Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: /rHOtc6ZvQmbhHG/HpyCaKz0kJZoLOe2afR6a5Hp+Rk=
Subject key identifier: 1A:91:4F:3C:C3:35:4B:FB:6F:D9:9D:64:CA:78:FA:95:1C:31:3F:A2
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 01969F3F58C9A7E417E03A9036C4C09DFED3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 10B2
Signing time: Mon 05 May 2025 07:00:50 +0000
Manifest this update: Mon 05 May 2025 07:00:50 +0000
Manifest next update: Tue 06 May 2025 07:00:50 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: MEMwil2UbuuSBNhkzABl86jCFl247uShIE6g71UxE6k=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:58:c9:a7:e4:17:e0:3a:90:36:c4:c0:9d:fe:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: May 5 07:00:50 2025 GMT
Not After : May 6 07:00:50 2025 GMT
Subject: CN=1a914f3cc3354bfb6fd99d64ca78fa951c313fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:82:d3:df:a3:fa:00:51:25:61:ca:0a:87:
81:7e:34:58:48:4e:f8:21:e7:06:22:9a:7b:df:03:
5f:80:81:0b:ec:91:53:9b:ec:fd:c1:ad:aa:97:db:
17:ec:88:bc:11:df:99:af:15:6f:28:05:4b:a1:90:
e9:81:d2:cf:e2:ab:b4:10:f0:ee:b0:41:c3:0b:a6:
9c:2c:ef:e7:a4:17:e5:0d:d3:a2:c3:61:a1:c2:16:
9f:a4:71:72:79:33:5e:92:84:ac:d7:d9:63:6c:be:
53:44:ad:f9:4a:74:f4:40:e8:be:e0:aa:86:cd:61:
7a:82:d0:ed:a6:8e:63:a2:6e:31:65:55:c3:6d:66:
08:3a:93:8c:ae:94:dc:b1:fb:b9:e6:76:ee:f5:fa:
f4:8d:6c:ee:4f:bd:db:22:cf:48:c5:d0:32:fe:b5:
41:68:72:74:e6:9e:15:52:05:a6:a6:36:f1:7d:0d:
b3:75:a2:4a:7c:c6:76:1c:80:b7:6a:69:c0:ed:33:
c3:03:af:8b:f1:4e:b4:f5:29:4d:40:10:ff:f5:7d:
3b:27:c4:be:08:18:a2:53:ce:b6:0e:0a:49:9b:29:
75:81:c5:74:5b:00:c1:8b:1a:72:64:72:26:d7:94:
c1:96:5f:f4:ea:b2:ff:b6:78:4f:09:63:7e:e7:73:
9f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:91:4F:3C:C3:35:4B:FB:6F:D9:9D:64:CA:78:FA:95:1C:31:3F:A2
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:78:d2:2d:46:31:03:f2:28:4c:d4:ea:52:62:3b:fb:4c:7c:
f5:e3:2e:9a:4e:82:78:e0:1b:bf:0f:ce:f1:da:61:21:02:f5:
cd:d0:dc:c9:68:f2:7b:e1:27:fa:05:28:48:77:90:27:65:d4:
f3:98:d4:98:83:5c:24:de:f2:4b:1e:42:b5:a8:1d:b4:d5:7f:
44:ca:e5:75:d0:4c:48:04:67:5e:73:eb:cd:8b:bb:78:3a:0e:
0e:f0:d3:61:11:23:8d:ac:94:7b:a1:87:f8:07:95:44:4c:42:
18:08:15:db:fc:eb:f5:5a:68:c1:31:22:26:e7:2f:3f:67:ea:
ef:50:42:9c:9f:97:5a:d6:2d:dd:dc:88:53:a9:e6:80:2b:97:
02:44:e1:47:ef:4e:0c:88:c6:02:aa:d1:50:e0:93:39:53:a1:
b6:d4:65:6d:bc:9a:fc:f2:09:90:9d:66:78:e0:b9:54:65:4b:
d6:14:b5:e2:8b:16:5f:b7:fa:df:fd:ac:4d:97:c4:a4:b1:3b:
e8:6b:94:0e:97:b5:e0:b8:b8:a4:f9:80:fa:1f:bb:10:0d:35:
e6:d6:a8:46:db:f6:99:3b:82:c2:02:9e:ef:e1:54:3d:cf:be:
76:ed:d3:47:d6:33:7c:28:59:af:8a:66:63:eb:98:c2:e8:82:
d2:5b:77:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:50:41 2025 by rpki-client