Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
File: kmhshS82--n8i-d8QJtSJqbuVNU.mft (raw, json)
Hash identifier: 5fERi7brZ8C0pviuOmUH5WghoiA60+Fcxq54TFEpk2s=
Subject key identifier: 7B:CE:B1:53:3F:DB:5E:6B:F7:C9:0D:81:02:8E:31:57:AF:CA:F2:E7
Authority key identifier: 92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
Certificate issuer: /CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Certificate serial: 01967A8D7CCAA09C43E5E79AD45553BCAB78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
Manifest number: 1514
Signing time: Mon 28 Apr 2025 04:00:14 +0000
Manifest this update: Mon 28 Apr 2025 04:00:14 +0000
Manifest next update: Tue 29 Apr 2025 04:00:14 +0000
Files and hashes: 1: IvJ7HvT-6tCK5GKbaPNyk54ml9M.roa (hash: 7zWh/VLAgd5GsVxZJpmQ4YamOZV0jGAf5fVHM29zO30=)
2: kmhshS82--n8i-d8QJtSJqbuVNU.crl (hash: p6PIePWndJA6JZlfpUliEvp6tqfjWn3KBh908Qz7jjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7a:8d:7c:ca:a0:9c:43:e5:e7:9a:d4:55:53:bc:ab:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92686c852f36fbe9fc8be77c409b5226a6ee54d5
Validity
Not Before: Apr 28 04:00:14 2025 GMT
Not After : Apr 29 04:00:14 2025 GMT
Subject: CN=7bceb1533fdb5e6bf7c90d81028e3157afcaf2e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b0:55:c5:5a:87:9d:00:ea:94:e4:7f:eb:bd:
2b:52:3e:c4:39:a6:26:79:e5:2f:16:61:3a:d9:9e:
4e:13:4d:46:32:4c:45:a8:27:08:3c:bc:8b:e3:ee:
70:a1:37:f5:82:3a:c7:a6:5c:33:d7:52:27:dc:de:
2a:71:e7:b8:12:07:0d:e5:ca:11:12:96:3c:62:b1:
b5:91:b9:a0:30:63:75:43:c2:89:40:dc:d7:3e:c5:
8a:3a:51:b1:fa:f5:2e:52:d4:14:16:65:a8:46:d8:
b3:c6:40:f7:72:b6:e4:1e:7e:2f:c8:58:13:76:2c:
3e:d8:0c:eb:12:b1:ad:26:c8:15:62:f5:83:ff:11:
d7:8a:8d:0c:a7:b7:64:06:e8:68:a1:72:04:62:a3:
89:bd:90:b9:64:b4:c0:59:c0:73:67:77:97:ed:e6:
fc:bd:ea:16:bf:9d:e2:37:8d:e0:a7:d7:98:70:b6:
47:ee:81:7a:69:de:20:dd:14:05:9d:00:08:94:37:
3a:74:6e:1f:10:43:5a:4a:6e:be:54:61:34:96:d6:
87:73:b5:7a:65:93:34:b6:08:1f:8b:0a:9a:45:55:
4d:01:41:07:56:72:d5:b7:49:c6:50:24:ef:ba:22:
ad:9e:8e:89:79:7f:37:fb:34:3c:0a:d6:8b:f2:50:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CE:B1:53:3F:DB:5E:6B:F7:C9:0D:81:02:8E:31:57:AF:CA:F2:E7
X509v3 Authority Key Identifier:
keyid:92:68:6C:85:2F:36:FB:E9:FC:8B:E7:7C:40:9B:52:26:A6:EE:54:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmhshS82--n8i-d8QJtSJqbuVNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d559b2-4b33-4f8d-9d21-ba71fbdb0374/1/kmhshS82--n8i-d8QJtSJqbuVNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:e6:61:da:2a:a7:86:8a:f0:70:0b:dd:f6:b9:c4:52:2a:c0:
6e:4f:04:35:26:67:17:f0:62:fd:7a:c9:6e:2b:2f:3b:5b:0f:
e3:84:1d:76:e6:59:87:3c:45:05:c6:08:89:31:12:25:c5:11:
d2:8c:d4:59:79:26:6f:df:7f:ec:49:fe:4e:7b:fe:15:b5:48:
8e:00:10:7d:f6:d8:f7:3d:6a:1c:7f:fc:22:cc:24:bf:e7:d7:
9b:bc:c1:b4:79:53:a2:0a:f5:6e:0d:f2:27:f1:8d:db:d5:e7:
73:66:30:76:0c:42:00:98:64:2c:b0:0b:de:6a:2c:e5:c6:a5:
de:c6:86:6c:6a:11:fa:30:df:5a:81:a6:51:45:6d:8c:59:c6:
0d:af:37:80:83:1d:2b:50:dd:e0:40:b4:97:39:a8:17:7a:a2:
58:64:0e:05:9f:07:89:dd:0d:48:cb:d7:89:47:51:dd:38:2e:
65:10:88:fb:df:c1:25:56:71:31:c1:09:9c:d7:65:df:8f:d9:
d0:86:97:fa:50:8e:4f:83:d4:49:58:be:70:44:fc:e1:93:a0:
32:a6:ad:e0:23:7b:a3:01:90:06:08:ff:97:be:d4:1b:f0:60:
20:16:21:6a:c8:98:65:af:7c:16:01:2e:31:f5:3b:69:b5:42:
cd:2d:4f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 07:17:46 2025 by rpki-client