Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: UyE5S7w6B/fAOGCWkaCjOcVUwvpODjArpNRqbYOgpqQ=
Subject key identifier: 05:4D:E2:EF:80:B7:CD:3D:6E:AD:7B:AC:87:DD:DB:13:6B:FE:37:25
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 01976DAC2320F02D209B9A754B14C6DB1FB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 09:01:27 +0000
Manifest this update: Sat 14 Jun 2025 09:01:27 +0000
Manifest next update: Sun 15 Jun 2025 09:01:27 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: P7ZGKZvwPtu8e/Y4ptPnd0r1JOGgIFYCv5/MgErI+MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:23:20:f0:2d:20:9b:9a:75:4b:14:c6:db:1f:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Jun 14 09:01:27 2025 GMT
Not After : Jun 15 09:01:27 2025 GMT
Subject: CN=054de2ef80b7cd3d6ead7bac87dddb136bfe3725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:80:dd:87:45:4d:1c:eb:15:b5:19:33:14:0e:
71:69:ae:4d:e6:98:67:91:9e:7c:cd:9f:99:c4:52:
fe:81:20:86:d5:66:ec:1e:f3:68:09:73:4a:bc:bc:
b8:4d:37:17:92:74:ab:cf:c6:7a:3e:4f:7e:80:83:
85:0f:72:8b:b8:3f:80:ec:af:08:26:a8:41:d0:1e:
2c:ae:c1:05:86:bd:8b:7a:55:cb:ba:ea:48:b9:90:
32:9c:d0:40:f3:51:12:bf:e7:12:85:96:99:69:7a:
15:e4:bc:8e:70:a6:c0:0d:32:73:4b:88:19:a4:d6:
db:72:d7:2d:ac:18:1e:25:01:ea:f5:85:f3:8d:79:
1c:c8:45:26:07:11:ab:8b:2e:e1:0d:bc:05:ef:61:
1d:19:d2:ad:5a:8b:e0:77:31:93:76:87:a9:d8:2e:
dd:cb:fd:e8:09:3e:bf:8d:f2:23:5d:aa:ec:62:bc:
65:1f:52:e5:30:ff:7a:59:d4:f4:cf:e6:ad:5c:c0:
cf:6b:52:1a:90:ef:06:6f:63:30:f2:03:83:cc:4f:
29:06:77:13:75:ef:63:93:e5:85:da:04:f5:43:b3:
85:da:1a:a7:70:24:42:51:dc:01:25:db:63:da:cc:
54:16:2c:5c:84:b9:db:c4:bd:1b:17:83:a5:3d:ad:
53:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:E2:EF:80:B7:CD:3D:6E:AD:7B:AC:87:DD:DB:13:6B:FE:37:25
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:b7:19:01:fe:83:3a:65:5e:b7:94:f5:d0:87:bd:6a:cd:4f:
2b:fb:5f:7f:bb:be:2e:c3:ae:a6:f1:5e:5c:b7:f7:2b:37:96:
9d:93:95:47:e4:86:b5:78:d9:d7:2c:13:ec:bb:d1:8a:4e:c4:
d3:3c:b7:57:a4:8d:b8:7d:a7:e8:49:4b:ce:4f:86:00:3a:33:
cc:1d:91:6b:89:5e:30:09:45:7c:57:3e:8c:76:86:cd:79:eb:
24:d5:7d:5b:60:d8:56:47:b9:ed:72:be:06:d5:bc:8a:c9:7f:
25:a0:44:7f:6c:8f:c9:de:9e:6a:fc:7c:21:76:fd:db:f0:f4:
68:3f:e7:e2:ad:a0:57:cf:3d:c3:fc:2e:a4:7b:52:84:82:26:
d8:90:57:90:49:07:ef:95:46:69:ba:cb:cd:cc:61:0b:ec:23:
e3:48:8c:7b:9a:de:94:78:0e:8b:4f:5f:81:ec:c9:39:e4:2b:
5f:c7:60:30:64:a5:ac:22:8b:19:f0:97:94:cf:43:f8:b1:fa:
e8:3f:62:94:d0:f8:fe:24:dd:a8:e2:9f:8c:55:a8:23:72:22:
6b:53:16:fd:60:c2:b4:26:84:e5:f3:7a:5f:aa:a5:b0:d5:82:
1f:aa:7e:0b:49:07:11:48:ac:05:ab:40:75:5c:dd:87:18:4d:
9e:56:19:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:03:31 2025 by rpki-client