Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
File: KgzEYwHIsf1GOSkwGPulNlOiZbI.mft (raw, json)
Hash identifier: Oj6R4AAwGX5caSJqjSujj3D0lsvfQMyAQYdA5e/ymhY=
Subject key identifier: 82:75:8A:66:EB:49:56:83:98:1E:3D:34:EE:80:DE:FB:55:6C:13:A3
Authority key identifier: 2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
Certificate issuer: /CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Certificate serial: 0196ACFA8183E28979ED30B4DEB5D55F843E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
Manifest number: 152F
Signing time: Wed 07 May 2025 23:00:20 +0000
Manifest this update: Wed 07 May 2025 23:00:20 +0000
Manifest next update: Thu 08 May 2025 23:00:20 +0000
Files and hashes: 1: 25LU7394eXHg-PBe4_GLTG3VIkw.roa (hash: HyP22/g9CSOKH8mPcT6JDAYedjiAUR/5O/lp9cDajCk=)
2: KgzEYwHIsf1GOSkwGPulNlOiZbI.crl (hash: knN+hIGcDIvwYTGIA0lQZMpYzg97EzIsCK70uNnEi9c=)
3: VUqvat4WtfuUczhMBY4TDvxEK_s.roa (hash: Zqzw2dEApvnq4zRqyWAKudIEokzGJ+rSfWzcaKX+at0=)
4: jfIFCuUZlCfoxkAB48zp-OMBSv0.roa (hash: tfMbXizXQYE7ANVbZs7KN2qDtk5wxuAhU53t/l8imds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 May 2025 20:38:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:ac:fa:81:83:e2:89:79:ed:30:b4:de:b5:d5:5f:84:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a0cc46301c8b1fd4639293018fba53653a265b2
Validity
Not Before: May 7 23:00:20 2025 GMT
Not After : May 8 23:00:20 2025 GMT
Subject: CN=82758a66eb495683981e3d34ee80defb556c13a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:92:51:4a:e9:3e:e4:74:9f:45:76:fc:92:
df:57:c1:85:23:a0:97:f8:11:b0:4d:38:fd:e0:fe:
ab:9d:0c:e7:1a:75:75:5e:21:f8:54:7d:7d:e4:51:
1d:e8:29:83:39:e4:c0:49:28:84:96:cd:05:13:d8:
fb:ff:6b:98:0c:8b:f2:cf:28:d5:ce:3f:d8:ca:0e:
d5:e9:26:00:99:d3:38:eb:85:b9:a0:75:26:e8:e8:
ba:c7:cc:c3:88:2a:2d:0a:8a:d1:0d:fe:bb:19:a4:
16:69:61:56:f7:e6:09:ae:f0:a6:10:79:e5:b4:97:
d4:82:46:8f:0f:f4:d8:ca:5c:c4:0c:5c:ca:22:ef:
ed:cf:b8:22:e9:4d:88:4c:8b:4b:20:ac:ba:ff:98:
82:ed:93:59:a4:5f:d6:e0:d9:f6:42:50:77:d0:d7:
51:ac:fc:eb:22:cc:38:aa:f1:58:90:04:83:e9:a7:
2a:72:0b:90:5c:bf:01:67:e3:c6:f7:33:47:be:9b:
32:f4:8b:0f:75:c2:c1:44:e3:9e:52:7b:6d:6a:aa:
ff:50:33:48:f2:74:e6:74:96:2f:62:84:86:33:bf:
c8:32:f7:da:b9:44:aa:7f:87:c6:22:c0:fc:de:41:
d4:cb:af:11:f5:6f:25:0b:a1:fc:2a:b8:e7:8d:de:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:75:8A:66:EB:49:56:83:98:1E:3D:34:EE:80:DE:FB:55:6C:13:A3
X509v3 Authority Key Identifier:
keyid:2A:0C:C4:63:01:C8:B1:FD:46:39:29:30:18:FB:A5:36:53:A2:65:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KgzEYwHIsf1GOSkwGPulNlOiZbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2862d1-2cc9-4565-86c2-2bb5597a2435/1/KgzEYwHIsf1GOSkwGPulNlOiZbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1c:c8:be:19:3b:e9:79:cd:09:91:85:c6:45:51:e0:9b:b5:
66:81:8c:6b:a9:3e:38:50:73:5d:19:ad:5f:ca:87:2f:ab:65:
63:fb:47:2d:02:b0:09:c5:60:33:be:8b:ff:51:c0:72:4a:6c:
88:60:ad:31:c9:f8:5b:f0:2f:30:5e:93:f9:32:87:03:23:f3:
79:50:00:6a:cc:83:c8:a5:ef:45:03:bb:5c:a1:32:9e:b4:2d:
a7:fa:79:4d:34:c9:f2:4f:47:75:16:b7:c5:57:ae:b2:49:23:
1e:2c:7c:34:8b:92:d6:97:d0:e9:cb:64:fc:2d:56:49:51:c7:
1c:5e:ed:9d:39:df:e2:25:9a:da:ab:b0:10:d7:bc:fe:13:ad:
de:19:dc:d1:8e:e4:b1:f6:9e:00:a2:e6:88:e1:24:1f:fb:de:
35:4a:34:5f:3d:5e:92:b8:35:0e:4d:c0:ed:3c:cc:c4:77:12:
00:1c:a4:73:2f:fd:bc:3e:b9:14:2d:54:47:25:59:28:61:59:
39:7e:12:83:f2:50:2b:39:b5:3b:3c:f9:79:16:13:ef:a1:e0:
6a:85:ea:cc:0f:e6:9b:d8:e0:f3:5c:f9:d4:32:ed:fa:59:25:
1d:34:36:ae:c3:98:55:33:6f:13:8f:92:98:3d:49:cb:a4:c3:
59:87:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 03:05:57 2025 by rpki-client