Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier: VQpM8W7Yab2Tz4TAxQkDERwNhFQ8dYTz1LlOak8dUWQ=
Subject key identifier: A8:28:9B:D4:E9:DD:E4:1F:90:D0:8E:B0:98:AB:61:8E:59:C2:9E:8F
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial: 019512104548E99BABE8677E560EDCAB8DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number: 0331
Signing time: Mon 17 Feb 2025 04:00:10 +0000
Manifest this update: Mon 17 Feb 2025 04:00:10 +0000
Manifest next update: Tue 18 Feb 2025 04:00:10 +0000
Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: D8KlqbHwp6yQ28Dowsb36XPwvBLwzKILND4kkBV7VlI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:10:45:48:e9:9b:ab:e8:67:7e:56:0e:dc:ab:8d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Validity
Not Before: Feb 17 04:00:10 2025 GMT
Not After : Feb 18 04:00:10 2025 GMT
Subject: CN=a8289bd4e9dde41f90d08eb098ab618e59c29e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:59:aa:65:48:ae:dd:0a:0a:2c:cd:d9:03:42:
cf:f1:fe:32:c8:c8:36:3e:6e:21:b6:27:73:9f:30:
71:03:d2:14:02:dc:3b:64:2a:e9:f2:91:81:84:40:
fd:fa:a5:e6:c6:e3:38:c3:3e:87:86:e4:a0:47:af:
b1:4e:73:4d:c7:0e:6b:db:66:3d:53:d2:50:77:e3:
ce:ff:73:00:9a:0d:71:41:10:1c:0b:03:06:6b:ca:
5a:24:a9:32:e2:3e:74:d4:57:1b:3c:a1:e2:07:84:
b9:e1:59:72:96:13:69:eb:d7:82:8c:f7:e9:9f:ee:
76:87:06:81:41:90:8e:37:23:b4:da:49:ff:85:09:
40:9b:c6:e4:a5:cb:21:a5:c9:57:10:f1:5c:2a:24:
70:12:ad:4e:fc:f0:d0:ff:98:7e:f4:7d:3c:e7:f8:
b4:e2:3f:a1:45:2f:bf:37:ad:62:46:0c:4b:20:96:
ae:d5:82:5b:1c:ee:96:93:b1:ec:ff:c5:fd:5d:7c:
f1:50:d2:41:00:16:a6:15:f8:0b:f8:13:9f:58:9c:
77:0c:76:36:da:c0:4b:71:fc:2e:2d:2a:e7:14:fc:
5f:b3:52:5a:f5:a5:6e:a2:21:d7:6c:86:9f:33:5d:
b9:72:4a:43:3a:97:01:58:24:ff:4f:7d:83:d5:ae:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:28:9B:D4:E9:DD:E4:1F:90:D0:8E:B0:98:AB:61:8E:59:C2:9E:8F
X509v3 Authority Key Identifier:
keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:13:31:30:34:17:a0:b6:7d:e2:3e:07:15:f1:9a:a9:84:6f:
b6:5f:63:8a:4e:f8:85:3d:82:65:55:f1:42:60:52:c8:1e:ca:
54:11:a6:de:25:a2:49:c9:49:dc:3b:74:06:d8:86:8e:14:09:
e8:1b:75:75:0e:51:e8:45:71:2d:41:4b:3c:f7:e6:61:18:32:
64:99:9e:d0:0b:22:27:2d:af:f1:60:fd:c4:20:d9:6c:90:63:
d6:0e:a5:f9:3a:4d:86:05:2d:7c:99:db:58:40:b6:e2:96:ce:
c9:0b:e9:07:99:43:c6:f4:a6:fc:1d:ae:4e:e4:38:eb:ba:43:
ed:bd:5d:52:89:f7:7b:cf:44:9c:dc:7b:0e:77:80:31:7b:b3:
c1:b8:94:a7:f8:b5:a1:d4:c4:bf:43:67:0c:2f:56:8a:24:40:
e8:01:fa:56:e0:a2:fa:bf:6d:98:db:3b:6c:1f:11:23:32:be:
52:f7:9c:e0:0c:60:ba:5c:ac:8d:5c:82:9f:86:d8:93:79:62:
24:af:3d:28:5d:e9:b5:87:bc:7c:f6:d3:dc:9e:0e:bb:46:41:
f7:21:8e:81:74:e3:7f:06:d6:68:cd:21:c8:c9:e2:b1:e9:f1:
9d:10:9a:ef:7b:45:d3:71:24:92:9b:19:a0:7d:46:86:de:af:
07:48:57:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:30 2025 by rpki-client