Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier: lXAvNZg+oDJm8A9NWkUpmMsXeBGVoEff465m62Vsdh8=
Subject key identifier: 0D:4E:C1:6B:99:C8:53:A4:2B:8B:12:BF:C1:B3:78:AC:4F:F2:61:59
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial: 0196AFFCA50FBD5529E16A50D5D34EA29B62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number: 07FA
Signing time: Thu 08 May 2025 13:01:31 +0000
Manifest this update: Thu 08 May 2025 13:01:31 +0000
Manifest next update: Fri 09 May 2025 13:01:31 +0000
Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: nVpwURCD0jIOe5udjya5FMrjk+SwAz+ffK+i5X/Bmp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:a5:0f:bd:55:29:e1:6a:50:d5:d3:4e:a2:9b:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Validity
Not Before: May 8 13:01:31 2025 GMT
Not After : May 9 13:01:31 2025 GMT
Subject: CN=0d4ec16b99c853a42b8b12bfc1b378ac4ff26159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:81:5e:b4:4f:17:28:a1:6a:54:1a:31:6f:a2:
d1:b0:c7:05:2b:24:d1:17:b5:b5:62:bf:63:49:9a:
3c:09:39:c0:64:9a:c0:6c:ee:0e:08:05:a7:f2:6e:
cf:ab:55:72:b2:fa:6c:df:c9:da:a9:60:ca:60:8c:
31:c0:c1:07:df:35:bb:98:3d:4a:a3:90:45:2d:f9:
c6:a4:72:f9:36:88:04:32:b2:10:65:8d:7d:08:cc:
07:5a:80:bc:2e:25:d8:14:e8:10:9b:98:82:78:bc:
11:4f:12:3f:bd:8f:86:49:fe:df:8b:a4:e3:83:4f:
c2:5d:b2:f4:36:df:b5:7c:0b:33:4a:4f:a6:4d:41:
02:62:97:2f:79:44:d6:c9:ce:04:b9:f3:eb:4b:c3:
8f:66:50:4d:02:45:38:cf:7c:e6:c6:80:5e:f4:ff:
e1:9a:ef:88:e6:e9:83:dd:be:83:04:49:1d:77:5e:
0f:99:0d:15:fb:2d:00:ba:0d:ba:c8:08:49:38:d5:
18:9c:40:4d:64:63:c0:2a:18:5d:9d:14:72:41:f7:
10:31:90:c5:c0:a1:6f:b1:19:7a:5a:33:14:6f:45:
64:f8:20:f4:75:b5:02:87:3b:06:b4:b2:b3:71:65:
a0:56:9c:89:08:b1:c3:2c:5a:1a:cb:74:3c:b3:ef:
59:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:4E:C1:6B:99:C8:53:A4:2B:8B:12:BF:C1:B3:78:AC:4F:F2:61:59
X509v3 Authority Key Identifier:
keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:91:76:94:5f:af:40:24:03:c2:f9:65:b8:21:64:97:83:62:
59:a9:92:68:17:1d:05:a1:f8:23:8b:29:d0:eb:f1:75:c4:c7:
ea:8d:05:49:05:93:ea:a9:9a:bf:e0:15:16:66:e4:f4:7f:90:
4f:72:7a:bd:ae:f1:d7:7b:12:22:91:f7:ee:8d:c8:2f:49:3f:
03:34:c1:1d:bc:9e:df:d3:d0:b3:60:19:92:b3:2d:90:0f:13:
98:aa:80:eb:fd:79:81:4d:a1:16:16:df:2c:5f:03:90:35:df:
1d:b5:d2:8d:fb:e8:9f:32:ad:6d:82:a4:0a:99:50:84:ed:71:
e1:80:40:a3:66:e5:58:75:4c:90:1d:0a:c4:63:6e:ae:fd:d4:
f2:d2:22:3b:8a:f6:99:0a:fc:58:66:8b:79:82:01:7d:42:95:
9d:af:63:b8:c6:2c:3c:f5:05:31:c2:22:d6:2a:51:c1:52:a5:
39:71:56:fe:fe:3d:e3:1f:2c:4e:35:34:6b:4e:11:bf:73:dc:
ef:50:d5:2f:7d:a9:50:d6:ac:e5:d2:1b:1e:cf:98:19:3a:64:
ef:46:61:cc:f5:c5:21:aa:a0:32:40:76:e4:af:2a:e7:cc:12:
5d:4d:a8:0c:f1:2b:ae:90:d0:f9:a6:37:ec:52:72:1b:aa:37:
0c:06:1b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:24:13 2025 by rpki-client