Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
File: KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft (raw, json)
Hash identifier: gPqnCIOR1ZQlSFKpCc2T8RgEGjCdnYcHKOXfyDVZsAM=
Subject key identifier: 80:5C:5E:AE:D2:A4:3E:5E:D4:0C:8D:F3:25:38:6E:A6:D2:90:94:D8
Authority key identifier: 28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
Certificate issuer: /CN=28693b0056de87d84baccdd805d0365fac60f67c
Certificate serial: 0196A578569622CD21BB188AEE343DCD9A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
Manifest number: 0168
Signing time: Tue 06 May 2025 12:00:49 +0000
Manifest this update: Tue 06 May 2025 12:00:49 +0000
Manifest next update: Wed 07 May 2025 12:00:49 +0000
Files and hashes: 1: KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl (hash: YhhMH8KAhnAWg7sc0KFXB51JnFZByotvmPviRSFWXIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 12:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a5:78:56:96:22:cd:21:bb:18:8a:ee:34:3d:cd:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28693b0056de87d84baccdd805d0365fac60f67c
Validity
Not Before: May 6 12:00:49 2025 GMT
Not After : May 7 12:00:49 2025 GMT
Subject: CN=805c5eaed2a43e5ed40c8df325386ea6d29094d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3d:93:f8:8a:f9:bc:84:e3:a9:d8:a1:c2:75:
31:9a:d0:9d:8e:50:c1:15:f7:4c:16:67:a0:11:4a:
ed:a3:6f:31:ec:99:f6:60:e0:f5:48:6e:7f:cf:37:
4e:1a:f9:c1:bb:74:c7:4d:6a:c9:55:c0:73:58:13:
a1:32:6a:8d:2c:58:55:dc:2b:b2:f7:fb:ec:15:04:
c4:12:97:a8:b0:2b:6b:58:64:18:e4:01:d3:bd:62:
45:3a:a0:39:8a:af:b3:f5:e9:7d:cd:54:57:dd:7a:
60:00:a1:8c:2f:d9:92:ae:73:65:4f:4f:34:cb:77:
38:16:c4:da:73:f3:d5:50:9b:bd:53:f5:48:29:69:
d2:3b:97:6e:8e:c2:c1:1f:fb:99:05:7e:90:dc:cb:
64:7c:7b:1e:7f:c9:f7:c2:99:75:5a:f5:18:a5:8c:
e9:1a:f1:63:a8:ec:2f:ad:15:73:d9:6d:78:20:75:
ff:c2:0a:23:7b:f6:b8:a2:97:2c:17:10:3b:1d:09:
00:5c:f2:6a:a6:ff:f3:76:eb:ee:78:47:9c:e6:23:
cc:7d:bf:e8:07:9f:17:47:47:10:d7:b1:80:23:91:
b5:a2:8c:cb:7c:4d:b1:32:e0:ee:37:33:07:70:16:
93:c2:5b:8c:c9:2f:77:87:01:1c:80:3c:b3:9f:d5:
12:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:5C:5E:AE:D2:A4:3E:5E:D4:0C:8D:F3:25:38:6E:A6:D2:90:94:D8
X509v3 Authority Key Identifier:
keyid:28:69:3B:00:56:DE:87:D8:4B:AC:CD:D8:05:D0:36:5F:AC:60:F6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGk7AFbeh9hLrM3YBdA2X6xg9nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/981f2a-74c0-40b7-8c37-1507b853dfc9/1/KGk7AFbeh9hLrM3YBdA2X6xg9nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a0:fe:ca:c8:0e:85:d8:71:52:6a:32:98:93:5e:54:88:97:
79:ab:c9:fb:12:d0:d1:e9:4e:05:52:62:8a:1b:04:80:f9:c0:
47:11:cc:c8:70:27:13:44:e6:d9:98:1e:ce:15:77:d7:5f:32:
b3:26:e0:c7:c2:65:25:83:2b:01:14:26:4f:49:bd:48:33:3c:
d5:dd:d7:cb:f8:34:c7:98:8d:28:ce:e0:4d:2d:6e:78:24:6f:
fb:b4:32:64:77:87:1f:05:57:a0:fa:ec:07:91:a9:1b:00:3c:
ef:73:c9:42:c1:52:a4:36:8e:80:30:2f:0e:2f:49:58:cf:06:
82:0e:ef:8b:92:8c:3d:ea:a6:9f:7a:d0:b7:8b:98:e2:e1:89:
c8:0f:4e:49:07:ca:48:5c:e9:3e:27:ee:d7:3b:34:dc:95:fb:
0e:92:e2:db:d4:8c:b7:5f:cf:9e:1b:9f:e1:ff:b7:05:f3:15:
96:39:11:0e:7f:c5:45:cb:44:5d:91:f2:a0:f5:a4:0f:97:26:
73:ca:5e:ee:d6:97:15:84:43:89:bb:92:e0:d0:d1:fb:00:4a:
05:ae:1d:1b:7e:2e:ef:35:06:b6:07:73:08:52:5d:e4:57:f5:
f8:f4:2c:5e:5d:69:ff:3a:b1:37:cf:22:a3:8a:fa:64:07:24:
17:8f:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 15:51:00 2025 by rpki-client