Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
File: KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft (raw, json)
Hash identifier: MRNmvlz+q8o6gF7uhBANeFdaIaHIBqEbErAbIYe+npc=
Subject key identifier: 91:8D:A8:F2:40:8D:8D:60:07:C8:8C:EC:07:1F:AE:DE:21:0E:1D:B2
Authority key identifier: 28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
Certificate issuer: /CN=28ab22fb2da473c5426bfcc1f880861004017087
Certificate serial: 019672D437E011E9F0B0276909607FC711B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
Manifest number: 109B
Signing time: Sat 26 Apr 2025 16:00:32 +0000
Manifest this update: Sat 26 Apr 2025 16:00:32 +0000
Manifest next update: Sun 27 Apr 2025 16:00:32 +0000
Files and hashes: 1: KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl (hash: jkicq/9FikMKK+YnZKqee9hPSgZ9cpWn0ZsxatUJrNU=)
2: cg7jH9-I6Sn6WdXYTmWfVhQ7Xn0.roa (hash: cVUrCQ+Jcsq9Mn5dT+aT2qa5NAQFm14m98Qkj8hsxLI=)
3: nbambIIqRFOhbaDA9uUUmbh_l5Q.roa (hash: t9MxHGpdzO8JUyCRcCDuuUPr6RtFVNeR4ykpojFpuVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:37:e0:11:e9:f0:b0:27:69:09:60:7f:c7:11:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ab22fb2da473c5426bfcc1f880861004017087
Validity
Not Before: Apr 26 16:00:32 2025 GMT
Not After : Apr 27 16:00:32 2025 GMT
Subject: CN=918da8f2408d8d6007c88cec071faede210e1db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:a1:83:06:57:a2:4d:6a:f2:2b:08:26:78:
93:41:a9:87:b4:a8:9a:b5:67:ef:79:33:03:40:20:
88:6b:80:fe:b9:9b:13:3c:b7:39:63:ba:7f:c8:f6:
6a:c2:99:2f:82:2d:29:37:5f:30:90:79:b0:34:4e:
ba:f3:17:80:e0:0d:34:90:4f:f2:34:b5:0d:42:c8:
37:c4:59:36:d7:af:bd:3e:66:8a:be:b8:09:f3:9d:
68:9b:c5:a1:2c:70:38:3e:64:11:11:89:4f:a3:94:
e0:b9:72:f3:00:c2:3f:6e:a8:91:43:9f:6a:e5:52:
13:dd:f8:32:ea:35:4b:ca:5f:5f:d9:c0:1a:7c:e2:
38:fa:ab:cf:10:7d:62:43:97:eb:46:1a:73:35:8b:
5c:84:66:71:d5:1d:c1:a3:da:b0:36:04:cc:a5:5f:
f2:08:3d:a7:74:5c:8b:9b:97:85:3d:a8:92:43:0f:
7a:08:ee:69:67:8f:0b:0e:fe:27:ab:2c:58:8a:01:
29:43:c4:39:03:11:c8:c4:d7:4d:b7:cc:b5:c6:7b:
d4:a6:9a:ff:ab:55:ab:40:c6:60:da:d9:32:98:63:
8c:0d:4f:de:93:b6:fc:77:2b:2d:07:a3:cb:71:5c:
48:5f:bb:c1:d2:4d:0b:6e:8b:dc:ef:46:17:2e:b5:
ad:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8D:A8:F2:40:8D:8D:60:07:C8:8C:EC:07:1F:AE:DE:21:0E:1D:B2
X509v3 Authority Key Identifier:
keyid:28:AB:22:FB:2D:A4:73:C5:42:6B:FC:C1:F8:80:86:10:04:01:70:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKsi-y2kc8VCa_zB-ICGEAQBcIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f53da4-02e8-48f4-80b3-3a1595fc86ef/1/KKsi-y2kc8VCa_zB-ICGEAQBcIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f8:0b:f4:ed:27:82:b9:da:70:35:a1:06:68:0f:b7:e3:a4:
f2:96:cd:80:c1:5f:3e:68:02:7d:2d:b4:0b:a1:88:22:e3:96:
bf:3e:1b:1e:06:c2:08:ec:f6:c5:77:9f:91:70:1c:6a:38:a4:
c6:15:6e:40:f7:e5:48:b0:98:30:94:bb:d7:f7:f6:54:1b:43:
96:9b:11:d7:6e:76:4e:85:94:d8:a3:58:c3:b5:01:97:5d:2c:
36:87:9a:2e:2a:2a:ff:c5:90:0d:ac:d2:7c:54:25:22:fc:00:
4c:ce:0b:6f:f8:20:0d:09:f6:72:f1:36:b5:28:0d:40:f2:67:
61:c2:a6:ee:1f:c0:4e:e6:d3:62:94:b3:84:c5:9c:48:50:02:
98:72:d9:5c:50:35:7c:ca:0f:05:b0:b2:80:44:73:90:e3:bf:
28:20:e2:7e:2b:33:fb:6b:d6:d1:53:f2:18:a9:36:83:d4:14:
a9:18:92:0d:70:5e:60:77:2b:8e:86:a8:b3:2a:2f:24:ee:8a:
bc:53:14:b7:6e:4e:3c:48:5f:ed:04:65:99:1f:f6:8f:d5:77:
be:ca:ae:ad:29:52:6c:26:05:bf:51:c8:03:1c:01:9c:13:3d:
08:fe:38:ac:1c:9c:48:07:b2:e9:d7:aa:98:55:b3:18:ca:a8:
1f:bd:cc:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:49 2025 by rpki-client