Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
File: KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft (raw, json)
Hash identifier: vT0XHAQ9/ia64/fBA4bgTQqvPMpd+3wthZXyQgDNO7U=
Subject key identifier: 01:25:D1:50:9E:BC:16:A3:01:77:92:49:5A:26:F5:E8:7B:C3:2D:67
Authority key identifier: 2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
Certificate issuer: /CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Certificate serial: 01968E8278F8FE7051F4EB0DF59578AFC809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
Manifest number: 1225
Signing time: Fri 02 May 2025 01:00:37 +0000
Manifest this update: Fri 02 May 2025 01:00:37 +0000
Manifest next update: Sat 03 May 2025 01:00:37 +0000
Files and hashes: 1: KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl (hash: Sr/bgIh1eQr2kYwak5aasR7FQXQ97QUj43OckApINUo=)
2: uSrOots_DMPy38Ek0_9yV10Tzw8.roa (hash: Ypv5LfASDsUldkz8kd27ybD8JIawSksjG/puUQcmBe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8e:82:78:f8:fe:70:51:f4:eb:0d:f5:95:78:af:c8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad2fe6466d07094a4256da2cc847083c5006b1a
Validity
Not Before: May 2 01:00:37 2025 GMT
Not After : May 3 01:00:37 2025 GMT
Subject: CN=0125d1509ebc16a3017792495a26f5e87bc32d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:65:50:06:30:e6:1e:5a:80:37:a5:44:38:7f:
fe:8d:ed:c1:07:dc:bf:19:80:85:20:84:6d:e8:40:
97:d7:90:a9:32:12:d2:9e:f1:08:9a:7f:ed:8c:1f:
a6:a2:80:ec:ee:1d:e7:83:ef:2e:ac:f3:87:68:b1:
1a:67:62:65:90:9c:ae:6f:f3:65:fc:73:ca:b4:87:
10:e9:40:35:b5:c2:6f:32:27:a0:87:94:c4:72:e7:
95:98:af:ad:62:72:c5:72:67:fd:ae:b9:87:16:b5:
2c:05:57:4e:b2:37:45:4d:c6:88:65:c6:c6:67:6c:
a7:91:ee:84:96:9e:61:b4:1c:05:1f:e7:b1:d6:76:
de:67:c2:7f:15:ac:b4:ba:75:a4:86:91:c7:79:bf:
e3:2b:8c:e5:e5:13:ea:50:b7:53:48:e4:a1:ec:a1:
3d:e1:72:51:de:4c:6b:8b:fd:80:1f:83:76:49:dd:
00:e5:e1:38:35:be:59:79:7c:71:5a:96:5f:ac:d4:
1f:7b:07:25:ae:95:fe:3e:0a:4b:e5:77:79:8e:1f:
d2:50:61:da:fa:2b:50:1c:5b:27:5a:3d:9c:72:56:
d0:e1:b7:3e:8f:cd:c7:dc:3b:5e:dc:ac:c8:47:86:
07:8a:c9:73:93:d3:52:ae:c2:8c:d1:6a:7a:65:af:
f6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:25:D1:50:9E:BC:16:A3:01:77:92:49:5A:26:F5:E8:7B:C3:2D:67
X509v3 Authority Key Identifier:
keyid:2A:D2:FE:64:66:D0:70:94:A4:25:6D:A2:CC:84:70:83:C5:00:6B:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtL-ZGbQcJSkJW2izIRwg8UAaxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/8a31f3-7acf-47b4-b97b-fa31e2dc6abb/1/KtL-ZGbQcJSkJW2izIRwg8UAaxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f6:78:8e:4e:22:54:ae:36:c1:2b:15:58:b5:d6:90:e7:b1:
c9:7c:05:39:23:0a:62:46:82:24:24:c7:3e:62:4b:6d:95:bb:
7a:fb:f3:67:09:b6:cd:ac:c2:00:46:0c:8c:88:d4:42:c3:81:
e2:cc:35:52:f4:61:12:ca:88:05:ee:be:9e:56:1b:e5:dc:9e:
a1:3a:bd:44:e6:ac:21:f3:48:85:07:74:6a:c8:13:be:fe:55:
90:43:8f:bc:0d:dc:6c:1a:55:43:b4:49:a1:1f:01:26:40:7f:
ef:5e:af:ae:12:63:5a:bc:89:c1:c0:11:53:2a:1b:23:e6:f3:
dc:11:49:6c:d6:bf:f1:79:24:d7:15:7a:63:97:41:16:08:72:
80:73:6d:71:7a:74:4d:e2:6c:b5:18:e9:79:be:03:fc:26:79:
97:e5:31:43:ea:9d:6b:be:a0:77:58:88:79:75:8e:8e:02:95:
cc:a2:84:ec:55:30:26:01:d8:2e:24:2d:f7:76:5e:46:5b:96:
94:22:6e:69:37:e0:ef:84:fc:b9:7e:aa:c6:eb:c7:ed:3b:ad:
0a:2a:4a:11:a7:e1:bb:c6:83:4a:06:8c:e3:11:d9:97:11:5a:
ed:ab:e9:1f:0a:11:2a:f6:73:c7:95:ff:ed:15:f7:e8:e2:c5:
dd:a1:81:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 06:22:48 2025 by rpki-client