Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: utyPqckplPFqdYuQ/kASVpWzjkCgtgkxwJHVeKqLvFk=
Subject key identifier: D6:70:BE:45:2B:49:18:3B:60:A0:89:B5:C0:F0:7D:03:C0:2F:DB:81
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 01965838A4E74FA08F35290C18BE62AE3983
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 14FE
Signing time: Mon 21 Apr 2025 12:00:29 +0000
Manifest this update: Mon 21 Apr 2025 12:00:29 +0000
Manifest next update: Tue 22 Apr 2025 12:00:29 +0000
Files and hashes: 1: 2ZWGjOJRjPHh5vUmuBkXmOeyAXA.roa (hash: kLXH6SccoLYnkJO+CuKpGrRpPoXv66yopZLZsS2CgSg=)
2: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: zMFsxUnl6m6pPoiK3nZOyVM4/ublMOT3+UuTncWBCDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:58:38:a4:e7:4f:a0:8f:35:29:0c:18:be:62:ae:39:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Apr 21 12:00:29 2025 GMT
Not After : Apr 22 12:00:29 2025 GMT
Subject: CN=d670be452b49183b60a089b5c0f07d03c02fdb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:bc:fa:dd:7a:d2:04:33:ca:c7:0d:36:43:
6b:ef:46:f7:34:c7:51:ee:d2:f0:93:4f:aa:1c:b4:
8b:d1:e4:9a:d2:2a:cb:07:12:71:4f:a6:d1:bf:13:
3d:8c:a1:df:49:0f:8d:82:4c:81:38:df:af:41:2f:
52:0f:a9:f1:e3:ba:78:b5:5b:0f:8e:62:dc:0f:4d:
24:03:13:53:aa:c5:47:c9:f0:3a:5c:ca:fd:e7:05:
8c:78:de:fa:73:e0:c6:de:8f:45:fc:43:16:ef:8d:
1b:88:3d:97:eb:18:a0:fb:ea:6f:1a:13:f6:e9:f0:
f3:18:e5:23:16:b8:f9:b8:26:22:9e:00:1f:e5:b3:
35:b2:53:6a:a1:ca:9e:02:62:72:d5:18:14:a9:48:
df:b2:5c:b1:31:e1:cd:8d:78:9f:2c:52:4b:b8:7e:
91:8a:21:22:e9:29:21:9a:d9:f9:70:6b:6c:df:b5:
06:04:96:ac:aa:31:f1:db:80:4e:03:27:95:f3:26:
25:90:a8:5b:9b:ea:c1:91:5f:27:07:cb:15:27:61:
04:60:40:3d:35:a5:e0:39:61:45:41:dc:7c:6d:23:
69:7a:13:21:d3:fa:42:75:88:a4:82:d4:56:f9:66:
3c:a0:66:bd:b5:ba:43:62:f0:07:2f:8d:f1:b9:80:
14:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:70:BE:45:2B:49:18:3B:60:A0:89:B5:C0:F0:7D:03:C0:2F:DB:81
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:99:7e:6d:d4:80:09:a0:5d:39:58:50:3f:30:59:85:ff:25:
cd:79:ee:4c:5e:1a:67:c6:62:cc:71:3a:fd:bf:2e:73:77:5c:
49:6d:4f:fc:4d:2d:61:0e:79:f6:8b:9c:f9:91:99:3c:35:f8:
48:4b:6a:68:9f:03:ff:4c:d9:50:21:48:65:aa:eb:e5:8f:df:
49:3a:b3:f8:fe:fc:e1:fa:8f:52:33:fc:40:2e:b1:19:32:8a:
6f:21:cd:60:74:7d:3c:7c:81:5f:8a:10:a5:76:9f:fb:4a:f3:
3b:37:06:f1:9e:f4:18:8a:41:6f:42:72:28:66:3e:f6:b8:57:
75:54:d7:b1:df:21:97:4c:0e:1e:d0:89:11:04:35:98:6e:27:
37:9b:d6:3c:69:5d:d0:b8:a8:13:69:ce:6a:b9:55:6e:69:c2:
1a:68:64:18:b3:f6:ba:2b:e1:14:5b:34:ba:12:86:8c:fa:42:
bf:68:28:b4:76:c5:b7:0a:6d:41:f5:2d:e9:8f:44:cf:33:44:
87:22:9a:c6:f4:63:42:15:83:4e:ae:13:58:25:2e:76:a3:ca:
39:79:19:b0:1d:38:5b:c1:08:b7:67:76:75:d0:a0:6c:75:31:
8c:ad:c6:f3:fb:82:e1:c9:c0:45:9d:89:29:09:da:d4:a4:55:
e7:47:d0:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZYOKTnT6CPNSkMGL5irjmDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzNTI5OTI0YjIzM2FjNTYzYzA4ZTBjMzEzZTI5MjEzZmQ5
Njk2NjkwHhcNMjUwNDIxMTIwMDI5WhcNMjUwNDIyMTIwMDI5WjAzMTEwLwYDVQQD
EyhkNjcwYmU0NTJiNDkxODNiNjBhMDg5YjVjMGYwN2QwM2MwMmZkYjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnha8+t160gQzyscNNkNr70b3NMdR
7tLwk0+qHLSL0eSa0irLBxJxT6bRvxM9jKHfSQ+NgkyBON+vQS9SD6nx47p4tVsP
jmLcD00kAxNTqsVHyfA6XMr95wWMeN76c+DG3o9F/EMW740biD2X6xig++pvGhP2
6fDzGOUjFrj5uCYingAf5bM1slNqocqeAmJy1RgUqUjfslyxMeHNjXifLFJLuH6R
iiEi6Skhmtn5cGts37UGBJasqjHx24BOAyeV8yYlkKhbm+rBkV8nB8sVJ2EEYEA9
NaXgOWFFQdx8bSNpehMh0/pCdYikgtRW+WY8oGa9tbpDYvAHL43xuYAU6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZwvkUrSRg7YKCJtcDwfQPAL9uBMB8GA1UdIwQY
MBaAFFNSmSSyM6xWPAjgwxPikhP9lpZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQt
OTQ0MTU2OTBkZGZkLzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8wZTI3MTQtOWRkNi00ZmU4LWFiMjQtOTQ0MTU2OTBkZGZk
LzEvVTFLWkpMSXpyRlk4Q09EREUtS1NFXzJXbG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJl+bdSA
CaBdOVhQPzBZhf8lzXnuTF4aZ8ZizHE6/b8uc3dcSW1P/E0tYQ559ouc+ZGZPDX4
SEtqaJ8D/0zZUCFIZarr5Y/fSTqz+P784fqPUjP8QC6xGTKKbyHNYHR9PHyBX4oQ
pXaf+0rzOzcG8Z70GIpBb0JyKGY+9rhXdVTXsd8hl0wOHtCJEQQ1mG4nN5vWPGld
0LioE2nOarlVbmnCGmhkGLP2uivhFFs0uhKGjPpCv2gotHbFtwptQfUt6Y9EzzNE
hyKaxvRjQhWDTq4TWCUudqPKOXkZsB04W8EIt2d2ddCgbHUxjK3G8/uC4cnARZ2J
KQna1KRV50fQ5g==
-----END CERTIFICATE-----
Generated at Mon Apr 21 19:27:21 2025 by rpki-client