Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
File: KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft (raw, json)
Hash identifier: /kn2gGDpTRw3J1luqBpkk7LHZ7sc7p41pM3XjqAlbp8=
Subject key identifier: 67:5D:59:F4:A5:93:64:C6:B1:E6:96:07:AA:35:A7:38:6F:CF:C2:FB
Authority key identifier: 29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
Certificate issuer: /CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Certificate serial: 0196B935B09325A60892F165AE59DD609A27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
Manifest number: 1532
Signing time: Sat 10 May 2025 08:00:25 +0000
Manifest this update: Sat 10 May 2025 08:00:25 +0000
Manifest next update: Sun 11 May 2025 08:00:25 +0000
Files and hashes: 1: KRxKu_3sSaUePuuh1zhKvtRict0.roa (hash: +EX1LptbVJc4+7RpbLy829R4rw7CqCxrczXwQWpCdMc=)
2: KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl (hash: Ft3DNy9NN+rBYCOiNzT1mp41rFo49oxEGgkB5zJwqBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:35:b0:93:25:a6:08:92:f1:65:ae:59:dd:60:9a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29921518c5da1b84c5971a79bc74e8ac0770fd49
Validity
Not Before: May 10 08:00:25 2025 GMT
Not After : May 11 08:00:25 2025 GMT
Subject: CN=675d59f4a59364c6b1e69607aa35a7386fcfc2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ff:33:59:9d:5f:2e:48:1d:52:43:41:6f:57:
27:eb:f6:7b:21:e2:8e:b4:56:35:3e:04:17:a0:3b:
d8:af:e0:01:1e:2c:bf:4c:13:70:e1:9e:e4:cc:aa:
4c:ba:74:a9:3b:c0:9b:15:d2:4b:53:89:da:b4:f5:
b0:f7:6d:c6:db:e6:44:b4:6b:58:94:51:31:2f:3f:
40:a6:4e:d8:4e:e1:98:b6:02:9a:9d:21:16:a1:ae:
9e:94:06:3c:00:02:10:e2:81:cf:74:a3:e8:a4:92:
60:b9:95:04:6d:b7:17:89:25:fb:90:e1:f5:bc:a4:
01:78:6b:9b:cb:60:66:12:f0:b2:f3:d9:76:55:66:
d8:35:e9:d0:9c:8b:67:bf:9e:b2:3d:79:a3:10:48:
5d:e5:74:2a:09:4a:02:43:68:17:b0:95:c9:e2:2f:
7e:22:96:50:69:02:d1:0f:57:07:54:32:23:10:aa:
6c:be:5d:93:a6:94:6c:33:df:8c:a2:56:a1:77:32:
e9:7b:da:10:c9:5e:4d:66:58:eb:5b:1b:fd:f7:11:
6d:0d:a0:7a:08:21:8c:7f:7b:15:36:7b:9e:02:5d:
3c:27:9a:e5:25:85:6d:fd:44:21:2b:a6:8d:df:78:
40:b5:1b:ef:24:3f:88:a7:bd:6a:13:39:fd:f0:d3:
cd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5D:59:F4:A5:93:64:C6:B1:E6:96:07:AA:35:A7:38:6F:CF:C2:FB
X509v3 Authority Key Identifier:
keyid:29:92:15:18:C5:DA:1B:84:C5:97:1A:79:BC:74:E8:AC:07:70:FD:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KZIVGMXaG4TFlxp5vHTorAdw_Uk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/715835-bc1d-4cb8-9618-4ef283ce7ff1/1/KZIVGMXaG4TFlxp5vHTorAdw_Uk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:38:fa:01:5c:ca:8a:05:93:06:ff:c0:54:bd:72:8c:4a:4e:
bc:09:2f:48:74:bd:f8:49:05:12:73:92:d8:38:2c:41:cb:20:
35:91:7f:cc:be:5a:32:25:1f:81:9a:bb:cb:48:42:62:ff:8a:
8c:f9:60:1b:1f:5e:0c:4d:18:53:35:15:7d:cb:ae:3a:5f:84:
5d:b2:64:56:aa:60:44:d5:e5:2a:f4:40:32:0c:1b:73:f6:95:
1c:cf:63:d8:ad:7a:9b:f0:f9:d2:fd:a3:14:e2:cd:12:0b:8a:
d9:7a:1a:f9:e9:9a:93:c4:31:52:99:eb:5a:cf:a0:9b:7c:7c:
1a:d3:96:40:fb:ea:b0:3b:48:9e:be:5e:97:39:f5:51:a6:24:
eb:4d:07:d2:09:5a:9b:80:6a:bd:f7:75:b9:05:77:6d:b0:c9:
ab:f0:b0:64:3c:17:51:be:0e:77:97:f9:73:30:e5:ee:ee:2e:
16:86:e3:65:a4:a0:2e:80:a9:ec:57:fb:bf:f4:26:35:e5:5e:
14:5f:c3:f9:fc:4c:e9:f9:32:e1:38:0a:96:c6:33:28:9f:3f:
71:5c:76:73:0c:2e:58:bf:9e:ff:67:d6:bd:c9:86:a3:3f:13:
98:b8:60:b7:9f:b8:ea:3d:e6:62:1f:7d:5f:1b:1a:d6:4f:fe:
15:2d:6e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 14:51:20 2025 by rpki-client