Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft (raw, json)
Hash identifier: tRVelp6XhbtGikaOqTlqcecZ8hoD/Z6mYcI+9r0sB/I=
Subject key identifier: 58:3C:41:D9:3F:7D:C4:28:08:17:32:D0:EA:67:68:19:B6:5D:B6:15
Authority key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Certificate issuer: /CN=2875f185823dbc6a82d105b3ca16077db5729377
Certificate serial: 01969F765D61E5FF5A5BA5675853EA5F255E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 08:00:56 +0000
Manifest this update: Mon 05 May 2025 08:00:56 +0000
Manifest next update: Tue 06 May 2025 08:00:56 +0000
Files and hashes: 1: DUHPPbMiJZ5g5-MVvzd1BoFThPs.roa (hash: jYJfj32NL3hL8Amv7vFPn8VdtIOctCQTglUuBNZ6asM=)
2: KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl (hash: XPWDV+69in6ZsFnLTvOEkw86wX8ZEW2AdVCfys6WUhA=)
3: v7cahpSyhHNf-9u3vX0WVgp6xg4.roa (hash: An2ilVmevKfJ9Krr3t4y0gOa1n+BDhvcN3VZHuTlMls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:76:5d:61:e5:ff:5a:5b:a5:67:58:53:ea:5f:25:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2875f185823dbc6a82d105b3ca16077db5729377
Validity
Not Before: May 5 08:00:56 2025 GMT
Not After : May 6 08:00:56 2025 GMT
Subject: CN=583c41d93f7dc428081732d0ea676819b65db615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:6e:2e:c4:30:6c:54:f1:13:df:8d:e9:49:
f2:71:02:1e:c9:fa:e2:e9:3f:f3:74:65:c9:85:67:
34:86:7f:32:27:3e:e9:6d:eb:2d:57:9d:95:fd:13:
f8:f2:b7:04:40:b8:a0:8b:ed:c7:82:6b:39:eb:98:
5c:58:42:af:ef:5b:b7:28:f5:72:4a:f7:a8:98:d9:
55:57:21:5d:ed:6b:c4:a7:47:bb:60:1b:df:21:50:
1b:13:61:33:25:bb:70:74:a2:4a:c7:ac:5c:46:e2:
06:66:9c:35:cb:ba:67:2c:3a:70:cc:b1:de:56:2b:
e9:54:72:2a:6c:45:b6:16:ce:79:67:85:51:db:27:
a3:b3:b6:6e:39:12:6a:82:c6:32:6f:6a:3d:18:a7:
24:82:01:41:6b:b2:70:66:1b:4c:6f:a8:4e:f0:27:
d0:c1:6e:44:45:f2:14:d0:af:61:b7:cc:3c:a1:f8:
8b:73:c8:1e:90:d2:3e:a8:a7:5e:84:72:79:8f:85:
ff:cc:14:f4:a8:86:9c:38:80:b9:de:16:2e:b3:81:
e5:92:89:46:48:9b:f3:9e:17:99:1e:c2:cf:66:7b:
c5:8f:ae:ef:d2:68:28:e4:20:9c:22:b8:05:52:e8:
ce:8c:a4:6f:00:be:03:f8:90:71:34:35:db:b1:a7:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:3C:41:D9:3F:7D:C4:28:08:17:32:D0:EA:67:68:19:B6:5D:B6:15
X509v3 Authority Key Identifier:
keyid:28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:bd:fd:cb:7b:a2:b5:83:93:83:7d:a4:2c:92:0e:41:d9:
67:e7:7f:66:6e:5b:b9:1f:2f:98:2e:b5:e7:b2:68:3d:f6:23:
43:34:77:68:c2:ba:ec:54:1a:1c:77:5f:4a:01:ce:b9:d3:59:
67:c8:bc:44:2a:38:74:e1:f7:7d:cb:92:31:27:3d:17:22:e8:
3e:68:e1:6d:a9:61:f3:20:24:7b:49:71:6f:a8:92:30:80:05:
0e:2e:09:ef:b0:d1:db:71:c5:a6:73:90:0b:e5:eb:b0:b0:ca:
92:b8:ec:14:4e:72:9c:04:8d:1b:51:7d:e0:2c:1e:1f:4a:41:
c9:c0:17:25:c6:35:ad:3b:1c:18:28:8c:2a:4b:37:a9:bd:f2:
23:91:a5:73:30:9c:d3:dc:64:ad:77:ba:21:11:ff:6c:e5:1f:
e7:eb:82:5f:8c:cd:40:1f:fc:33:f6:96:03:a4:b8:b1:73:9b:
eb:ca:77:4f:bc:ad:36:40:49:a4:9f:f6:ae:6c:f0:81:21:fe:
56:1a:34:4a:63:fc:92:8a:9e:46:af:ac:d8:8b:bc:0d:ef:bf:
03:a8:42:12:61:2a:fa:5d:11:02:0a:e1:75:c7:c2:73:5c:1c:
0b:99:35:8e:d4:33:11:ee:35:0d:de:12:4b:3c:8d:13:8b:1b:
ce:0f:17:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 16:41:41 2025 by rpki-client