Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
File: KGaH-2SnfwEAuvI9TzQezndZUOU.mft (raw, json)
Hash identifier: nK3Wi+WN3sV82imQltI9zsFEEDE8yudE5RLtMv/HD5Q=
Subject key identifier: D6:53:35:1C:D3:F6:B8:58:3D:D2:48:94:09:50:AE:C6:00:00:55:6E
Authority key identifier: 28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
Certificate issuer: /CN=286687fb64a77f0100baf23d4f341ece775950e5
Certificate serial: 01968CCB27DD158D50F26735A1F3180C0F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
Manifest number: 151B
Signing time: Thu 01 May 2025 17:00:46 +0000
Manifest this update: Thu 01 May 2025 17:00:46 +0000
Manifest next update: Fri 02 May 2025 17:00:46 +0000
Files and hashes: 1: KGaH-2SnfwEAuvI9TzQezndZUOU.crl (hash: BK5m2YK1z6mSXdtXHo5TnjBMGyggxL/oByCDQu59DAU=)
2: LM876MaYaB8OnXBNDWvDIMOdaT0.roa (hash: dBnZE66nMAqtp/XETbnr6kLTMtvYsN54cnJkvnD4onk=)
3: SQmwwlkRfmzsbR8yXHtAP1cuD78.roa (hash: 70vEBGHpH3D42IAnxJUAJiHSfSkzd3seVU45VJv3ZjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8c:cb:27:dd:15:8d:50:f2:67:35:a1:f3:18:0c:0f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=286687fb64a77f0100baf23d4f341ece775950e5
Validity
Not Before: May 1 17:00:46 2025 GMT
Not After : May 2 17:00:46 2025 GMT
Subject: CN=d653351cd3f6b8583dd248940950aec60000556e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e8:b0:13:c4:4b:3e:af:61:9b:3c:09:28:59:
59:58:40:5e:cd:90:12:4a:34:8a:64:3a:d5:f0:c8:
2d:d6:2c:c7:55:e1:76:7f:96:4e:2d:d3:16:4a:cd:
f5:6f:88:7a:9a:63:36:de:f2:7f:b1:65:76:58:26:
25:c3:81:93:37:0c:b5:43:e7:66:09:f6:10:12:7c:
7a:14:2f:84:28:98:a0:9d:72:da:16:ec:6c:c5:58:
c0:be:10:a1:63:ee:0b:bc:80:3a:e7:fa:8f:42:4f:
3a:3c:f3:4e:61:d0:40:dd:3f:e2:2d:7a:a0:2b:17:
8b:3d:b7:f7:83:ee:8b:7e:78:80:bc:de:21:a5:f6:
a2:e4:74:ae:69:37:66:c0:13:6c:33:01:a3:10:4d:
0f:8b:67:fd:9e:91:91:67:7f:47:f1:c5:98:45:1b:
d8:c0:3a:f4:e6:fb:8b:c6:69:d4:61:42:fa:3d:35:
81:49:ee:20:7d:4d:9f:54:ac:50:a4:7c:8c:85:1a:
53:cb:f6:01:43:03:ee:0c:b2:7b:ac:13:e0:f5:e9:
63:c8:d6:94:fc:0a:4d:9b:fa:88:3c:05:c0:a8:f8:
6b:f6:1a:26:72:e5:3b:d8:fa:fd:cf:67:eb:5a:dd:
08:f1:1e:7f:56:f6:c7:6f:35:24:6a:45:61:6c:e7:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:53:35:1C:D3:F6:B8:58:3D:D2:48:94:09:50:AE:C6:00:00:55:6E
X509v3 Authority Key Identifier:
keyid:28:66:87:FB:64:A7:7F:01:00:BA:F2:3D:4F:34:1E:CE:77:59:50:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KGaH-2SnfwEAuvI9TzQezndZUOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2052ad-3d41-45da-8474-6339f6b36bcb/1/KGaH-2SnfwEAuvI9TzQezndZUOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:24:41:47:c5:4b:a3:5c:41:d0:2b:c0:83:ca:a2:27:b4:bc:
28:3f:23:cf:2e:48:1b:1e:ca:16:8d:50:7a:84:fb:40:c1:42:
58:5e:ef:80:5a:e3:ed:d2:bf:85:75:01:9c:73:a3:96:f3:5c:
88:d6:d0:4e:74:aa:d3:ed:2c:bf:d5:0a:f3:cf:f8:a3:b0:8e:
ed:f6:6b:2f:b9:cf:32:bb:21:bf:83:00:b2:9d:2d:11:18:08:
a2:37:91:1e:b5:6b:86:cf:e8:95:18:8a:b5:52:b9:85:db:2e:
a8:06:f0:a8:09:de:28:4b:db:9d:47:a9:f5:6c:ce:c9:5b:81:
77:61:3d:b9:b0:bb:d1:24:4f:d5:75:20:7d:8b:20:05:69:d8:
5b:2f:e6:6b:2d:4d:73:7b:6a:a7:ab:5a:99:cd:5c:e5:f8:fa:
23:13:2d:01:2b:a8:82:44:ae:28:51:8b:71:22:7f:65:82:f3:
7d:58:27:31:1f:68:4f:df:6b:57:e3:a1:66:e8:f0:75:e4:66:
eb:df:38:27:d3:d7:cc:a1:a9:88:25:30:e4:40:61:e9:a5:c4:
3b:16:01:c6:3f:ab:19:73:1b:66:59:e1:1e:75:7d:99:7b:14:
f6:b1:ed:c1:fd:e7:2e:1e:44:6b:44:9c:e9:0a:f2:34:ad:12:
0c:79:d9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 20:23:35 2025 by rpki-client