Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier: yCgDTYFeJWbiqHZv7r+BPkoZJFzkMzfHZMR03BU9ANE=
Subject key identifier: 20:CC:90:E5:40:07:AE:18:E2:B9:AA:0D:D9:94:92:E7:C2:6B:36:E6
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial: 0196C0B86316C2E720966047AAFCB6C3AEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number: 0410
Signing time: Sun 11 May 2025 19:00:31 +0000
Manifest this update: Sun 11 May 2025 19:00:31 +0000
Manifest next update: Mon 12 May 2025 19:00:31 +0000
Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: YU3vZ1y2EmC5upYqVcCHw8bvPsM7IRn3ujrR2gP08A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:b8:63:16:c2:e7:20:96:60:47:aa:fc:b6:c3:ae:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Validity
Not Before: May 11 19:00:31 2025 GMT
Not After : May 12 19:00:31 2025 GMT
Subject: CN=20cc90e54007ae18e2b9aa0dd99492e7c26b36e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3d:9a:79:2e:9d:b4:b2:78:f7:91:41:67:a9:
3a:54:d3:80:ed:9e:df:9f:92:e1:82:01:02:b9:27:
88:3c:8b:1b:b2:d3:d4:4d:6a:96:c8:90:23:a4:ca:
e4:1b:7f:65:02:a0:b2:11:c8:ac:e7:c0:31:47:7f:
7f:63:b1:af:94:e9:b9:94:b8:c1:85:89:f9:26:ca:
bf:f1:3e:1f:25:93:60:ad:af:f6:43:33:be:65:15:
44:5a:ac:f9:1a:f3:70:d2:ea:68:b3:46:b1:54:fa:
11:22:d9:f9:46:b8:90:9e:e6:26:4a:12:37:1f:9b:
7a:4f:f0:ff:a6:c2:0b:97:26:dc:f0:d4:d6:18:f6:
74:79:d6:e7:d6:0f:fe:3e:28:b5:98:6a:4b:39:fe:
d4:bd:e9:49:94:8d:72:14:50:51:33:5c:9e:ca:90:
c2:e6:c7:27:48:d5:79:dd:72:a3:3a:70:62:a7:8d:
62:f1:86:7c:7f:52:3c:88:0f:63:79:26:cf:ca:56:
78:6d:68:cc:51:39:f2:fb:08:1d:d2:37:dc:17:5f:
0f:1d:df:ba:6c:f1:ca:50:b6:47:9b:d5:48:6f:bc:
40:91:f3:8d:4d:b9:2a:b7:d5:ec:26:bd:ad:9d:b0:
4a:28:da:b8:a8:e5:7b:1e:5b:82:53:ae:36:4a:36:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:90:E5:40:07:AE:18:E2:B9:AA:0D:D9:94:92:E7:C2:6B:36:E6
X509v3 Authority Key Identifier:
keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ea:6b:6c:b1:fb:7f:4a:20:4a:c5:0d:9e:2b:52:af:7d:36:
61:8d:d3:e7:c0:70:3c:0b:f6:d1:6d:0e:5f:ef:df:e0:19:f9:
a9:2a:1c:12:0d:31:d9:5d:71:11:6e:98:b2:4f:33:ec:52:b5:
9d:c6:40:e9:94:a5:ad:fe:e6:55:79:6a:d5:0f:13:1b:e3:e8:
6b:0a:1f:6d:5f:f6:05:b6:18:a2:e6:9c:aa:f2:ab:c5:66:3f:
cb:78:ef:ce:3b:72:02:72:24:ed:f7:ff:1d:b6:ab:c1:05:94:
52:b9:bd:23:16:ce:ba:7a:43:73:ce:c6:ae:53:28:d1:1c:c5:
21:31:e7:15:23:69:10:e1:07:50:31:20:ac:e5:c5:bb:52:e7:
70:7d:21:d0:b7:e7:0e:d6:19:d0:b1:5f:90:ee:02:36:d4:f1:
03:fc:98:b1:ed:ed:5c:48:9e:20:02:fd:50:ec:2e:c7:71:c6:
a7:a3:d8:a9:3d:7d:48:5a:dc:b6:2a:63:68:bd:6d:ef:4f:45:
86:98:81:1e:43:80:e7:f0:f4:1a:b0:7e:5c:5d:20:c9:7d:ba:
74:04:6c:14:b8:e8:cd:44:15:72:78:30:22:bd:f1:d4:e6:c4:
e7:ff:06:25:af:41:e7:10:a1:a4:03:1b:a5:71:53:ba:d1:ce:
aa:df:bf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 23:12:48 2025 by rpki-client