Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: t0ZiPCEEW3Co7dm0HY4ZKX9EOA+bkaavg5J46VBRc1M=
Subject key identifier: 9C:27:53:DF:AF:02:45:2B:15:4F:5E:EB:AB:55:1B:51:C6:2D:D0:2E
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 019644B22783A4D10612DB6CDB13619EDA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 13D4
Signing time: Thu 17 Apr 2025 17:00:47 +0000
Manifest this update: Thu 17 Apr 2025 17:00:47 +0000
Manifest next update: Fri 18 Apr 2025 17:00:47 +0000
Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: u3wrWFwubTgeYE3mVibeDRsb5E2KDd7SpGz8rzTp9ZU=)
2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:b2:27:83:a4:d1:06:12:db:6c:db:13:61:9e:da:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: Apr 17 17:00:47 2025 GMT
Not After : Apr 18 17:00:47 2025 GMT
Subject: CN=9c2753dfaf02452b154f5eebab551b51c62dd02e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7e:27:1c:e6:da:59:40:88:69:1d:7e:43:d9:
74:76:c6:3e:26:4e:e8:6f:05:7c:98:c0:0d:1c:b0:
21:07:b2:50:7e:57:93:ea:76:6e:2c:01:0c:fb:ca:
2e:4f:64:06:2e:fe:0a:32:8d:02:ba:9c:9c:f7:b1:
91:3d:07:e9:0c:6e:68:a3:d0:4e:a0:1b:65:df:7b:
59:98:35:12:14:c0:ab:ee:54:7e:f4:fa:9d:49:45:
1a:0d:66:f0:ef:60:01:5b:98:ad:c7:25:b0:c6:de:
cd:4a:7b:f0:ab:59:e5:e3:e6:d8:af:e2:7d:7b:c6:
31:aa:01:67:84:25:8f:60:ff:70:ad:b9:08:28:79:
2c:e6:d2:9b:3e:8d:54:d0:94:b0:37:ff:a7:fd:d5:
55:8c:b4:fc:d3:bb:2d:cb:4f:37:69:d5:08:31:c9:
27:d9:1a:c2:a1:66:ec:2a:ef:51:f4:65:b3:b5:1c:
30:38:65:5a:0e:59:26:76:f4:ae:3b:d4:19:25:d2:
65:dd:db:34:1c:73:13:3e:09:5a:f2:f1:75:b2:c4:
f1:e0:c9:f8:7a:85:f3:fa:c0:80:15:e8:7f:cf:e5:
ca:34:2a:f4:de:8e:f5:4b:c9:d5:7d:45:32:e5:82:
6a:29:14:1e:5c:2a:0b:54:f0:c4:f9:8c:26:36:2c:
7b:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:27:53:DF:AF:02:45:2B:15:4F:5E:EB:AB:55:1B:51:C6:2D:D0:2E
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:8e:93:ff:15:c8:dc:b9:99:28:1d:81:2c:0e:ad:0b:32:f0:
de:4d:8a:25:2f:7a:66:26:32:6b:dd:67:12:71:ab:06:d8:3e:
b0:56:63:a8:72:b9:b6:c5:34:e9:ce:51:a1:8e:2e:c7:a2:a7:
61:83:7f:fe:be:24:80:0c:92:00:c0:0d:9f:9f:23:3d:94:67:
37:4d:ff:ed:9a:f6:1d:a3:bc:19:00:8a:c2:18:99:a5:ab:d5:
61:f8:b2:df:74:3d:65:84:47:c9:20:db:3a:bd:77:5c:4c:fd:
7a:5d:c4:96:59:f1:70:5f:ad:92:73:59:a0:3c:c0:3b:7d:a0:
5c:98:2a:3c:e9:15:65:50:a1:78:8c:bc:1d:59:32:01:7b:5f:
d6:af:bf:b5:81:5f:6d:e3:6f:b8:60:70:75:c9:4f:77:c8:4a:
b5:b0:cd:37:df:ee:93:f3:2b:3f:0b:93:20:c5:4d:32:54:b0:
89:0f:a5:bf:dc:e2:a8:2f:76:16:48:02:6b:ca:4b:1e:b2:03:
7a:a1:ac:ed:c1:4d:1b:5e:3c:42:28:8a:ce:93:a7:70:0f:96:
0a:a0:74:62:26:0e:82:0a:4e:4a:a0:f0:20:72:e8:e7:a7:0d:
88:a8:5d:f5:b3:0e:42:13:dc:6f:e4:a2:30:45:19:93:c1:1d:
0a:eb:95:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEsieDpNEGEtts2xNhnto9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw
MzY3OWIwHhcNMjUwNDE3MTcwMDQ3WhcNMjUwNDE4MTcwMDQ3WjAzMTEwLwYDVQQD
Eyg5YzI3NTNkZmFmMDI0NTJiMTU0ZjVlZWJhYjU1MWI1MWM2MmRkMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtX4nHObaWUCIaR1+Q9l0dsY+Jk7o
bwV8mMANHLAhB7JQfleT6nZuLAEM+8ouT2QGLv4KMo0Cupyc97GRPQfpDG5oo9BO
oBtl33tZmDUSFMCr7lR+9PqdSUUaDWbw72ABW5itxyWwxt7NSnvwq1nl4+bYr+J9
e8YxqgFnhCWPYP9wrbkIKHks5tKbPo1U0JSwN/+n/dVVjLT807sty083adUIMckn
2RrCoWbsKu9R9GWztRwwOGVaDlkmdvSuO9QZJdJl3ds0HHMTPgla8vF1ssTx4Mn4
eoXz+sCAFeh/z+XKNCr03o71S8nVfUUy5YJqKRQeXCoLVPDE+YwmNix7HQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwnU9+vAkUrFU9e66tVG1HGLdAuMB8GA1UdIwQY
MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt
YTlkMjY3YWNmNjY0LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0
LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAro6T/xXI
3LmZKB2BLA6tCzLw3k2KJS96ZiYya91nEnGrBtg+sFZjqHK5tsU06c5RoY4ux6Kn
YYN//r4kgAySAMANn58jPZRnN03/7Zr2HaO8GQCKwhiZpavVYfiy33Q9ZYRHySDb
Or13XEz9el3EllnxcF+tknNZoDzAO32gXJgqPOkVZVCheIy8HVkyAXtf1q+/tYFf
beNvuGBwdclPd8hKtbDNN9/uk/MrPwuTIMVNMlSwiQ+lv9ziqC92FkgCa8pLHrID
eqGs7cFNG148QiiKzpOncA+WCqB0YiYOggpOSqDwIHLo56cNiKhd9bMOQhPcb+Si
MEUZk8EdCuuVww==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:18 2025 by rpki-client