Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
File: KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft (raw, json)
Hash identifier: 4pgPdF4ne44GCBSJZ3D0p1tqGCipi/RyUWFHfiC2VNU=
Subject key identifier: DA:E7:CA:DA:A4:CA:1C:E2:8F:7A:84:CA:7E:CB:F5:D8:4F:4A:E9:BC
Authority key identifier: 28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
Certificate issuer: /CN=2860f15d278379483aaa0613cbf592e72cc81e48
Certificate serial: 01965BA795521725192F7E8CCFD01312F53F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
Manifest number: 081E
Signing time: Tue 22 Apr 2025 04:00:31 +0000
Manifest this update: Tue 22 Apr 2025 04:00:31 +0000
Manifest next update: Wed 23 Apr 2025 04:00:31 +0000
Files and hashes: 1: KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl (hash: +2G873qnBf8QZTdoFikr2Ytc1tAz3yFDcR9e6QeYdec=)
2: vDGDX2wIiExO6AcsphzPX7w0rD8.roa (hash: 6H+fcKSw03UJYZabhwRmpHlYumXXGe9flqc+/pdyWXc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:a7:95:52:17:25:19:2f:7e:8c:cf:d0:13:12:f5:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2860f15d278379483aaa0613cbf592e72cc81e48
Validity
Not Before: Apr 22 04:00:31 2025 GMT
Not After : Apr 23 04:00:31 2025 GMT
Subject: CN=dae7cadaa4ca1ce28f7a84ca7ecbf5d84f4ae9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0e:e9:94:03:d8:9b:31:5d:1b:34:3d:7c:ec:
6a:36:46:2f:ae:8b:89:65:59:94:26:5f:cb:05:ce:
9c:07:7d:dd:fc:e2:36:72:5d:73:41:07:0d:0e:cc:
50:34:bc:ca:04:8d:d6:6c:f5:0b:bf:50:c9:ca:b9:
fc:93:9c:a1:d2:fb:7b:2e:ca:e9:2b:8d:52:04:b7:
dd:d2:3a:9b:3e:f2:13:5f:01:32:6d:f6:55:99:17:
f7:57:40:4d:a9:71:f3:1c:99:a4:fd:16:9e:2a:12:
67:24:76:73:df:64:17:5a:d5:6d:0e:d0:60:c4:3f:
1a:80:cd:5c:df:96:69:5a:a1:5d:b2:24:1d:57:59:
2d:37:6a:ef:a5:33:b5:be:19:2a:c5:e4:22:d7:12:
71:dd:b3:c1:a8:46:17:2f:f2:ae:fc:07:f1:29:d5:
e7:51:2f:06:ab:05:91:64:fa:14:96:7d:14:fd:6f:
7b:3f:bb:e9:19:58:b7:7a:49:8e:37:a2:bf:cb:93:
de:44:53:35:ec:d2:41:b4:48:63:03:5e:f2:ae:08:
80:13:7a:78:d7:5f:56:12:4e:24:33:18:9e:01:d9:
03:f5:31:07:21:91:c1:73:33:d4:aa:ff:9a:95:b8:
9c:b5:01:4d:0d:3e:05:d0:d8:78:17:f4:4e:54:3c:
83:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:CA:DA:A4:CA:1C:E2:8F:7A:84:CA:7E:CB:F5:D8:4F:4A:E9:BC
X509v3 Authority Key Identifier:
keyid:28:60:F1:5D:27:83:79:48:3A:AA:06:13:CB:F5:92:E7:2C:C8:1E:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGDxXSeDeUg6qgYTy_WS5yzIHkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1d1b72-8bcf-4500-9125-321c14dd4639/1/KGDxXSeDeUg6qgYTy_WS5yzIHkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:89:df:b5:b6:07:d6:35:21:a5:68:ff:34:f6:e7:82:61:e3:
7b:1c:c7:7c:57:6a:72:62:c3:6d:e8:3a:99:de:f9:67:b5:61:
2b:36:a9:63:13:ac:0f:38:5e:22:99:ce:2b:5a:05:68:da:37:
f8:fb:69:a8:78:2c:2f:c8:18:e4:f2:69:e8:09:e6:2c:d9:5c:
79:3e:92:c5:52:69:a6:c0:c7:50:5e:2d:c4:ed:5e:2a:a3:94:
03:94:0c:59:02:a4:1b:4c:3c:30:22:9b:0e:b4:20:e0:15:57:
13:54:13:e0:6f:62:c7:35:2e:fe:ed:c2:5a:35:00:99:b4:5a:
d8:53:67:6c:4f:31:b8:44:3c:6c:df:d9:1b:88:ae:bf:81:23:
1c:d6:78:1b:d7:88:83:2f:91:7a:6c:6f:d0:04:03:75:ee:8e:
02:d4:b0:8d:0c:8e:22:16:81:79:30:90:a5:df:f9:41:03:21:
6f:34:16:b4:41:35:48:ea:79:14:05:b4:b4:81:38:75:31:1e:
23:17:36:b4:65:27:5d:97:ae:83:d7:03:58:66:b5:83:4c:63:
f4:5f:fd:2e:5b:09:5f:36:9a:d9:89:51:ae:e7:a6:51:7c:33:
97:2a:cf:de:2c:9a:9c:79:ee:c7:22:94:a0:88:f2:a0:b4:c5:
77:79:89:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:37:49 2025 by rpki-client