90eb-89d2611a95db/1/KMIgKkQ1N_uPsoBWehdIXxIwxBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fa:b0:a4:6d:3b:03:83:d8:6e:bd:9f:cd:f0:8f:cb:27:d6:
01:ee:50:48:5b:ac:29:e2:cd:d2:b4:21:a5:b8:dc:3e:fe:e3:
6b:38:b7:b4:ad:f8:c7:18:22:cc:e9:85:a3:d0:bc:fa:c0:41:
f4:90:cd:36:7d:96:09:39:e9:cb:94:8f:05:45:52:9a:24:29:
8b:72:52:dc:6d:9f:cd:f0:f5:ee:7d:31:99:66:97:14:b6:28:
f0:27:ef:7c:98:fe:22:65:75:a3:d6:e4:65:89:70:9f:31:f7:
f1:86:50:cd:ff:73:35:e5:56:8f:ef:e8:5f:bc:09:2a:60:02:
e7:bd:70:33:65:77:57:9e:ee:78:63:80:35:f0:ab:6c:53:00:
a4:99:03:78:8e:42:9a:6d:bd:26:65:99:e8:6d:d8:79:66:76:
ce:d2:03:d3:fe:6d:17:3d:d9:aa:f5:f0:fb:24:6a:b4:7c:07:
27:8d:44:e2:23:22:a8:a7:e3:06:81:60:11:e4:2d:f1:dd:4f:
92:46:ac:eb:f7:40:da:ae:3a:99:90:37:12:63:ea:d4:63:18:
18:d8:d4:a0:9d:c5:96:2e:81:18:be:f5:09:a1:31:55:b0:24:
24:af:99:f4:ae:e8:68:c8:8e:77:98:f6:20:38:70:69:56:01:
c3:86:a8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:05:34 2025 by rpki-client