Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: UKdO8mT5mjNtOLigsO/7zYpnQIUSNvrvW1BshIEnfyc=
Subject key identifier: 59:57:CE:D8:77:A0:95:DA:E2:64:2F:C2:9F:77:45:80:57:01:62:0E
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 0196C2DD8A45397F3A37E0F003CA843D9B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0AAA
Signing time: Mon 12 May 2025 05:00:20 +0000
Manifest this update: Mon 12 May 2025 05:00:20 +0000
Manifest next update: Tue 13 May 2025 05:00:20 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: m/LF0IG8T8bS1v3owjmoqsWUFtpiukXoJGSI3dCS5MM=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:dd:8a:45:39:7f:3a:37:e0:f0:03:ca:84:3d:9b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: May 12 05:00:20 2025 GMT
Not After : May 13 05:00:20 2025 GMT
Subject: CN=5957ced877a095dae2642fc29f7745805701620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ad:f1:54:01:76:be:32:c3:53:6a:2c:65:c9:
64:79:a0:2b:33:a7:4d:ba:cf:f1:cd:ac:38:4b:66:
c7:6f:e8:b6:39:d4:92:c2:43:9b:c2:5a:47:64:94:
34:ba:f5:de:07:3f:f8:61:69:88:0a:02:f3:6b:30:
7c:7f:55:68:47:88:a8:18:1a:8d:43:7a:3a:b9:98:
50:05:6c:c1:db:95:24:52:57:80:6c:d9:86:20:52:
49:e9:e9:24:ee:79:78:b0:ee:80:d5:e9:84:cf:4c:
a5:f3:b8:7a:51:93:7e:c1:cc:12:48:8c:f9:64:3d:
bb:17:62:63:1a:4f:50:a1:41:88:ff:17:33:6c:c8:
39:a4:e0:89:a9:9f:49:79:de:76:c7:cc:33:26:3d:
d2:53:40:c9:92:2a:e5:60:d8:5d:15:4b:1e:a2:97:
1a:45:54:5f:30:78:19:ee:48:bd:8c:46:2f:4e:b9:
41:5e:ac:af:5f:f8:9a:21:3b:8d:8d:d8:6b:31:76:
ba:a8:0a:40:30:dd:6b:a1:94:3c:a1:38:d6:2d:6c:
ef:fd:fb:da:ad:03:e3:3b:f4:8a:f4:48:0a:77:5c:
ba:11:24:76:1c:05:26:f3:76:77:05:45:8a:fa:1c:
3d:67:cc:28:2e:fb:2b:ca:19:4f:7c:3f:d1:65:f2:
48:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:57:CE:D8:77:A0:95:DA:E2:64:2F:C2:9F:77:45:80:57:01:62:0E
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:61:b5:d1:19:d3:3c:01:bd:b4:70:21:c1:cc:82:32:82:3e:
1a:6a:11:6f:47:87:f1:83:07:a7:a5:d9:50:4b:00:ef:36:61:
6a:3e:be:52:c8:d8:49:04:3c:27:82:bf:46:b3:8e:9e:6f:dc:
9a:52:48:9c:aa:b1:21:be:2a:3d:8e:f8:3e:9c:a5:96:51:46:
ed:82:6d:74:e2:73:d2:1f:65:14:bb:40:9c:3b:1e:15:a4:89:
29:38:cd:5a:f3:09:89:5e:52:fd:e7:c4:78:a1:95:23:bd:ed:
d2:c8:31:3b:0a:96:7e:5d:a1:9a:e8:95:ac:ab:9b:3c:58:2a:
90:84:42:50:bd:fe:4b:0e:e7:01:ae:fd:4b:2a:9e:c6:28:23:
a5:7a:ea:cd:cf:8e:a7:e6:08:33:de:c3:cc:51:10:26:8e:65:
05:81:dc:ed:79:e8:81:a3:93:81:0a:92:27:14:97:d5:22:82:
ef:c3:ba:c0:7c:c1:99:72:3b:fe:d5:3c:0f:59:b7:0d:9f:68:
cb:6c:f0:68:4c:27:cd:d3:ac:d2:96:4d:d9:c6:82:67:b3:7b:
84:d7:13:e8:06:4a:f5:c8:1d:a5:05:e4:29:68:4d:3d:cc:f8:
5e:d5:3d:52:96:4f:6d:52:84:50:4d:0f:69:28:aa:a2:20:97:
ee:2d:f6:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:51:38 2025 by rpki-client