Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
File: KqGB-LCskT3cN34Z1WZLEbGXU3M.mft (raw, json)
Hash identifier: 5WFrfQfcs4m5WPbDWXAOFhmonogWd5lqStFO+wIyB1w=
Subject key identifier: 94:8D:A4:EF:63:DD:78:F4:55:C9:C1:70:3F:DB:9C:F1:35:46:C5:B8
Authority key identifier: 2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
Certificate issuer: /CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Certificate serial: 019658A6BFF655B32F4AFDC8214AFA1BDD25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
Manifest number: 0A73
Signing time: Mon 21 Apr 2025 14:00:45 +0000
Manifest this update: Mon 21 Apr 2025 14:00:45 +0000
Manifest next update: Tue 22 Apr 2025 14:00:45 +0000
Files and hashes: 1: KqGB-LCskT3cN34Z1WZLEbGXU3M.crl (hash: JSTzC0MWUAPmyMu4jGU5TlJCsupIlrJS5K32NNPb4iE=)
2: pYcNr9sVfFTE36N21zQEaYvpSC8.roa (hash: qgrqjfITSKMfgl03Ej2JSBSRB998DdmMRLl3Rj6JmrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 13:46:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:a6:bf:f6:55:b3:2f:4a:fd:c8:21:4a:fa:1b:dd:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa181f8b0ac913ddc377e19d5664b11b1975373
Validity
Not Before: Apr 21 14:00:45 2025 GMT
Not After : Apr 22 14:00:45 2025 GMT
Subject: CN=948da4ef63dd78f455c9c1703fdb9cf13546c5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:60:f8:14:48:0d:5f:30:75:f9:72:42:e7:11:
64:66:ea:35:0a:1e:4a:f1:ba:d0:2b:a8:dd:c0:2e:
bd:43:c0:86:a4:61:7a:c3:88:95:b0:b6:a4:9c:d5:
d0:9e:cc:f9:78:87:8f:96:01:05:de:8f:3d:90:d1:
2a:af:ac:75:71:94:11:de:74:4c:48:2d:b6:28:52:
11:0a:91:e1:b3:f0:e6:99:52:74:64:5e:b2:a9:c4:
4f:d5:74:c2:bd:70:9b:42:c0:31:a5:85:45:8e:f1:
52:c4:3f:d3:01:7c:7b:68:6c:53:55:71:93:b1:da:
e0:ff:c5:1e:82:66:4b:d2:02:5d:ac:a4:08:bc:67:
70:1e:d9:54:9a:34:c9:57:86:45:59:bd:d8:9a:cc:
0e:e0:2b:66:ef:b4:a3:24:c1:17:48:79:69:12:46:
f6:67:fc:69:99:f9:ed:c7:24:04:66:00:5a:79:19:
1b:e9:91:9f:4f:9b:aa:ac:ce:1d:63:3d:6e:3c:46:
09:fc:39:f7:ba:0c:7d:d9:8c:7a:83:1c:8d:6a:dc:
4b:16:ea:f8:fc:75:94:ff:31:0a:c1:da:99:15:39:
85:f3:94:6d:85:3b:2a:ef:a4:af:31:81:a7:a4:53:
d5:a0:20:67:e6:f1:58:c4:ba:86:3b:08:19:cd:ba:
15:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:8D:A4:EF:63:DD:78:F4:55:C9:C1:70:3F:DB:9C:F1:35:46:C5:B8
X509v3 Authority Key Identifier:
keyid:2A:A1:81:F8:B0:AC:91:3D:DC:37:7E:19:D5:66:4B:11:B1:97:53:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqGB-LCskT3cN34Z1WZLEbGXU3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/b98755-65c4-4d19-b069-a1a55e8bee3f/1/KqGB-LCskT3cN34Z1WZLEbGXU3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:ac:63:c2:2d:98:4f:d4:e3:cf:f3:0d:f1:bd:fb:e7:c8:ec:
bd:29:03:7d:d7:33:57:2c:5b:31:10:46:5c:09:10:53:89:36:
f3:f5:cb:eb:d7:f3:db:a1:40:5b:84:f1:fb:29:50:e8:f9:7b:
d2:d6:50:46:66:2f:a2:01:de:39:2a:92:97:f5:d7:c8:76:09:
92:48:65:8a:00:ac:37:e7:b0:3a:e7:c0:b8:7a:bf:c7:d8:15:
8d:73:ad:1c:36:f0:34:00:0a:44:2a:01:71:2e:be:14:3d:64:
98:b2:b3:ea:95:64:26:3f:db:be:d4:85:26:b8:0f:00:f3:01:
9f:25:54:20:11:dd:78:98:8d:02:ab:c4:64:0b:d2:d1:15:93:
de:2e:32:a6:61:68:e5:9e:c3:76:dc:08:0f:b3:2e:4a:97:97:
3b:39:61:d7:5a:6e:cb:14:b1:bd:4a:3c:b0:0e:fe:fb:45:b5:
bb:46:1d:f1:3d:34:43:9f:28:88:58:7f:68:50:61:6a:be:f0:
87:f2:4f:2a:23:c9:df:73:09:65:8c:1e:2d:8d:9a:f0:1a:dc:
76:a7:44:27:db:9f:5b:36:c7:0d:dd:b3:f8:38:23:dd:96:bb:
28:7d:19:c0:87:94:47:8b:56:7f:d0:52:0d:25:8e:a0:3c:5e:
30:ba:85:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:23:26 2025 by rpki-client