Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: 6eg23bELN6POXqIU5lV8YdKwgrcUmjEtT8rQ5nDelTU=
Subject key identifier: 8D:88:3F:EE:76:EE:7D:D3:BB:86:60:84:CC:24:E4:24:1F:DF:61:DE
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 01965B7135A6B279336F52277935800FC9F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1507
Signing time: Tue 22 Apr 2025 03:01:08 +0000
Manifest this update: Tue 22 Apr 2025 03:01:08 +0000
Manifest next update: Wed 23 Apr 2025 03:01:08 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: WgcBHtJTmmn9EGX0q6n5vU4jpxhcRlto2SaXRiED/a0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:71:35:a6:b2:79:33:6f:52:27:79:35:80:0f:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Apr 22 03:01:08 2025 GMT
Not After : Apr 23 03:01:08 2025 GMT
Subject: CN=8d883fee76ee7dd3bb866084cc24e4241fdf61de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:d2:18:60:61:39:c3:95:9e:3b:c4:b0:5a:
45:42:57:64:a6:24:e5:9c:ff:06:1b:4d:49:d9:95:
9f:41:da:a2:34:13:a5:c5:31:78:38:08:da:5c:80:
c2:a5:ec:ea:70:21:f7:34:82:d3:c5:76:57:3d:89:
e6:57:78:15:6c:b6:71:fd:18:08:2a:e9:b4:8a:8f:
f0:21:d7:a2:ed:71:80:ea:c6:39:2b:4c:8e:24:1a:
36:22:a6:96:70:3d:43:a0:08:08:77:99:87:c2:20:
07:f7:67:61:0c:bb:ea:d9:97:2a:18:a5:5f:34:12:
ae:dd:fc:45:ac:41:e6:bf:97:fa:23:a0:cb:f6:13:
94:9e:77:ed:26:54:65:5f:37:22:0f:ca:0f:a3:33:
0b:97:16:ba:ae:4e:31:be:d5:a5:23:0a:17:bc:23:
04:d1:71:94:03:38:6e:a7:2f:0e:f9:eb:74:07:e4:
c2:fb:08:4c:c3:54:6b:e4:b5:ef:85:1d:d9:e8:5f:
e3:31:b7:86:66:98:f5:ad:02:60:22:29:c6:48:d5:
ff:53:6f:18:83:a2:33:d8:2b:01:b9:da:8a:41:03:
0c:bf:aa:4f:61:b3:6b:b6:e7:61:0c:1c:87:b2:c0:
4b:5e:cb:5e:09:3f:b8:48:36:1f:4a:54:e1:f7:7d:
e8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:88:3F:EE:76:EE:7D:D3:BB:86:60:84:CC:24:E4:24:1F:DF:61:DE
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:fc:7d:68:cf:29:dc:8f:13:28:32:18:5b:55:d6:33:37:a7:
61:75:b8:c7:e3:6b:b8:9b:fe:00:c7:30:43:ab:56:9c:95:e1:
7a:19:ea:05:55:ca:c2:12:ec:e9:e8:8b:89:45:1a:4b:31:42:
4f:51:8b:83:20:73:6e:59:9f:1b:ae:75:54:73:a8:f7:2a:c0:
31:5e:b4:1c:f5:51:17:bd:5f:2b:9d:ab:27:9d:a9:a8:35:05:
fa:de:0c:f6:28:a7:58:87:4d:6f:ab:bc:60:df:06:b7:14:1a:
cd:a5:84:ab:ac:2b:a6:47:43:41:40:14:b0:ab:a8:d7:74:fc:
6b:39:0f:21:9e:c5:9f:b6:54:59:51:3b:c3:0c:3c:33:78:e2:
da:88:6d:6f:c2:61:5c:e2:93:e5:78:15:17:cb:cc:ba:0f:a5:
8e:99:c4:91:21:26:60:23:40:89:a5:ff:e7:16:a0:1a:2c:38:
5a:11:17:69:e6:ff:93:bc:a5:09:28:64:96:bf:26:93:89:a2:
03:13:66:d6:ae:85:55:87:8a:fd:42:b5:e4:b1:61:8b:68:3f:
3c:4a:5f:68:2b:3a:bd:bc:5a:23:e9:b4:20:40:dd:b5:41:f7:
63:bb:07:63:e7:b8:12:15:a6:6a:4e:ab:b5:32:19:24:37:da:
8f:cc:a0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 05:04:00 2025 by rpki-client