Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
File: KY2bT7TP4nih65-iA1oInEwlaFg.mft (raw, json)
Hash identifier: 8nrBjcmPbVVWfbwEG1h5lI8juOl3hkv96BgbeboDD9o=
Subject key identifier: CE:8D:7B:82:25:CA:1B:4C:96:E2:90:59:F5:5B:D7:46:BC:F6:A8:F9
Authority key identifier: 29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58
Certificate issuer: /CN=298d9b4fb4cfe278a1eb9fa2035a089c4c256858
Certificate serial: 019654250556E5541E085CB69F409EAD7782
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
Manifest number: 0A83
Signing time: Sun 20 Apr 2025 17:00:34 +0000
Manifest this update: Sun 20 Apr 2025 17:00:34 +0000
Manifest next update: Mon 21 Apr 2025 17:00:34 +0000
Files and hashes: 1: KY2bT7TP4nih65-iA1oInEwlaFg.crl (hash: gVuYRQMCkwKKbbgccTBq4eYu+mEGzNswzM54Z0/Xr+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:05:56:e5:54:1e:08:5c:b6:9f:40:9e:ad:77:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=298d9b4fb4cfe278a1eb9fa2035a089c4c256858
Validity
Not Before: Apr 20 17:00:34 2025 GMT
Not After : Apr 21 17:00:34 2025 GMT
Subject: CN=ce8d7b8225ca1b4c96e29059f55bd746bcf6a8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:e0:c6:8c:8c:5f:03:a0:c0:e9:e8:01:0c:
3c:23:8a:e1:e8:46:37:9e:66:5b:e6:3a:4d:38:84:
af:14:20:65:59:9e:a8:fe:5b:e9:1a:19:f9:6c:7a:
2b:2f:87:ba:39:81:87:56:ba:8b:2b:ae:16:15:90:
7f:61:0c:04:07:5d:ea:7f:53:f6:fa:aa:05:a1:69:
cf:07:58:69:f3:78:20:5c:f7:2a:73:01:10:1a:07:
74:36:84:d3:1e:8d:c9:e8:d5:cb:ad:c4:f5:90:50:
22:2a:35:77:2f:c3:68:98:07:d1:ca:26:e1:48:61:
bb:13:76:c9:e1:f4:e2:a0:b6:36:cd:80:d9:9e:31:
2a:b5:b4:6a:b4:e1:11:2e:36:ec:b2:23:99:d1:a0:
b1:e0:d3:2f:6e:43:ac:09:7b:ec:17:61:67:a1:03:
8a:01:e6:59:63:22:86:c0:bb:9b:93:cd:7f:97:e9:
50:2d:90:e9:9a:0d:12:ff:28:a1:0e:b8:6d:33:ce:
ea:71:e7:30:8d:cb:2a:43:d0:7a:0c:53:8c:ef:09:
b0:01:da:47:1d:9a:f0:c9:d0:38:1c:fb:dc:3b:00:
53:14:f8:de:db:df:8c:9a:3a:b3:0d:2e:3a:3a:b2:
66:4b:59:86:51:fb:31:20:d4:1c:4a:6f:d1:01:4a:
d8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:8D:7B:82:25:CA:1B:4C:96:E2:90:59:F5:5B:D7:46:BC:F6:A8:F9
X509v3 Authority Key Identifier:
keyid:29:8D:9B:4F:B4:CF:E2:78:A1:EB:9F:A2:03:5A:08:9C:4C:25:68:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KY2bT7TP4nih65-iA1oInEwlaFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/737703-c8c1-4682-bb02-d800bdd686e3/1/KY2bT7TP4nih65-iA1oInEwlaFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2b:3c:f0:c2:db:09:c3:e5:73:8b:d4:48:a3:3f:bd:bd:c9:
53:ae:1d:19:af:27:a3:de:98:09:b2:f4:48:29:c8:d3:ca:8d:
9d:53:80:21:9a:15:fc:81:b4:c5:e4:1a:41:65:00:1a:b9:df:
ec:e9:5d:ba:2b:f1:a7:75:5c:77:73:37:67:98:b5:6e:73:59:
42:55:db:51:e9:76:cc:61:c7:90:96:a0:3a:38:56:c5:3e:d8:
54:55:1e:1b:59:e6:ad:db:6e:f4:b1:13:79:31:85:7f:dc:9e:
ed:9b:a8:88:7f:62:2f:79:ba:2c:a5:14:82:f4:50:33:97:e5:
a3:c0:7f:4f:6f:d2:d0:23:df:fb:67:c8:3c:76:37:9f:8f:1d:
b9:71:76:5c:2c:28:c7:c0:02:fd:7a:05:6c:14:da:3e:73:91:
b5:f6:29:6b:1b:38:02:a5:f5:e0:bc:cf:a9:32:50:a4:4a:6f:
7d:cf:91:93:44:3a:4f:35:7c:ad:82:d9:23:c7:75:4a:4e:43:
f1:eb:b6:54:5d:c7:cc:c6:b7:a5:6b:0c:20:85:ff:bf:76:3b:
21:13:8b:68:40:10:2e:53:5e:56:01:97:dd:cd:26:25:c8:23:
69:d4:7c:6e:f9:75:29:83:59:e0:41:23:bc:ec:de:00:35:aa:
db:45:e5:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJQVW5VQeCFy2n0CerXeCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5OGQ5YjRmYjRjZmUyNzhhMWViOWZhMjAzNWEwODljNGMy
NTY4NTgwHhcNMjUwNDIwMTcwMDM0WhcNMjUwNDIxMTcwMDM0WjAzMTEwLwYDVQQD
EyhjZThkN2I4MjI1Y2ExYjRjOTZlMjkwNTlmNTViZDc0NmJjZjZhOGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoC/gxoyMXwOgwOnoAQw8I4rh6EY3
nmZb5jpNOISvFCBlWZ6o/lvpGhn5bHorL4e6OYGHVrqLK64WFZB/YQwEB13qf1P2
+qoFoWnPB1hp83ggXPcqcwEQGgd0NoTTHo3J6NXLrcT1kFAiKjV3L8NomAfRyibh
SGG7E3bJ4fTioLY2zYDZnjEqtbRqtOERLjbssiOZ0aCx4NMvbkOsCXvsF2FnoQOK
AeZZYyKGwLubk81/l+lQLZDpmg0S/yihDrhtM87qcecwjcsqQ9B6DFOM7wmwAdpH
HZrwydA4HPvcOwBTFPje29+MmjqzDS46OrJmS1mGUfsxINQcSm/RAUrYfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM6Ne4IlyhtMluKQWfVb10a89qj5MB8GA1UdIwQY
MBaAFCmNm0+0z+J4oeufogNaCJxMJWhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1kyYlQ3VFA0bmloNjUtaUExb0luRXdsYUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83Mzc3MDMtYzhjMS00NjgyLWJiMDIt
ZDgwMGJkZDY4NmUzLzEvS1kyYlQ3VFA0bmloNjUtaUExb0luRXdsYUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83Mzc3MDMtYzhjMS00NjgyLWJiMDItZDgwMGJkZDY4NmUz
LzEvS1kyYlQ3VFA0bmloNjUtaUExb0luRXdsYUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSs88MLb
CcPlc4vUSKM/vb3JU64dGa8no96YCbL0SCnI08qNnVOAIZoV/IG0xeQaQWUAGrnf
7Olduivxp3Vcd3M3Z5i1bnNZQlXbUel2zGHHkJagOjhWxT7YVFUeG1nmrdtu9LET
eTGFf9ye7ZuoiH9iL3m6LKUUgvRQM5flo8B/T2/S0CPf+2fIPHY3n48duXF2XCwo
x8AC/XoFbBTaPnORtfYpaxs4AqX14LzPqTJQpEpvfc+Rk0Q6TzV8rYLZI8d1Sk5D
8eu2VF3HzMa3pWsMIIX/v3Y7IROLaEAQLlNeVgGX3c0mJcgjadR8bvl1KYNZ4EEj
vOzeADWq20Xlyw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 03:58:38 2025 by rpki-client