Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: F58AIfgVc1icIDK1Uw7WsIdK1f1U4SQvr0kDZqjzD0k=
Subject key identifier: 9F:30:01:B9:3B:11:DB:F8:08:5B:55:AC:81:45:F5:FE:2D:AC:29:41
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 01965EDF4D92F94B8B22F918DC3781B248AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 14FF
Signing time: Tue 22 Apr 2025 19:00:14 +0000
Manifest this update: Tue 22 Apr 2025 19:00:14 +0000
Manifest next update: Wed 23 Apr 2025 19:00:14 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: GY5AtGRaLRNFQfrNIzd+wQPT+xE25jo/1QChwFS3df0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 19:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5e:df:4d:92:f9:4b:8b:22:f9:18:dc:37:81:b2:48:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: Apr 22 19:00:14 2025 GMT
Not After : Apr 23 19:00:14 2025 GMT
Subject: CN=9f3001b93b11dbf8085b55ac8145f5fe2dac2941
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:47:29:e4:ea:77:ab:89:2b:c8:e9:c7:f1:
0d:cf:fd:b5:d1:8b:bc:57:54:c3:27:32:58:e8:b0:
f2:e2:c8:a2:d7:cc:e3:c3:d5:37:25:bf:4e:d4:bc:
5e:61:6e:fa:bc:4e:8c:07:4e:6b:a6:ae:6c:c7:c9:
42:13:6c:fb:41:40:18:b3:db:6b:2c:c4:f9:4e:82:
72:00:f0:3d:7d:80:41:0f:2d:12:46:cb:d2:30:6c:
6e:e7:0d:d8:72:15:5d:40:2e:68:b5:bc:b5:5a:b2:
bb:ba:33:7d:00:be:ae:78:62:f4:b5:eb:44:d8:d5:
63:a6:a2:66:c9:51:26:4a:e0:90:16:f9:7f:82:07:
c8:b1:16:a6:8b:74:b1:71:50:ac:98:3a:71:fd:66:
e5:54:75:53:61:ad:d0:e5:38:da:61:aa:b9:b9:40:
48:0b:cc:ea:25:50:90:5b:11:f2:08:5a:ee:85:0f:
4f:79:e0:a3:32:77:c8:69:2d:ba:4f:24:65:08:de:
47:82:ed:7b:7e:38:30:4f:f3:7a:66:e0:4c:58:14:
ef:0a:6c:c9:aa:ec:1e:0b:e3:5a:45:91:db:19:29:
8e:7b:35:ff:d5:18:c7:e3:b9:ab:8a:be:e0:b8:08:
d9:87:c4:ea:21:5f:70:d0:e1:2e:32:4e:d1:54:3d:
c6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:01:B9:3B:11:DB:F8:08:5B:55:AC:81:45:F5:FE:2D:AC:29:41
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:99:fd:3f:67:11:7f:82:92:a2:9e:bf:83:2a:d8:f0:c2:55:
39:4b:72:08:61:b2:49:0f:70:e1:35:7e:ca:23:65:67:61:6d:
01:70:13:0b:1e:2b:01:e0:18:a1:56:73:58:88:75:b1:35:04:
db:4d:ec:20:2e:a4:69:a7:a2:2e:d9:4e:96:49:fb:b4:01:7e:
a4:5b:d1:50:05:c7:f8:dd:c0:4c:58:d1:4a:0a:ad:92:71:8d:
2a:a0:92:8d:98:a0:cd:94:eb:31:3a:57:45:9b:09:ee:4e:0a:
a8:a6:51:8c:40:a4:ee:d1:a1:3f:58:ff:b5:f9:f1:07:e4:20:
34:36:a2:b9:9a:00:e1:32:9d:6f:fd:a4:45:aa:65:8e:16:d4:
f6:73:e2:0d:21:83:30:02:3c:a3:7d:e1:c8:68:fb:55:b8:84:
21:fa:c9:56:b2:07:10:ee:d0:8e:3d:68:ee:22:24:6d:81:59:
42:94:a7:46:00:9a:a7:5f:1f:61:51:73:e5:08:f7:93:04:d7:
0f:8d:e6:2c:6a:5b:03:e3:6a:e2:46:cc:3a:b0:d3:cc:11:95:
4e:df:ba:d3:15:01:7a:56:76:6b:28:e6:51:3e:cc:aa:07:07:
88:3d:a7:97:f6:39:5f:80:f9:c3:c5:ec:46:98:1d:a3:5c:98:
6a:0d:a1:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZe302S+UuLIvkY3DeBskisMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjdhZmVjNGQzZjA2ZjgwZDY4NzJhNmQ2MjQ2Y2QwMWU3
M2Q2YTYwHhcNMjUwNDIyMTkwMDE0WhcNMjUwNDIzMTkwMDE0WjAzMTEwLwYDVQQD
Eyg5ZjMwMDFiOTNiMTFkYmY4MDg1YjU1YWM4MTQ1ZjVmZTJkYWMyOTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroxHKeTqd6uJK8jpx/ENz/210Yu8
V1TDJzJY6LDy4sii18zjw9U3Jb9O1LxeYW76vE6MB05rpq5sx8lCE2z7QUAYs9tr
LMT5ToJyAPA9fYBBDy0SRsvSMGxu5w3YchVdQC5otby1WrK7ujN9AL6ueGL0tetE
2NVjpqJmyVEmSuCQFvl/ggfIsRami3SxcVCsmDpx/WblVHVTYa3Q5TjaYaq5uUBI
C8zqJVCQWxHyCFruhQ9PeeCjMnfIaS26TyRlCN5Hgu17fjgwT/N6ZuBMWBTvCmzJ
quweC+NaRZHbGSmOezX/1RjH47mrir7guAjZh8TqIV9w0OEuMk7RVD3GhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8wAbk7Edv4CFtVrIFF9f4trClBMB8GA1UdIwQY
MBaAFCj3r+xNPwb4DWhyptYkbNAec9amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjct
NTc2ZDQwM2M5MThmLzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjctNTc2ZDQwM2M5MThm
LzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5Zn9P2cR
f4KSop6/gyrY8MJVOUtyCGGySQ9w4TV+yiNlZ2FtAXATCx4rAeAYoVZzWIh1sTUE
203sIC6kaaeiLtlOlkn7tAF+pFvRUAXH+N3ATFjRSgqtknGNKqCSjZigzZTrMTpX
RZsJ7k4KqKZRjECk7tGhP1j/tfnxB+QgNDaiuZoA4TKdb/2kRapljhbU9nPiDSGD
MAI8o33hyGj7VbiEIfrJVrIHEO7Qjj1o7iIkbYFZQpSnRgCap18fYVFz5Qj3kwTX
D43mLGpbA+Nq4kbMOrDTzBGVTt+60xUBelZ2ayjmUT7MqgcHiD2nl/Y5X4D5w8Xs
Rpgdo1yYag2hIA==
-----END CERTIFICATE-----
Generated at Wed Apr 23 01:17:50 2025 by rpki-client