Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
File: KhQFaUht0XjbWDoKHklt8iMYXTU.mft (raw, json)
Hash identifier: 5bytJiF8RqNUb1ndJabltNCiKeNKislqZ7OFLNmYjr8=
Subject key identifier: 6D:13:77:BC:8D:BF:A9:A7:08:18:08:DB:48:2E:99:80:8E:54:C7:68
Authority key identifier: 2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
Certificate issuer: /CN=2a140569486dd178db583a0a1e496df223185d35
Certificate serial: 0196748BDC81DDC068BA13ADF974C4B9E726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
Manifest number: 0754
Signing time: Sun 27 Apr 2025 00:00:45 +0000
Manifest this update: Sun 27 Apr 2025 00:00:45 +0000
Manifest next update: Mon 28 Apr 2025 00:00:45 +0000
Files and hashes: 1: KhQFaUht0XjbWDoKHklt8iMYXTU.crl (hash: nJto2ixRJGJb+ujnqZ7Aaj2ZAm0FRtCivASvFOzz6Hc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:dc:81:dd:c0:68:ba:13:ad:f9:74:c4:b9:e7:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a140569486dd178db583a0a1e496df223185d35
Validity
Not Before: Apr 27 00:00:45 2025 GMT
Not After : Apr 28 00:00:45 2025 GMT
Subject: CN=6d1377bc8dbfa9a7081808db482e99808e54c768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:37:70:d8:6d:c6:9d:d3:cc:4e:a2:c0:e2:03:
de:d2:49:06:99:3d:7d:fd:72:cb:62:59:69:78:76:
bb:d9:f7:71:2f:27:05:c2:e3:6a:68:9b:bb:47:69:
af:11:dc:9a:07:26:20:07:03:45:ff:b2:ab:46:d2:
66:2b:95:67:bc:33:72:9f:6c:38:cc:b5:31:00:0f:
81:9b:6e:63:7b:c9:6d:e9:3f:89:70:a7:45:3d:48:
f3:bb:1b:f8:cf:33:e8:ae:0a:c2:95:25:8a:14:68:
1d:0b:05:0e:8f:4b:c1:d8:09:84:ec:3d:a7:0b:8b:
42:ef:aa:a1:b3:ca:50:62:32:25:f2:d5:f6:db:8a:
d8:84:5e:4c:42:d8:cd:a6:1e:dd:67:62:74:92:02:
00:7f:79:37:f4:49:6c:07:56:4e:9f:6a:fb:a6:c0:
2a:a8:6d:05:e7:bf:e0:27:7c:fc:b0:1b:3e:1a:75:
4c:9d:ae:ec:9a:cb:d4:45:ae:a9:cb:da:46:ef:ac:
7d:95:19:d6:da:a9:5c:b2:1c:d3:f0:d0:5b:5f:f4:
2e:3a:2b:2a:f7:51:b9:cf:19:74:4f:fe:10:e8:98:
2f:9c:35:89:a9:64:57:86:b1:0b:2d:d4:1f:40:23:
da:0d:ad:ba:6a:ed:8d:73:4a:1d:75:ff:24:29:97:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:13:77:BC:8D:BF:A9:A7:08:18:08:DB:48:2E:99:80:8E:54:C7:68
X509v3 Authority Key Identifier:
keyid:2A:14:05:69:48:6D:D1:78:DB:58:3A:0A:1E:49:6D:F2:23:18:5D:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KhQFaUht0XjbWDoKHklt8iMYXTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/569574-441e-415b-803f-54bd649b4852/1/KhQFaUht0XjbWDoKHklt8iMYXTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:4b:f6:48:c1:75:ea:7e:9f:58:b9:d2:9c:b4:5b:08:a0:
1b:0f:c0:be:c8:35:ed:36:d5:2f:67:00:e7:64:cd:9b:b7:3b:
26:b9:5d:70:b5:eb:3d:bb:e3:33:49:07:96:74:25:08:e5:68:
a8:9a:48:38:03:41:9e:1c:4f:06:d0:c6:6d:c5:7e:91:01:eb:
0f:4b:4e:06:5f:18:50:cd:00:83:5f:2a:66:be:03:a7:b1:ab:
cb:85:b6:83:45:00:75:1b:af:7b:3f:31:53:b2:78:48:8b:3e:
fc:1e:c3:07:fc:84:95:2e:38:11:68:ef:19:73:99:17:dc:04:
49:cc:04:92:0c:86:68:4e:bd:b4:93:c8:c0:af:c3:29:0c:1c:
5e:22:86:3f:ac:22:d7:2b:4b:59:cf:54:0b:24:e2:2e:52:7a:
ec:08:90:dc:e3:7c:64:e1:83:cc:8a:28:31:40:6f:fc:68:d5:
21:6e:33:0f:19:72:ed:0c:20:ca:13:e2:cc:d0:1e:2a:44:d7:
64:4d:9f:54:38:1f:9b:ef:10:2f:12:4a:c4:fb:c1:b7:ec:2d:
82:16:b9:82:16:03:2e:c0:11:c2:8a:ea:89:78:b4:8f:33:6f:
25:96:bf:b8:c8:a3:cd:72:a7:a6:67:08:75:72:fd:df:e1:f4:
ad:c1:c5:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:57:00 2025 by rpki-client