Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
File: KLrBhbg_beOautz_Pf5Ic9iDxIg.mft (raw, json)
Hash identifier: kApc7a6T8eKSx6jui/SO+O3ze2BiUccITfxlqaWtZbs=
Subject key identifier: A1:17:B4:C6:C3:6E:71:81:92:5C:6B:68:C0:9D:35:80:99:86:C8:08
Authority key identifier: 28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
Certificate issuer: /CN=28bac185b83f6de39abadcff3dfe4873d883c488
Certificate serial: 019674C2DE12FF8169A887CD84E3FE25C5F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
Manifest number: 0846
Signing time: Sun 27 Apr 2025 01:00:49 +0000
Manifest this update: Sun 27 Apr 2025 01:00:49 +0000
Manifest next update: Mon 28 Apr 2025 01:00:49 +0000
Files and hashes: 1: KLrBhbg_beOautz_Pf5Ic9iDxIg.crl (hash: QShnLZw/CVKdPQcXGMbPlbJqF9GNxU7hHM7cYzl9jG8=)
2: TRmQsqo38AvFLgeV_m9TBYH8n00.roa (hash: qW2qJnlmGn6g7rOMXIGst8HJCwyD3TG1rYc3G+brA8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:c2:de:12:ff:81:69:a8:87:cd:84:e3:fe:25:c5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bac185b83f6de39abadcff3dfe4873d883c488
Validity
Not Before: Apr 27 01:00:49 2025 GMT
Not After : Apr 28 01:00:49 2025 GMT
Subject: CN=a117b4c6c36e7181925c6b68c09d35809986c808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:21:c7:05:02:b9:a2:ad:e2:47:7f:34:9c:
52:49:21:7c:e2:f9:0c:f8:2a:38:b9:d1:47:5d:45:
1c:03:8c:bf:3c:12:b2:4d:54:0a:89:bb:05:fb:33:
cc:ff:e7:06:e6:24:1f:e9:a1:d0:6f:ee:4a:e1:bf:
61:57:06:30:8e:db:55:7f:da:d9:f1:57:84:83:16:
1f:5f:7c:43:cb:09:4a:4a:d7:6b:bf:f9:c5:21:8b:
5c:df:c4:37:25:f7:ae:13:a8:30:16:4c:8b:00:e5:
c2:79:f0:dd:3f:f1:47:07:c6:a3:be:07:cf:1c:85:
1e:8e:76:7f:75:c9:53:d4:44:39:08:c8:e0:ac:e5:
c0:dc:48:b8:b8:4a:5a:c2:d8:e8:d2:6d:89:ac:b8:
ec:22:60:a4:a2:d3:fa:b9:61:b3:15:d4:2e:c7:c7:
ce:e0:29:7b:f4:5b:d3:83:e8:88:e9:bd:9b:6d:da:
a9:0f:0d:d5:28:c7:95:9b:6f:55:63:c8:92:a7:bd:
17:b4:21:7a:0a:c5:9f:22:6b:5e:a8:90:46:94:33:
e0:f4:b4:5c:a4:45:52:88:86:2f:d5:bc:06:d5:55:
47:fb:4d:07:c0:de:de:90:03:27:47:52:de:59:fd:
01:2d:ff:8d:78:f7:ea:6d:52:ba:a6:b2:d4:dc:32:
63:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:17:B4:C6:C3:6E:71:81:92:5C:6B:68:C0:9D:35:80:99:86:C8:08
X509v3 Authority Key Identifier:
keyid:28:BA:C1:85:B8:3F:6D:E3:9A:BA:DC:FF:3D:FE:48:73:D8:83:C4:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLrBhbg_beOautz_Pf5Ic9iDxIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fb9461-2db7-409e-abeb-f3b16ed6c061/1/KLrBhbg_beOautz_Pf5Ic9iDxIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ee:e6:6d:d4:25:0e:de:cb:8a:da:2f:b9:14:a5:84:42:c1:
4f:87:1b:4e:f7:c4:9d:e1:72:4b:01:a0:48:8e:23:38:0a:01:
c8:09:fd:16:b4:a1:9d:fc:84:ba:a5:77:96:00:02:13:93:5a:
fc:c4:d5:91:58:cb:08:ee:f9:1d:c1:91:ed:e1:e1:9e:38:45:
47:95:1b:d9:6d:6a:4f:d9:bb:ae:22:db:39:aa:07:d2:dd:af:
aa:1c:f8:d1:52:69:5d:ec:a4:0e:a8:87:15:16:3e:5a:46:29:
cf:c3:95:a8:6a:2b:7e:de:95:17:0b:60:65:b7:0f:a7:20:af:
4d:66:f7:a7:3e:e5:e0:f2:bf:79:be:a4:ac:1b:ce:3b:07:91:
dd:97:bf:d2:e6:c2:20:48:29:63:e3:d7:72:60:b1:f8:c3:cc:
bd:24:4d:0f:f7:b8:a7:d2:c6:dd:ad:f5:47:09:c8:f8:70:c0:
3b:59:b6:ba:b3:11:5f:d5:ce:88:5f:d3:e8:78:34:5a:7b:24:
89:6b:a3:40:75:0d:6b:d7:0d:84:3e:58:21:84:f4:37:51:d1:
c1:c2:a7:74:e8:6b:70:5b:79:5a:1c:84:1b:d2:6b:5c:f2:99:
68:cf:97:cb:87:55:53:f0:a3:9a:40:95:e9:83:2e:c2:12:23:
d9:0b:19:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:26:44 2025 by rpki-client