Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
File: KqttsAX47NmhIcY2hYB17xMUXbA.mft (raw, json)
Hash identifier: DxLS0J6dKIz9ci8ZKWB8vBQc6hyJXHETrpBXN1Gyd/g=
Subject key identifier: C0:C9:D2:BB:88:18:58:4E:1A:B1:ED:39:E4:1D:81:F9:03:D0:1A:CC
Authority key identifier: 2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
Certificate issuer: /CN=2aab6db005f8ecd9a121c636858075ef13145db0
Certificate serial: 01965500CF4CEB8F90D547717CFB7267ED38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
Manifest number: 0EF9
Signing time: Sun 20 Apr 2025 21:00:38 +0000
Manifest this update: Sun 20 Apr 2025 21:00:38 +0000
Manifest next update: Mon 21 Apr 2025 21:00:38 +0000
Files and hashes: 1: KqttsAX47NmhIcY2hYB17xMUXbA.crl (hash: rnza2hLaEqeeifJGHpJSaSno8W5kabm7Dtg9xE46Wz8=)
2: NTwv9MrFUxU0rREuWqapE-DiajI.roa (hash: hq+d0ybPFOeu8D+rx2edFf/i0EP0Jbrx83E12M+26zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:00:cf:4c:eb:8f:90:d5:47:71:7c:fb:72:67:ed:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aab6db005f8ecd9a121c636858075ef13145db0
Validity
Not Before: Apr 20 21:00:38 2025 GMT
Not After : Apr 21 21:00:38 2025 GMT
Subject: CN=c0c9d2bb8818584e1ab1ed39e41d81f903d01acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:74:12:ac:cb:df:ea:bc:11:b8:1a:43:3f:23:
4a:f2:41:91:bb:d3:67:e7:51:b4:59:7c:e6:95:19:
2b:b9:be:6a:b0:ea:15:96:1d:16:00:7e:86:04:c5:
ea:ac:6f:d4:0b:0d:ca:46:f0:9a:83:f1:10:ab:37:
97:a0:23:d9:44:de:2b:5f:cf:c6:fa:40:e6:40:8f:
eb:59:47:2c:6a:dd:2a:b2:89:fe:d7:5a:b0:09:90:
00:d8:20:f4:2d:7a:2d:0c:d5:85:93:58:12:ff:d8:
36:15:8c:f4:27:b3:00:54:b3:8b:6c:4c:20:68:6c:
b9:06:fc:6c:a8:e8:61:da:ee:92:5b:bc:1c:40:b0:
20:e9:45:a8:9c:4b:a0:c9:3d:28:a2:a0:02:1c:dd:
1d:e6:ab:bb:09:3c:07:0b:cc:f5:cf:b3:4d:de:a3:
6f:04:b0:ca:de:fb:fa:ad:4f:1d:f7:db:95:50:4f:
e5:1c:9a:89:ac:26:66:f0:6c:6e:04:1f:e5:45:ec:
2d:fe:ff:73:1c:2c:02:1f:d8:b4:8a:77:ce:f7:0e:
d9:6a:08:92:45:28:bb:53:73:df:fe:09:55:a6:b0:
bb:06:09:27:64:ff:b5:46:0b:56:f9:df:ac:1a:3c:
dc:c0:4d:e7:54:db:f4:0f:4a:68:bb:4e:e0:a0:7c:
4f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:C9:D2:BB:88:18:58:4E:1A:B1:ED:39:E4:1D:81:F9:03:D0:1A:CC
X509v3 Authority Key Identifier:
keyid:2A:AB:6D:B0:05:F8:EC:D9:A1:21:C6:36:85:80:75:EF:13:14:5D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqttsAX47NmhIcY2hYB17xMUXbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c17ba-5ab4-4f59-b4be-ad6a81b82a17/1/KqttsAX47NmhIcY2hYB17xMUXbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:4e:86:0c:1c:2a:74:d6:36:dc:55:a3:20:b1:70:a2:83:a1:
76:c1:3f:6e:4a:9d:bd:65:f3:84:b7:57:b5:64:9f:ef:80:c6:
b9:96:23:23:15:2b:4e:d7:9d:39:52:c7:10:96:92:22:80:40:
7d:ee:92:7c:4e:4d:da:2d:f0:ff:61:03:a1:5f:be:71:2c:a7:
29:4d:51:d6:af:16:7c:76:d8:62:9d:37:df:46:73:93:a1:59:
a6:b0:d8:30:4a:29:7c:a6:7a:3a:b2:6b:b4:4c:82:e7:14:47:
a9:6a:e8:53:91:fd:24:8a:e0:5e:97:8a:dd:26:6f:76:e0:55:
9a:34:a3:3c:77:22:43:0d:0c:25:da:85:e6:ed:10:62:e5:a9:
5e:62:f0:93:e6:59:5d:42:91:8f:7b:e5:85:10:6d:f7:aa:b7:
64:a6:43:48:ed:39:a1:3b:2e:65:07:f2:0d:d2:6d:d2:3b:d7:
3c:65:e0:4e:00:9d:fb:c0:68:94:af:15:42:7a:0c:14:32:7e:
4c:4a:1c:97:18:f8:ae:d7:8a:71:0b:9b:52:72:5a:95:45:ce:
58:54:ed:47:43:e9:d8:1a:d5:70:dd:59:15:ef:e0:f6:19:7e:
b8:b5:ff:89:c9:b5:26:2c:56:72:64:7c:40:c2:7e:3f:09:52:
e8:ed:0c:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVAM9M64+Q1UdxfPtyZ+04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWI2ZGIwMDVmOGVjZDlhMTIxYzYzNjg1ODA3NWVmMTMx
NDVkYjAwHhcNMjUwNDIwMjEwMDM4WhcNMjUwNDIxMjEwMDM4WjAzMTEwLwYDVQQD
EyhjMGM5ZDJiYjg4MTg1ODRlMWFiMWVkMzllNDFkODFmOTAzZDAxYWNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nQSrMvf6rwRuBpDPyNK8kGRu9Nn
51G0WXzmlRkrub5qsOoVlh0WAH6GBMXqrG/UCw3KRvCag/EQqzeXoCPZRN4rX8/G
+kDmQI/rWUcsat0qson+11qwCZAA2CD0LXotDNWFk1gS/9g2FYz0J7MAVLOLbEwg
aGy5BvxsqOhh2u6SW7wcQLAg6UWonEugyT0ooqACHN0d5qu7CTwHC8z1z7NN3qNv
BLDK3vv6rU8d99uVUE/lHJqJrCZm8GxuBB/lRewt/v9zHCwCH9i0infO9w7ZagiS
RSi7U3Pf/glVprC7BgknZP+1RgtW+d+sGjzcwE3nVNv0D0pou07goHxPvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDJ0ruIGFhOGrHtOeQdgfkD0BrMMB8GA1UdIwQY
MBaAFCqrbbAF+OzZoSHGNoWAde8TFF2wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUt
YWQ2YTgxYjgyYTE3LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84YzE3YmEtNWFiNC00ZjU5LWI0YmUtYWQ2YTgxYjgyYTE3
LzEvS3F0dHNBWDQ3Tm1oSWNZMmhZQjE3eE1VWGJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvE6GDBwq
dNY23FWjILFwooOhdsE/bkqdvWXzhLdXtWSf74DGuZYjIxUrTtedOVLHEJaSIoBA
fe6SfE5N2i3w/2EDoV++cSynKU1R1q8WfHbYYp0330Zzk6FZprDYMEopfKZ6OrJr
tEyC5xRHqWroU5H9JIrgXpeK3SZvduBVmjSjPHciQw0MJdqF5u0QYuWpXmLwk+ZZ
XUKRj3vlhRBt96q3ZKZDSO05oTsuZQfyDdJt0jvXPGXgTgCd+8BolK8VQnoMFDJ+
TEoclxj4rteKcQubUnJalUXOWFTtR0Pp2BrVcN1ZFe/g9hl+uLX/icm1JixWcmR8
QMJ+PwlS6O0MKQ==
-----END CERTIFICATE-----
Generated at Mon Apr 21 01:19:20 2025 by rpki-client