Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: MqOUrZuoqqwq5oQJvcVVmKUm7Su3U1Wgb9BpUNF049I=
Subject key identifier: 87:BC:AD:FA:C8:32:70:C3:C1:B8:9A:0F:C0:E2:09:21:96:F7:31:0E
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 0196CD611D922E34C0EC03F5679CC52E50A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1542
Signing time: Wed 14 May 2025 06:00:15 +0000
Manifest this update: Wed 14 May 2025 06:00:15 +0000
Manifest next update: Thu 15 May 2025 06:00:15 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: 8Uj+UnRopiNP+NdSH2MJEW01lzKosLDhW33vQoY62wI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cd:61:1d:92:2e:34:c0:ec:03:f5:67:9c:c5:2e:50:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: May 14 06:00:15 2025 GMT
Not After : May 15 06:00:15 2025 GMT
Subject: CN=87bcadfac83270c3c1b89a0fc0e2092196f7310e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:40:12:27:51:70:ea:20:68:a8:c7:ed:70:
e4:c1:b6:2b:0a:47:65:86:0a:ac:7f:9a:bd:46:41:
7a:40:c8:a2:a2:24:ec:5c:53:6c:82:d5:df:c7:73:
9d:18:cd:24:6a:75:53:3b:fe:43:aa:77:8d:b2:00:
7b:b9:fe:cc:fc:56:f0:e6:d9:a3:da:f0:cc:a7:6c:
46:c6:11:76:78:3a:bf:6d:eb:4b:2b:2e:57:89:36:
ba:6c:5a:69:91:86:e0:3f:62:47:cb:2e:5a:19:b7:
11:ee:bf:28:c9:09:46:7d:2f:fe:d2:39:47:ca:3b:
7d:89:05:54:58:ea:a1:4f:cf:89:36:5b:f7:6f:09:
b8:b3:db:64:91:a3:d2:08:e6:61:f8:f2:7b:e4:00:
82:4c:72:8b:23:e4:36:e5:77:b9:0e:48:eb:76:63:
99:6e:98:6a:16:73:d2:a2:35:7d:78:be:6c:44:f0:
f6:d7:9e:2b:c9:94:41:05:70:bc:43:8c:1d:78:bd:
f0:22:d6:eb:81:f9:1f:6b:4f:f7:66:5c:db:7f:fb:
5c:a3:82:7f:5f:c9:24:f2:88:b1:33:27:8d:ed:a8:
e4:bd:80:de:e2:e0:24:3e:dc:be:39:95:fb:49:13:
49:5e:51:86:45:c1:2b:17:b5:29:91:f6:bf:6b:4d:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:BC:AD:FA:C8:32:70:C3:C1:B8:9A:0F:C0:E2:09:21:96:F7:31:0E
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:42:02:72:4a:87:06:93:3d:1f:01:70:ab:0a:9d:b9:b2:48:
31:56:d3:b7:35:91:4d:c6:69:98:7a:e6:a4:90:9a:8d:11:68:
90:0c:fc:c7:cd:f6:8f:15:ac:02:bd:0b:4d:6d:e7:25:58:c4:
66:4f:ca:31:c0:83:75:7e:38:97:71:46:08:c2:d4:89:14:5d:
46:56:ad:a8:62:68:c1:8d:e0:3f:53:6c:41:b0:0e:f1:7f:3f:
03:33:ae:c5:a5:36:ee:2f:f4:6e:be:f3:36:55:ab:4a:21:8e:
11:e8:06:3f:9b:6d:bc:2a:51:3a:7c:58:68:4b:45:06:95:d7:
89:6d:4a:f0:9e:7f:36:5d:d4:8d:bc:11:22:10:74:ea:75:0c:
27:28:a5:6c:b3:26:63:d2:b2:eb:c7:2e:34:a6:8c:b5:c0:27:
ab:46:dc:09:66:a8:64:a2:2f:04:a3:b0:1d:2d:27:e9:f5:ee:
0a:5c:fc:a0:ba:62:b8:e1:7a:02:b9:54:a4:a8:fd:e5:43:fd:
a2:37:c5:df:bc:51:dd:e5:bf:b0:ac:e9:b3:cc:9b:f7:fa:39:
b2:33:8e:98:75:a5:c8:ec:d9:15:98:6f:33:19:b2:04:02:26:
5a:ca:d1:4e:fa:eb:33:1a:28:21:d9:35:75:23:40:3a:4a:9e:
ad:a7:0e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 12:29:20 2025 by rpki-client