Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
File: KtclXVpq-4XjdugbuaCew93dvNw.mft (raw, json)
Hash identifier: 1heppSQQDbQxEgNTTuL3NbwCnvT+BjlGeB+mMYN8m1s=
Subject key identifier: 5C:78:D5:68:07:04:67:3D:00:84:65:64:CE:FE:88:A3:DE:0A:7C:7C
Authority key identifier: 2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
Certificate issuer: /CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Certificate serial: 01964E232EB10B24CFE982AD31A6EB6C58A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
Manifest number: 1411
Signing time: Sat 19 Apr 2025 13:00:50 +0000
Manifest this update: Sat 19 Apr 2025 13:00:50 +0000
Manifest next update: Sun 20 Apr 2025 13:00:50 +0000
Files and hashes: 1: KtclXVpq-4XjdugbuaCew93dvNw.crl (hash: 68e3RZTjTlMwcjACZp0jk+p67dQZn7xLnLDo9GyZVwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 07:26:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4e:23:2e:b1:0b:24:cf:e9:82:ad:31:a6:eb:6c:58:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ad7255d5a6afb85e376e81bb9a09ec3ddddbcdc
Validity
Not Before: Apr 19 13:00:50 2025 GMT
Not After : Apr 20 13:00:50 2025 GMT
Subject: CN=5c78d5680704673d00846564cefe88a3de0a7c7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:33:8c:34:f7:a6:6f:69:ce:a3:b1:39:ff:
4f:2e:1e:65:be:08:b0:08:e6:90:c0:c7:08:d5:88:
02:c6:17:e1:50:30:84:c2:03:01:91:f1:57:8c:cc:
3a:b2:62:64:37:db:42:a8:c1:5c:90:76:2d:dc:84:
fe:d3:a3:f1:0e:49:bb:e7:03:38:f1:a4:46:57:ac:
b7:14:4c:71:a8:f5:fd:cf:27:16:a5:05:8e:25:5c:
b4:40:23:ac:9e:e5:e3:65:e1:0e:9c:38:4c:0a:f5:
fc:21:15:55:31:e2:f9:aa:5d:6e:bf:cd:49:e9:0e:
f3:ee:bd:44:1c:ee:46:b1:76:f1:31:b1:5f:cb:e7:
43:32:73:de:fd:a8:67:d4:61:7f:10:1d:99:c9:27:
3d:2d:47:0d:06:e2:ac:5d:5f:a0:75:5d:40:2e:b9:
44:47:75:63:25:c6:a0:14:74:03:2b:64:5c:d0:cc:
e8:d5:57:96:42:03:6b:6e:44:5e:4e:94:38:77:59:
3c:b0:70:01:20:3b:51:9c:06:97:89:45:c5:07:fb:
4e:15:52:ca:4c:1d:f5:0f:16:38:1c:3b:d9:63:5b:
50:64:ff:7a:a4:c7:8c:bd:03:ab:ea:fd:19:5d:f6:
51:c0:4d:45:49:6f:20:f9:99:a4:d8:10:38:8b:18:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:78:D5:68:07:04:67:3D:00:84:65:64:CE:FE:88:A3:DE:0A:7C:7C
X509v3 Authority Key Identifier:
keyid:2A:D7:25:5D:5A:6A:FB:85:E3:76:E8:1B:B9:A0:9E:C3:DD:DD:BC:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KtclXVpq-4XjdugbuaCew93dvNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebb979-bef0-420c-95e0-bceb376c2573/1/KtclXVpq-4XjdugbuaCew93dvNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:69:74:e2:25:5f:5b:f3:1e:ea:d9:58:5e:18:88:bf:af:52:
e0:77:03:6b:21:39:23:82:4c:13:69:14:15:25:59:8a:0b:54:
88:34:8c:3e:16:07:cd:78:86:8c:00:6d:fe:dc:f8:71:e8:c4:
48:b6:a3:d8:87:7f:8b:a1:ba:f1:74:7d:fb:8e:2c:77:79:39:
32:a0:a7:01:7d:b6:b7:7a:49:f9:36:8a:53:48:9a:b9:5d:78:
b4:90:d0:7b:3b:a4:11:1e:b5:23:b4:0f:fa:19:7c:35:0b:2b:
d1:77:64:fc:a1:a4:f6:fd:e0:f5:9a:e9:0f:0f:b4:27:86:d3:
2d:93:c0:5e:8b:6b:b7:70:3c:7f:32:f7:45:2a:ab:1f:88:df:
48:00:d2:fd:ab:a9:9c:c3:c0:aa:f6:56:6d:01:59:66:e2:38:
6a:12:85:54:b6:e9:36:30:65:1f:7e:91:77:0d:1b:52:4c:aa:
00:dd:aa:47:dd:ae:4e:8b:8d:7a:8f:2e:50:a4:a9:f3:08:f6:
4a:d7:43:ee:9a:5e:80:20:0d:2e:6b:72:ae:45:4e:89:d0:95:
82:48:a3:1c:1e:17:81:29:1e:30:58:8d:f9:f3:da:b7:a4:32:
f0:b6:90:a2:66:52:d1:5d:ae:90:c6:2f:f7:64:06:ff:57:5d:
81:48:e7:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZOIy6xCyTP6YKtMabrbFilMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZDcyNTVkNWE2YWZiODVlMzc2ZTgxYmI5YTA5ZWMzZGRk
ZGJjZGMwHhcNMjUwNDE5MTMwMDUwWhcNMjUwNDIwMTMwMDUwWjAzMTEwLwYDVQQD
Eyg1Yzc4ZDU2ODA3MDQ2NzNkMDA4NDY1NjRjZWZlODhhM2RlMGE3YzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvozjDT3pm9pzqOxOf9PLh5lvgiw
COaQwMcI1YgCxhfhUDCEwgMBkfFXjMw6smJkN9tCqMFckHYt3IT+06PxDkm75wM4
8aRGV6y3FExxqPX9zycWpQWOJVy0QCOsnuXjZeEOnDhMCvX8IRVVMeL5ql1uv81J
6Q7z7r1EHO5GsXbxMbFfy+dDMnPe/ahn1GF/EB2ZySc9LUcNBuKsXV+gdV1ALrlE
R3VjJcagFHQDK2Rc0Mzo1VeWQgNrbkReTpQ4d1k8sHABIDtRnAaXiUXFB/tOFVLK
TB31DxY4HDvZY1tQZP96pMeMvQOr6v0ZXfZRwE1FSW8g+Zmk2BA4ixjz5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFx41WgHBGc9AIRlZM7+iKPeCnx8MB8GA1UdIwQY
MBaAFCrXJV1aavuF43boG7mgnsPd3bzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RjbFhWcHEtNFhqZHVnYnVhQ2V3OTNkdk53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lYmI5NzktYmVmMC00MjBjLTk1ZTAt
YmNlYjM3NmMyNTczLzEvS3RjbFhWcHEtNFhqZHVnYnVhQ2V3OTNkdk53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9lYmI5NzktYmVmMC00MjBjLTk1ZTAtYmNlYjM3NmMyNTcz
LzEvS3RjbFhWcHEtNFhqZHVnYnVhQ2V3OTNkdk53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGGl04iVf
W/Me6tlYXhiIv69S4HcDayE5I4JME2kUFSVZigtUiDSMPhYHzXiGjABt/tz4cejE
SLaj2Id/i6G68XR9+44sd3k5MqCnAX22t3pJ+TaKU0iauV14tJDQezukER61I7QP
+hl8NQsr0Xdk/KGk9v3g9ZrpDw+0J4bTLZPAXotrt3A8fzL3RSqrH4jfSADS/aup
nMPAqvZWbQFZZuI4ahKFVLbpNjBlH36Rdw0bUkyqAN2qR92uTouNeo8uUKSp8wj2
StdD7ppegCANLmtyrkVOidCVgkijHB4XgSkeMFiN+fPat6Qy8LaQomZS0V2ukMYv
92QG/1ddgUjnzQ==
-----END CERTIFICATE-----
Generated at Sat Apr 19 15:17:50 2025 by rpki-client