Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: 453LDMeikpR3Tnu7b5Lzs5LPGVv6D4lqezkkVhfInd0=
Subject key identifier: 6F:AC:7F:76:FB:78:A8:46:B5:02:21:4E:55:46:42:E5:11:2F:4F:CA
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 0196726625A68157C6EDDC02B748ABF899C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 1217
Signing time: Sat 26 Apr 2025 14:00:18 +0000
Manifest this update: Sat 26 Apr 2025 14:00:18 +0000
Manifest next update: Sun 27 Apr 2025 14:00:18 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: 4RJCKfc9fymDV9awPteFfZcdICej5pvwUggwqIqLCv8=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:66:25:a6:81:57:c6:ed:dc:02:b7:48:ab:f8:99:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Apr 26 14:00:18 2025 GMT
Not After : Apr 27 14:00:18 2025 GMT
Subject: CN=6fac7f76fb78a846b502214e554642e5112f4fca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:11:0d:62:76:20:91:47:5f:67:ad:c1:03:
ef:ce:e8:b1:ea:c8:48:63:46:ca:54:90:6a:ab:3c:
f5:42:be:a9:72:e5:9f:4f:3c:b0:f1:c6:aa:16:37:
19:09:78:7e:5a:f4:e7:37:ba:11:b3:72:17:24:f1:
7e:76:05:6c:db:19:40:aa:ee:91:a5:fe:fc:7c:f5:
a8:fc:ff:ef:62:04:a9:ff:3a:bd:90:d8:fd:2e:9e:
de:8c:2f:4b:25:83:b8:ba:ea:ed:7d:a1:ac:96:39:
f8:4d:35:be:01:fa:e0:33:e0:c2:22:d5:dc:91:22:
f4:39:10:b7:ab:9d:f8:41:7c:fe:8d:95:1d:f9:3b:
f5:7d:4e:98:b4:5d:89:00:86:83:df:83:8f:a3:61:
31:d0:65:cd:2e:51:a0:f9:1f:e3:4f:b5:2b:0a:63:
81:73:18:47:f4:fe:30:a5:e0:57:45:5d:41:93:23:
72:d8:83:97:02:c7:c2:a7:bc:f1:ff:4c:2f:ea:91:
a1:3b:07:31:33:3a:1e:e9:87:46:c1:80:e4:1f:83:
d3:2d:68:fa:18:49:55:75:8b:72:9e:d4:0c:d3:5a:
6b:9c:48:3a:62:7a:b7:ac:14:ed:21:3d:85:13:65:
91:ce:ff:a6:7d:83:2e:a3:7d:62:54:43:30:d7:e0:
68:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:AC:7F:76:FB:78:A8:46:B5:02:21:4E:55:46:42:E5:11:2F:4F:CA
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f1:b5:2d:04:2f:f0:15:ac:74:9b:4f:76:82:a5:6f:05:1d:
1f:10:90:e6:d1:e4:a1:bf:2a:11:9c:93:e9:8b:85:fe:6a:fb:
c5:62:7c:f3:0a:8b:a5:e3:01:16:71:7a:39:6c:3f:f5:08:cc:
56:45:ed:90:95:f7:93:9a:1c:47:01:9c:04:ca:8f:cc:6c:d5:
a5:7d:8d:81:4b:f6:73:86:c6:3f:cc:59:af:52:b3:ca:20:f0:
1b:43:94:ad:14:a5:b2:09:85:e8:d8:c3:fd:3a:ce:1b:81:e7:
0b:93:aa:83:84:5e:de:5c:ed:75:bd:0c:13:ff:3d:96:6a:c6:
cf:2f:1e:44:cc:eb:6b:b3:7a:bd:ba:aa:49:ac:59:a9:e3:b7:
f0:e3:e6:d7:c6:75:5e:75:6e:9c:44:8e:0c:d4:b8:0a:67:6e:
05:6c:02:19:45:f1:be:6a:0c:50:96:ef:74:94:3d:56:65:26:
3c:cb:31:37:17:22:cf:a4:49:89:82:49:90:82:6f:b0:f5:46:
29:97:69:18:81:4c:80:90:ed:67:de:8e:7d:cf:a5:ae:9d:88:
62:d1:c4:be:bd:79:0f:aa:38:0e:2c:59:dc:5f:e2:6d:39:ea:
1a:55:0e:98:b5:d2:ff:1b:7d:59:f9:95:2c:47:a3:f2:b7:bf:
99:dd:51:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:03:36 2025 by rpki-client