Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
File: KYOEG8CfH9T-PemRAWwLcSb7pS4.mft (raw, json)
Hash identifier: rTf6AJZKS2pmpNdP1liZg32fvVH7JPzQVsKDZUzaJ4A=
Subject key identifier: 5E:79:B5:80:C1:62:2A:D9:45:D8:AE:DA:D1:91:B7:F7:7C:05:99:8B
Authority key identifier: 29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
Certificate issuer: /CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Certificate serial: 01960A1E270A5F7D791CA765A65A9FF383A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
Manifest number: 0CFE
Signing time: Sun 06 Apr 2025 08:01:10 +0000
Manifest this update: Sun 06 Apr 2025 08:01:10 +0000
Manifest next update: Mon 07 Apr 2025 08:01:10 +0000
Files and hashes: 1: 8L44IrkkvnWwO7YzdGP90TGDjSg.roa (hash: CEFaAsOLSJVrCdoCjPllcGxEqTE9RA4Tw9wSIQ0mmME=)
2: KYOEG8CfH9T-PemRAWwLcSb7pS4.crl (hash: UgBBj/UUaW8YXIYvkA4aLxwhTBL9GfOrDIyoowKldm8=)
3: OMy-NMj_4HIKuan-FU4-4R9F2VI.roa (hash: VHuQhVgSLMPab+0JI81gOVigOiNulGK5eNNR2LqAh78=)
4: tG9g7Co1XH6U8tZyoXMC-RjzpsI.roa (hash: f5hLHvCO22cXuPn8MfVWI6zy/RfS3YcwLYdVmDvuy/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:0a:1e:27:0a:5f:7d:79:1c:a7:65:a6:5a:9f:f3:83:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983841bc09f1fd4fe3de991016c0b7126fba52e
Validity
Not Before: Apr 6 08:01:10 2025 GMT
Not After : Apr 7 08:01:10 2025 GMT
Subject: CN=5e79b580c1622ad945d8aedad191b7f77c05998b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:d1:0f:a3:6a:ea:c6:29:47:91:dd:ea:2e:
fe:de:f9:c1:c8:4b:b7:10:cf:ec:68:a3:4e:04:25:
e7:4a:be:66:fe:0f:a5:01:9e:9b:f7:d6:2b:d0:54:
ac:d7:4e:01:66:3b:4f:58:86:71:44:c5:d2:37:ca:
33:d7:ae:7d:63:a8:7a:79:03:38:0b:4b:4b:46:6d:
1b:5d:08:2e:cc:9b:d9:e0:96:e4:e8:17:8a:59:86:
71:1a:f2:c9:f1:24:4c:62:5c:a8:30:50:a3:b8:69:
e9:45:4e:15:a9:05:6d:b0:cf:f8:d2:10:65:d9:64:
3c:1d:51:94:2b:8b:ec:51:28:4f:2d:b4:bd:f0:b2:
37:30:af:5c:c8:4a:17:67:5e:fd:bb:4d:b7:31:c2:
4e:9f:0b:13:43:58:e6:4d:4f:5b:f4:8c:cb:1c:26:
17:1d:98:55:5b:68:68:b6:6b:f2:5d:ab:9b:3c:be:
fa:92:87:e4:d4:41:30:77:ed:a0:a9:88:5c:d8:dc:
90:0f:fa:aa:c4:3b:30:a5:73:c3:6e:5e:e3:5f:a2:
19:9d:59:e1:07:2e:eb:b0:38:26:9f:0a:ce:18:4d:
1b:53:37:94:31:39:74:10:64:47:ad:9f:81:17:5a:
d6:90:87:4f:3c:48:37:c0:40:b9:f7:1d:e0:e6:92:
f2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:79:B5:80:C1:62:2A:D9:45:D8:AE:DA:D1:91:B7:F7:7C:05:99:8B
X509v3 Authority Key Identifier:
keyid:29:83:84:1B:C0:9F:1F:D4:FE:3D:E9:91:01:6C:0B:71:26:FB:A5:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYOEG8CfH9T-PemRAWwLcSb7pS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/cc37cf-b056-41d9-b57b-1dd5dab36f9f/1/KYOEG8CfH9T-PemRAWwLcSb7pS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2b:9a:19:7e:05:43:02:ce:34:02:ad:47:63:6f:23:30:86:
88:bb:45:6d:82:8e:1a:bb:6b:80:f3:df:af:b6:cb:71:61:cd:
f7:db:00:f3:a2:c0:1d:df:7c:5f:d2:cd:89:fd:39:67:1a:85:
fc:48:56:f8:43:e0:a5:31:c4:64:3b:af:dc:17:70:dc:a6:ef:
2a:a5:17:85:99:1a:f6:e8:cc:03:96:15:5f:c3:00:32:ae:67:
dc:40:af:c2:3b:95:93:4e:2b:a6:da:62:d8:9d:9f:85:38:df:
61:de:46:82:29:92:90:c3:3f:0f:ed:bd:c0:91:b8:27:cc:32:
bd:89:26:26:6c:cb:c9:38:44:b3:36:d5:2d:c5:fc:cc:36:1d:
7e:cb:30:39:c8:9b:13:ea:db:fb:e8:07:b9:61:ad:a2:06:d7:
7a:19:fa:7e:a7:c4:16:6e:d3:6d:8a:64:64:c4:07:d1:38:cb:
40:9a:ef:17:a6:0f:3e:f6:66:ed:35:df:23:89:aa:18:16:90:
d8:2d:4c:18:82:b6:40:a0:8d:fa:0c:2e:d7:39:e8:6a:88:9b:
d5:06:3b:90:7f:a5:11:9c:d9:63:a0:6d:6e:51:5b:e1:53:08:
6a:bf:0f:01:d2:c8:6c:39:1e:9f:37:f1:94:17:b8:61:09:73:
05:89:17:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYKHicKX315HKdlplqf84OjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODM4NDFiYzA5ZjFmZDRmZTNkZTk5MTAxNmMwYjcxMjZm
YmE1MmUwHhcNMjUwNDA2MDgwMTEwWhcNMjUwNDA3MDgwMTEwWjAzMTEwLwYDVQQD
Eyg1ZTc5YjU4MGMxNjIyYWQ5NDVkOGFlZGFkMTkxYjdmNzdjMDU5OThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7vRD6Nq6sYpR5Hd6i7+3vnByEu3
EM/saKNOBCXnSr5m/g+lAZ6b99Yr0FSs104BZjtPWIZxRMXSN8oz1659Y6h6eQM4
C0tLRm0bXQguzJvZ4Jbk6BeKWYZxGvLJ8SRMYlyoMFCjuGnpRU4VqQVtsM/40hBl
2WQ8HVGUK4vsUShPLbS98LI3MK9cyEoXZ179u023McJOnwsTQ1jmTU9b9IzLHCYX
HZhVW2hotmvyXaubPL76kofk1EEwd+2gqYhc2NyQD/qqxDswpXPDbl7jX6IZnVnh
By7rsDgmnwrOGE0bUzeUMTl0EGRHrZ+BF1rWkIdPPEg3wEC59x3g5pLy1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF55tYDBYirZRdiu2tGRt/d8BZmLMB8GA1UdIwQY
MBaAFCmDhBvAnx/U/j3pkQFsC3Em+6UuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2It
MWRkNWRhYjM2ZjlmLzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jYzM3Y2YtYjA1Ni00MWQ5LWI1N2ItMWRkNWRhYjM2Zjlm
LzEvS1lPRUc4Q2ZIOVQtUGVtUkFXd0xjU2I3cFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOCuaGX4F
QwLONAKtR2NvIzCGiLtFbYKOGrtrgPPfr7bLcWHN99sA86LAHd98X9LNif05ZxqF
/EhW+EPgpTHEZDuv3Bdw3KbvKqUXhZka9ujMA5YVX8MAMq5n3ECvwjuVk04rptpi
2J2fhTjfYd5GgimSkMM/D+29wJG4J8wyvYkmJmzLyThEszbVLcX8zDYdfsswOcib
E+rb++gHuWGtogbXehn6fqfEFm7TbYpkZMQH0TjLQJrvF6YPPvZm7TXfI4mqGBaQ
2C1MGIK2QKCN+gwu1znoaoib1QY7kH+lEZzZY6BtblFb4VMIar8PAdLIbDkenzfx
lBe4YQlzBYkX3A==
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:41:03 2025 by rpki-client