Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
File: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft (raw, json)
Hash identifier: Tsiq3woEAZ6M7R+o12OsCKtC+IsJOwObhN293STL90A=
Subject key identifier: BC:89:16:EF:2A:DE:23:3D:6F:8A:40:F2:3D:91:44:3B:4A:4A:2F:9E
Authority key identifier: 92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
Certificate issuer: /CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Certificate serial: 01967F0F67323C90B7100D71075B45390154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
Manifest number: 03EE
Signing time: Tue 29 Apr 2025 01:00:38 +0000
Manifest this update: Tue 29 Apr 2025 01:00:38 +0000
Manifest next update: Wed 30 Apr 2025 01:00:38 +0000
Files and hashes: 1: kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl (hash: f5upxT0tjZlly1eXhIPsFy656eaokO//8OyDvjDWiKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:0f:67:32:3c:90:b7:10:0d:71:07:5b:45:39:01:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92df8a90d43b034a72a478826ec3d4eae681dd2c
Validity
Not Before: Apr 29 01:00:38 2025 GMT
Not After : Apr 30 01:00:38 2025 GMT
Subject: CN=bc8916ef2ade233d6f8a40f23d91443b4a4a2f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8c:98:b2:6a:2c:d5:1b:a3:e3:c0:65:cf:10:
eb:55:36:5d:90:90:f7:c6:aa:f4:73:9c:82:f7:b5:
3b:8a:2a:84:eb:ce:3f:40:df:74:b3:87:d1:0a:f4:
20:50:5e:56:8b:eb:63:f8:85:ea:b3:85:f5:34:ec:
0a:51:68:6f:54:b5:77:46:a9:f5:81:ae:d0:d5:68:
41:90:8d:f8:1d:b9:28:f7:26:48:dd:16:d9:4e:36:
45:4d:ed:3a:ac:00:fc:69:14:74:0b:b5:b5:bc:4f:
93:e6:ad:18:a6:dd:fb:7c:b1:c0:21:db:5f:4f:b7:
d8:44:80:a7:6d:5e:7d:97:95:5a:05:4b:e6:ec:ea:
4d:64:a4:13:2d:2e:73:88:1f:1a:e0:cb:85:ec:01:
2a:56:ce:50:c3:5c:08:d5:2b:4f:a4:a3:54:68:34:
d7:74:43:f6:7c:90:13:d3:5e:76:79:a7:ad:b1:79:
17:de:5f:ad:d5:68:b7:a0:af:bd:3f:cc:70:2b:55:
4f:84:6a:06:0c:a6:c7:d7:00:a3:0b:f3:f6:ae:2f:
bf:da:b7:dd:4c:93:ca:9b:ee:16:b5:82:56:2a:af:
30:bf:f2:92:6c:b9:5e:06:f4:3a:01:fd:03:be:3e:
92:d2:c3:27:58:43:f9:30:b6:66:49:3b:b9:db:16:
8e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:89:16:EF:2A:DE:23:3D:6F:8A:40:F2:3D:91:44:3B:4A:4A:2F:9E
X509v3 Authority Key Identifier:
keyid:92:DF:8A:90:D4:3B:03:4A:72:A4:78:82:6E:C3:D4:EA:E6:81:DD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7140d4-fe77-49b4-a62e-5bdf0596ab4b/1/kt-KkNQ7A0pypHiCbsPU6uaB3Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:d7:59:98:c0:e6:8b:97:27:19:d0:39:b5:60:05:16:d4:46:
1a:97:9b:a8:04:13:f4:85:1b:bb:39:47:0d:95:1c:bb:dc:23:
c1:ad:d0:d9:2a:95:bc:47:a3:53:5b:29:c2:d9:1d:07:ce:82:
70:b9:01:57:43:66:21:f4:72:27:11:7b:24:b4:68:3b:c3:13:
10:18:7d:ac:06:3d:4a:b2:6c:e2:98:cc:47:fd:1d:69:fa:ed:
97:53:58:1a:93:41:d8:1c:04:67:bd:fc:8b:17:a5:58:2d:e5:
d2:e9:2c:a3:d3:c8:65:d3:04:ee:2e:32:d8:75:56:1f:47:fd:
23:2d:15:8b:6c:c0:fe:59:83:5f:60:22:49:a2:b0:ef:a6:36:
05:ed:79:65:9e:ac:d2:99:9a:4e:9d:e6:21:c8:39:8d:11:41:
6b:9e:3d:df:54:84:49:d9:2b:d9:28:9f:0c:b1:b4:29:f3:95:
04:06:9a:16:d1:33:ea:0e:9f:ff:8d:bd:af:9f:91:db:26:57:
4b:4b:b3:23:ce:12:c7:a5:66:ea:83:0b:e4:78:22:2a:05:1e:
86:80:e1:9d:f5:3b:5f:78:09:38:11:75:59:8b:29:be:89:ae:
f9:80:7c:b4:b0:aa:fb:b1:e6:fa:e7:62:15:cb:61:86:d2:4a:
04:88:80:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:18:43 2025 by rpki-client