Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: Sap3x6+udsBf1kLELh2qsfS/NZNchY/zTSQ9ClhKaT8=
Subject key identifier: 6B:C3:C4:AF:EE:09:61:3D:7C:4B:96:29:0E:C3:2B:63:CE:26:C8:61
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 0196C4CC06B86F772CC6C35CBE2162C27395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 1538
Signing time: Mon 12 May 2025 14:00:27 +0000
Manifest this update: Mon 12 May 2025 14:00:27 +0000
Manifest next update: Tue 13 May 2025 14:00:27 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: VN6nFZeFsZMv4JUJ7BUMr1+Sj0f2InFFL73mONYA80k=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:cc:06:b8:6f:77:2c:c6:c3:5c:be:21:62:c2:73:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: May 12 14:00:27 2025 GMT
Not After : May 13 14:00:27 2025 GMT
Subject: CN=6bc3c4afee09613d7c4b96290ec32b63ce26c861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:d0:f9:67:c0:78:67:82:1d:80:f9:fd:00:
41:62:9c:c4:e7:97:36:52:85:99:7e:42:2d:d4:9e:
f0:f2:4a:48:09:44:47:bc:86:11:42:36:39:a1:2c:
00:86:b8:71:c4:11:b5:e5:e6:33:26:b1:72:c6:58:
62:ee:6e:37:a5:77:30:57:1b:dd:53:a3:e5:94:a0:
4f:d8:06:6b:ae:2d:0c:26:53:80:da:ca:49:c2:f3:
02:45:9a:1a:c5:a4:6f:45:dc:ce:71:92:cc:5a:59:
d9:fa:77:7b:c5:72:ea:34:a6:79:82:db:da:17:bc:
59:2f:73:b2:d4:c3:93:65:4f:2d:8d:35:13:d3:bc:
94:6f:d2:93:7d:f2:ff:c4:fa:c8:5d:00:6c:f6:30:
fb:b6:1d:80:70:1c:77:6f:f1:5f:bd:05:e1:79:29:
1b:21:f6:95:6c:3c:f2:a3:b9:55:b2:e3:44:bf:5d:
3c:4f:a9:ca:68:50:e1:e2:64:91:92:06:28:59:b8:
78:6b:65:2e:64:a0:7b:24:85:61:81:fb:33:76:4d:
69:d6:39:9d:b0:8e:2f:68:c9:54:a5:30:50:dd:95:
e5:01:c4:3d:f6:ac:36:82:eb:da:e6:c3:a6:1e:0d:
00:d3:6e:6d:c2:98:10:55:00:98:43:aa:64:e4:7a:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C3:C4:AF:EE:09:61:3D:7C:4B:96:29:0E:C3:2B:63:CE:26:C8:61
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9b:ae:1f:8f:33:f7:9e:95:01:2a:88:04:9d:39:d6:fc:95:
b7:be:79:16:c1:58:09:fc:a1:c4:b8:57:b3:af:c5:35:ed:41:
24:2c:86:82:3a:b6:59:b4:d0:be:13:0b:6d:a7:24:57:7b:c3:
d1:46:8c:7c:08:8c:f2:ea:f5:01:2e:f5:ec:5c:5c:2d:11:07:
ac:92:ce:b4:ad:86:ac:50:8c:e4:de:5e:84:21:dc:50:11:81:
ef:21:5a:0f:cd:eb:c6:6e:f8:69:61:ad:6e:ff:b2:a1:f0:5e:
b6:fe:ca:fc:1d:33:c3:9b:57:1e:82:46:78:b9:6f:3e:c5:2a:
bf:2f:19:eb:38:94:66:4c:2a:ba:52:6a:b0:ed:08:4c:d9:a3:
49:af:1c:78:55:09:dd:e7:bc:d4:e9:8d:6a:7f:25:fa:23:1f:
3f:73:c6:9a:66:8d:08:f3:03:cc:7f:44:be:e6:ed:d3:79:f6:
c8:d2:39:37:a2:16:be:70:23:fc:4f:5a:65:df:58:fe:9b:96:
a6:4c:64:1f:f8:db:c4:a3:60:ed:36:b8:b4:71:5a:5b:ce:e8:
ef:57:63:b3:2b:6e:17:e7:20:f1:63:81:ab:9f:bb:00:70:3c:
b3:9e:b6:78:0d:f5:a2:ee:3c:90:54:95:cb:0b:d8:47:2e:27:
cd:ab:b6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:03:42 2025 by rpki-client