Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
File: kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft (raw, json)
Hash identifier: AsGtwVIaNkGnLLTWY7V1bRI6ljUPpnJvbcdUerlQEMk=
Subject key identifier: 60:58:CE:CE:C1:C2:70:7F:9A:29:11:36:11:9E:66:6C:E4:37:AB:E1
Authority key identifier: 90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
Certificate issuer: /CN=909b5788960bd179056848ec956fd611d4cf8094
Certificate serial: 01965A95355E341CD8FB99A2D4942A982B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
Manifest number: 1346
Signing time: Mon 21 Apr 2025 23:00:49 +0000
Manifest this update: Mon 21 Apr 2025 23:00:49 +0000
Manifest next update: Tue 22 Apr 2025 23:00:49 +0000
Files and hashes: 1: kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl (hash: 2tktyoBGDotKSafY6LkVSqarUU2MthfQOEuwp8BW22Q=)
2: pOvhTWtU4kelyPZ1fpMoPO101II.roa (hash: WJ4/oAtZUHsxbOhd3cJHFGOETOXNUNiMfn725elzUrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:95:35:5e:34:1c:d8:fb:99:a2:d4:94:2a:98:2b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=909b5788960bd179056848ec956fd611d4cf8094
Validity
Not Before: Apr 21 23:00:49 2025 GMT
Not After : Apr 22 23:00:49 2025 GMT
Subject: CN=6058cecec1c2707f9a291136119e666ce437abe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ed:f3:f4:47:a0:7a:f0:c4:3b:59:74:a6:a5:
fb:34:36:6d:14:b1:4f:af:40:86:b5:03:4a:ae:55:
79:02:96:ad:ad:bf:86:45:14:15:a4:66:58:98:32:
2f:14:6d:60:0c:bf:d6:d9:01:e2:8d:0c:dc:3c:f2:
5b:fe:0e:fa:a8:5a:24:f4:39:66:40:0a:0e:ce:68:
fe:26:ce:6d:3e:8f:4f:a5:5b:96:57:70:c0:24:ea:
be:95:70:3b:ef:0a:0f:8f:e9:fe:66:62:12:49:d6:
d3:ac:60:37:7f:2b:5d:c9:24:d4:f2:4b:27:2d:f0:
5b:3d:1b:c1:ac:8b:d3:b6:f6:e0:c5:fa:b6:71:04:
ea:7f:68:1a:73:06:8d:44:08:47:dd:f6:b0:43:93:
b1:d3:f2:8d:bc:55:81:49:3f:6a:c0:ff:90:b8:fd:
a4:ca:54:b7:15:8d:71:c5:f9:ad:a0:ee:e7:8a:e5:
3a:5d:c8:e4:a2:7e:8f:8b:f5:3a:6b:02:82:75:d7:
3d:4d:fe:f8:f0:04:b0:ae:23:93:5e:89:31:31:24:
98:d4:ad:02:22:e0:3f:75:eb:45:c0:a6:4b:30:1d:
85:e0:a8:68:b5:9a:30:9a:49:b5:1a:4b:4b:a3:55:
4b:ca:39:95:eb:4c:fc:78:b1:d0:8d:18:f8:96:89:
b8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:58:CE:CE:C1:C2:70:7F:9A:29:11:36:11:9E:66:6C:E4:37:AB:E1
X509v3 Authority Key Identifier:
keyid:90:9B:57:88:96:0B:D1:79:05:68:48:EC:95:6F:D6:11:D4:CF:80:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kJtXiJYL0XkFaEjslW_WEdTPgJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6c0e25-81a5-4900-b6b7-df4c9f34dc5b/1/kJtXiJYL0XkFaEjslW_WEdTPgJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:c3:25:b8:7c:56:59:36:d0:ac:98:a6:36:7e:17:98:28:
99:66:9c:9b:a2:fe:9b:58:bc:64:00:4d:28:07:e0:ac:1d:5a:
1f:cf:ef:47:46:7d:62:5b:33:91:66:d4:f8:b6:b6:42:41:de:
c5:b8:99:ef:58:f7:7c:5b:8c:8f:aa:26:97:1d:f8:83:39:94:
6c:67:4a:7b:88:45:53:51:84:6b:48:fc:d4:fc:e3:e7:5c:44:
01:72:38:c8:0e:ba:c4:0e:51:d1:b0:6e:8c:72:3d:59:dc:6c:
46:4e:e2:1d:2f:f6:ec:55:c3:12:17:3e:79:64:50:92:6f:72:
02:82:45:8f:4d:9b:df:41:86:d6:50:ec:3a:22:f2:68:da:69:
1c:b4:ea:d4:7f:51:9a:a0:c7:d2:04:91:6f:ba:07:24:7a:5c:
eb:ea:65:32:1d:96:71:b1:d0:cf:d8:e9:23:78:9a:d1:5b:69:
84:1c:a9:55:06:c6:d7:c0:e4:51:7c:4b:50:fc:15:d4:55:36:
f5:4c:6d:30:ae:7a:ee:61:c2:09:e8:aa:7a:21:a2:66:e1:fe:
ac:3c:64:9a:cb:47:ee:fa:90:73:02:a3:71:f3:d8:8c:88:bd:
5c:68:a6:5a:0d:d0:59:be:37:7b:5f:f7:31:22:4b:05:1f:b8:
36:a7:d5:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZalTVeNBzY+5mi1JQqmCtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwOWI1Nzg4OTYwYmQxNzkwNTY4NDhlYzk1NmZkNjExZDRj
ZjgwOTQwHhcNMjUwNDIxMjMwMDQ5WhcNMjUwNDIyMjMwMDQ5WjAzMTEwLwYDVQQD
Eyg2MDU4Y2VjZWMxYzI3MDdmOWEyOTExMzYxMTllNjY2Y2U0MzdhYmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu3z9EegevDEO1l0pqX7NDZtFLFP
r0CGtQNKrlV5Apatrb+GRRQVpGZYmDIvFG1gDL/W2QHijQzcPPJb/g76qFok9Dlm
QAoOzmj+Js5tPo9PpVuWV3DAJOq+lXA77woPj+n+ZmISSdbTrGA3fytdySTU8ksn
LfBbPRvBrIvTtvbgxfq2cQTqf2gacwaNRAhH3fawQ5Ox0/KNvFWBST9qwP+QuP2k
ylS3FY1xxfmtoO7niuU6Xcjkon6Pi/U6awKCddc9Tf748ASwriOTXokxMSSY1K0C
IuA/detFwKZLMB2F4KhotZowmkm1GktLo1VLyjmV60z8eLHQjRj4lom4AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGBYzs7BwnB/mikRNhGeZmzkN6vhMB8GA1UdIwQY
MBaAFJCbV4iWC9F5BWhI7JVv1hHUz4CUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2Yjct
ZGY0YzlmMzRkYzViLzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82YzBlMjUtODFhNS00OTAwLWI2YjctZGY0YzlmMzRkYzVi
LzEva0p0WGlKWUwwWGtGYUVqc2xXX1dFZFRQZ0pRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgC/DJbh8
Vlk20KyYpjZ+F5gomWacm6L+m1i8ZABNKAfgrB1aH8/vR0Z9YlszkWbU+La2QkHe
xbiZ71j3fFuMj6omlx34gzmUbGdKe4hFU1GEa0j81Pzj51xEAXI4yA66xA5R0bBu
jHI9WdxsRk7iHS/27FXDEhc+eWRQkm9yAoJFj02b30GG1lDsOiLyaNppHLTq1H9R
mqDH0gSRb7oHJHpc6+plMh2WcbHQz9jpI3ia0VtphBypVQbG18DkUXxLUPwV1FU2
9UxtMK567mHCCeiqeiGiZuH+rDxkmstH7vqQcwKjcfPYjIi9XGimWg3QWb43e1/3
MSJLBR+4NqfVIw==
-----END CERTIFICATE-----
Generated at Tue Apr 22 02:19:45 2025 by rpki-client