Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
File: KGURKILY5sctAiwsPaF7UsKtsHs.mft (raw, json)
Hash identifier: NJUoGv3wszUg3QFeV5l7+Tp9UXDxT8w1xSbbTuZuD1c=
Subject key identifier: 50:49:93:23:C1:BC:DD:05:DA:C8:94:7D:A0:DF:EA:C0:B6:10:3C:25
Authority key identifier: 28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
Certificate issuer: /CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Certificate serial: 01965CF1177E5AC5B829EDB1540C9BBA794B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
Manifest number: 07CF
Signing time: Tue 22 Apr 2025 10:00:26 +0000
Manifest this update: Tue 22 Apr 2025 10:00:26 +0000
Manifest next update: Wed 23 Apr 2025 10:00:26 +0000
Files and hashes: 1: KGURKILY5sctAiwsPaF7UsKtsHs.crl (hash: v1sRT82+PkPgClQ4l24mPQa9mU8KBAFXqCmNy6bV4s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5c:f1:17:7e:5a:c5:b8:29:ed:b1:54:0c:9b:ba:79:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2865112882d8e6c72d022c2c3da17b52c2adb07b
Validity
Not Before: Apr 22 10:00:26 2025 GMT
Not After : Apr 23 10:00:26 2025 GMT
Subject: CN=50499323c1bcdd05dac8947da0dfeac0b6103c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f7:ed:e6:0a:5d:93:69:47:31:38:bc:d5:8e:
28:46:bf:12:03:19:e4:a3:c3:73:dd:3f:66:e2:83:
46:69:e0:d6:3b:a7:8b:44:b7:1b:3c:b5:f5:d0:45:
0c:58:d4:aa:83:38:d9:26:06:10:d4:75:59:8d:cd:
86:02:ff:d9:48:38:3c:91:5d:f5:84:aa:fb:d4:cb:
63:67:03:a0:4b:61:29:cb:af:92:f8:e7:31:91:5d:
c6:64:4b:cc:52:64:4d:92:a8:c1:e6:a6:62:74:19:
aa:6a:65:32:a8:a6:76:74:21:ce:bf:51:82:a2:6a:
21:b4:51:8f:51:56:91:87:b8:ae:d3:26:71:25:ab:
1e:05:99:85:da:89:ce:ac:37:13:bd:94:8d:56:f6:
77:ee:27:fc:62:b3:05:42:af:61:a5:47:3a:24:bd:
ff:c5:70:e6:cb:1a:d6:d1:bf:0c:a6:9f:f0:eb:0c:
54:c4:64:2d:01:13:5b:f9:24:8f:57:c4:eb:46:3c:
84:8d:04:c7:fd:8b:d0:08:3c:28:f1:ca:67:5c:80:
39:1a:35:28:9b:be:13:8a:01:a0:e5:8b:64:ec:89:
e3:1b:4a:9d:df:54:58:1f:9d:a7:ec:b9:88:71:51:
38:73:1c:b4:31:5d:69:87:02:b1:38:54:36:4f:09:
2e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:49:93:23:C1:BC:DD:05:DA:C8:94:7D:A0:DF:EA:C0:B6:10:3C:25
X509v3 Authority Key Identifier:
keyid:28:65:11:28:82:D8:E6:C7:2D:02:2C:2C:3D:A1:7B:52:C2:AD:B0:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGURKILY5sctAiwsPaF7UsKtsHs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ad8d09-39e9-408f-a370-9bb3f57c0ef0/1/KGURKILY5sctAiwsPaF7UsKtsHs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:25:b1:d8:7c:dd:7d:82:ff:54:ce:3f:91:58:2e:63:0d:f5:
1a:48:b9:b6:26:2f:1a:8e:1e:b3:29:33:c1:c1:91:49:d9:1f:
0a:63:b4:85:29:1c:83:d9:37:67:6d:9c:92:f2:df:a0:a2:d2:
f1:c5:90:51:d4:70:d3:a1:c2:a3:be:ca:9f:c4:3a:63:9e:5d:
ca:8f:5d:c5:43:a7:a3:34:49:bd:d2:e3:ae:70:0b:21:a8:ea:
70:c9:d3:75:a4:23:09:0a:b9:b1:38:1d:6a:b8:18:ac:76:33:
a2:dd:4a:f5:17:69:3c:50:38:73:b1:e1:23:61:d9:db:32:cb:
4a:c8:7d:f3:da:01:66:9c:cd:c6:ef:33:b3:44:a5:40:f9:ee:
5c:6f:d6:31:d1:c4:19:8e:13:cd:1f:b8:e6:bf:11:36:d9:e9:
c3:d5:4d:5f:06:38:fc:a5:fa:58:ed:90:fa:37:5a:fd:65:24:
45:f3:8d:eb:7b:e1:93:5c:55:ed:82:d4:27:c2:58:18:ef:c4:
00:33:9a:4f:84:d6:d5:a8:45:dd:66:c0:cf:68:16:22:df:80:
ee:2b:90:1d:f6:dd:4c:d6:b2:bd:72:e5:d1:a0:73:75:f3:c5:
b4:cc:fb:c0:bd:70:f7:22:93:14:1c:b4:88:aa:cd:80:66:b6:
54:1d:dd:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:47:10 2025 by rpki-client