Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
File: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft (raw, json)
Hash identifier: S5bbqyknmccx5vUho8ocXfbkS3BuxP1rzyohoSA5r0I=
Subject key identifier: E8:F9:38:B0:FE:59:74:80:1A:75:4D:B9:B5:49:BA:89:22:6D:CE:52
Authority key identifier: 29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
Certificate issuer: /CN=29187f811597dd03513be42f43155bc15a3a0b3f
Certificate serial: 01967868EC81AFE1813542AB925D29D03259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
Manifest number: 1516
Signing time: Sun 27 Apr 2025 18:01:04 +0000
Manifest this update: Sun 27 Apr 2025 18:01:04 +0000
Manifest next update: Mon 28 Apr 2025 18:01:04 +0000
Files and hashes: 1: 1-u5MAxIx2a76GWU9BSY3kkXJY7s.roa (hash: opAgG+CnSobBzmEROSJ8hMqy2rOkfcnuYJpvFL5TYq0=)
2: KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl (hash: xib72EABRMvyXfYYYqbxafnr9VFXWDAIgp1LkcCPAvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:68:ec:81:af:e1:81:35:42:ab:92:5d:29:d0:32:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29187f811597dd03513be42f43155bc15a3a0b3f
Validity
Not Before: Apr 27 18:01:04 2025 GMT
Not After : Apr 28 18:01:04 2025 GMT
Subject: CN=e8f938b0fe5974801a754db9b549ba89226dce52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:29:9b:d8:bc:21:7b:4a:19:bb:61:6a:6b:3b:
d7:c7:3d:f5:58:60:1d:fd:4f:66:b4:62:c9:9f:49:
17:80:7a:4e:df:d1:48:e3:7b:9a:51:69:cb:3d:d5:
d4:33:e8:06:2d:a2:37:40:d1:d3:51:59:47:09:21:
d0:92:ba:ee:1a:29:ca:4f:e5:79:4e:2f:f7:31:94:
15:37:4a:cd:12:5f:c3:16:c9:4e:6f:8c:a9:5d:54:
29:37:e0:40:99:7a:12:84:0e:ae:17:d6:4b:86:57:
a1:53:e0:33:b4:54:35:98:ef:a6:05:02:b6:4c:ff:
84:5e:71:8c:86:4d:a4:23:a3:be:6e:07:95:5e:8f:
8a:17:00:2f:d0:a7:6c:5f:b3:ef:46:00:03:d9:7f:
bb:bb:a0:43:ea:da:fb:22:15:ea:fa:ea:65:d7:3d:
3b:14:90:ed:2e:96:63:3f:c3:b3:1d:23:da:48:80:
4b:5d:dd:cc:39:27:5d:e8:a1:f7:34:7b:5c:c7:e7:
59:95:7b:10:98:63:66:67:3a:c3:79:fe:cc:c2:a1:
d0:91:71:63:b1:4e:ea:77:b0:fb:c4:d1:9c:25:61:
33:86:3d:98:80:7f:83:2e:f5:1c:c7:8c:65:88:7c:
13:63:e1:a3:08:4b:e2:6c:04:72:15:75:18:2d:01:
d7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F9:38:B0:FE:59:74:80:1A:75:4D:B9:B5:49:BA:89:22:6D:CE:52
X509v3 Authority Key Identifier:
keyid:29:18:7F:81:15:97:DD:03:51:3B:E4:2F:43:15:5B:C1:5A:3A:0B:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/8c006d-50f5-445d-b7e8-24994b040f41/1/KRh_gRWX3QNRO-QvQxVbwVo6Cz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:d7:b0:b8:d5:52:57:9a:90:02:81:9f:a5:84:64:bb:3b:92:
2d:6a:43:94:b7:6d:c4:8e:81:e8:39:3a:48:f9:34:4e:fa:20:
51:ee:31:a0:98:1d:4b:a6:5c:9f:67:f2:9a:52:99:f4:8f:81:
88:6a:0d:06:d5:84:97:86:5d:6d:2c:ee:00:bb:a8:10:f8:3d:
92:71:58:ef:49:b2:68:5b:31:05:5b:83:3c:03:eb:09:22:fc:
ed:33:c1:d6:ab:22:6c:ce:ee:5b:3f:e2:27:75:3b:ec:84:d1:
21:d4:e5:85:e8:61:bc:76:3e:b4:2f:84:26:32:82:fe:db:cc:
04:8b:ac:9f:5e:4f:4d:86:a7:01:81:1e:81:a4:ee:36:21:47:
c5:29:a8:19:55:a8:5d:6f:9c:9e:ee:4d:d9:09:22:00:22:be:
ef:34:97:f3:13:07:9d:62:4a:2d:93:0d:b5:3f:bf:66:6e:ed:
86:29:ae:f2:0f:be:11:88:7b:75:88:6c:41:a0:7d:13:5e:8a:
88:04:d4:db:29:98:aa:b1:db:93:f3:67:92:a5:1b:59:0d:59:
92:7b:5a:f8:ef:da:5a:91:cf:39:c0:a3:2a:02:02:64:3c:b2:
69:aa:a3:28:41:f4:e5:6d:f6:4f:72:66:4a:9a:0b:91:9d:d7:
0a:6a:7d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:57:44 2025 by rpki-client