Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
File: KL8ecjI3QqxNgTarbI6F33ujfus.mft (raw, json)
Hash identifier: /eJG2oGQWQZ1RHlN0Mptpzki6fQz5o2SAbnUD9itYFg=
Subject key identifier: CA:2A:CF:6E:FE:1F:CB:26:8E:F4:80:6B:44:FA:2F:DE:A5:84:1F:17
Authority key identifier: 28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
Certificate issuer: /CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Certificate serial: 0196440D497469365A0D6A1213BC9746FB17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
Manifest number: 14F6
Signing time: Thu 17 Apr 2025 14:00:43 +0000
Manifest this update: Thu 17 Apr 2025 14:00:43 +0000
Manifest next update: Fri 18 Apr 2025 14:00:43 +0000
Files and hashes: 1: KL8ecjI3QqxNgTarbI6F33ujfus.crl (hash: /JtnizNVU/QMDdd6IeMrG2qTi8O0gJbSCOydhnAKqSw=)
2: tkt4SudQfK9uwQrgGKvvYflAjl8.roa (hash: dFUnqKo0rasEdebFDefgA9DnqivcqZmMoexL2NOUY5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:44:0d:49:74:69:36:5a:0d:6a:12:13:bc:97:46:fb:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28bf1e72323742ac4d8136ab6c8e85df7ba37eeb
Validity
Not Before: Apr 17 14:00:43 2025 GMT
Not After : Apr 18 14:00:43 2025 GMT
Subject: CN=ca2acf6efe1fcb268ef4806b44fa2fdea5841f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:39:2f:3c:7e:12:72:77:be:f7:fa:02:8e:1e:
b5:8e:de:d7:85:94:c6:55:df:a4:12:bc:8a:44:3b:
d6:14:23:4b:b9:3b:71:27:31:7f:56:48:55:86:2e:
cd:94:87:7c:f4:77:57:d7:26:58:58:c6:24:e7:0a:
33:51:5f:00:55:94:36:1a:55:ff:4e:a0:00:43:3d:
65:68:bc:09:9f:f9:a2:32:63:45:4a:7d:85:0a:cc:
41:26:bf:12:a2:70:33:34:9c:31:04:92:3c:00:95:
19:a9:5f:50:cb:f7:14:d9:51:48:9a:8b:80:eb:44:
c7:c6:7d:9a:3a:8f:ba:d5:9d:b5:e0:ea:8a:18:e1:
bf:2d:11:1a:30:fd:4a:d4:f6:92:b2:fc:44:28:d7:
f0:55:16:26:da:a5:6e:07:85:d0:c9:67:c6:43:44:
2a:92:07:ff:62:9f:be:9e:0f:1f:bd:96:27:f5:b4:
4e:78:45:64:5b:ee:db:59:fb:bc:e6:cf:5e:ce:3b:
0e:bf:8b:39:cc:43:4e:39:49:10:c6:10:91:71:7b:
52:e1:a3:9b:b4:f7:b6:34:b7:e9:50:bf:9c:3f:29:
bd:c9:88:76:1f:1f:2e:2c:49:01:7a:34:1e:ab:80:
fb:31:94:cd:0a:7d:c0:a1:f8:69:d4:df:99:39:89:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:CF:6E:FE:1F:CB:26:8E:F4:80:6B:44:FA:2F:DE:A5:84:1F:17
X509v3 Authority Key Identifier:
keyid:28:BF:1E:72:32:37:42:AC:4D:81:36:AB:6C:8E:85:DF:7B:A3:7E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KL8ecjI3QqxNgTarbI6F33ujfus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ba6df7-f325-4184-a54a-0c481f0ad20e/1/KL8ecjI3QqxNgTarbI6F33ujfus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e3:48:dd:35:a2:fe:b9:34:01:f4:a7:3e:3d:19:9f:70:4a:
91:f5:94:2b:b8:b7:d7:49:b4:2e:0d:a8:94:ab:97:89:8a:02:
f1:3f:66:93:0a:50:f0:ea:10:27:43:4d:a2:58:6d:f2:dd:1d:
81:ba:5f:f1:a4:b1:29:0b:88:7c:96:a8:bc:35:2e:91:ef:89:
bb:74:50:d6:16:d1:32:58:f1:9b:6c:bc:b3:d4:ac:d5:6b:9a:
58:fe:21:5c:f8:80:c3:8b:0e:05:b9:e6:ac:65:bc:01:1d:b6:
3e:06:6f:98:e7:65:c5:46:9f:d0:23:f5:37:c4:4f:95:b4:b9:
9f:5c:19:dd:e3:60:13:e9:b6:cc:4f:04:85:90:2c:41:bd:67:
b8:c2:d8:55:90:ee:19:8d:a0:48:96:4f:85:76:8d:2f:02:96:
79:90:da:fd:4b:bb:27:d8:16:50:00:47:d5:73:12:e6:7f:d7:
c6:9e:86:5c:aa:44:88:7a:d8:98:45:12:0c:30:e8:c5:ba:ac:
dd:f2:b7:6c:c8:72:75:f7:95:9a:ca:97:9e:98:34:8f:d9:db:
72:2b:64:76:ac:4b:92:e6:3e:33:78:be:11:17:38:f2:85:03:
72:ea:d1:1b:65:f0:6c:6f:db:d4:f9:52:34:ab:a4:dc:b3:dd:
18:07:19:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZEDUl0aTZaDWoSE7yXRvsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YmYxZTcyMzIzNzQyYWM0ZDgxMzZhYjZjOGU4NWRmN2Jh
MzdlZWIwHhcNMjUwNDE3MTQwMDQzWhcNMjUwNDE4MTQwMDQzWjAzMTEwLwYDVQQD
EyhjYTJhY2Y2ZWZlMWZjYjI2OGVmNDgwNmI0NGZhMmZkZWE1ODQxZjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmDkvPH4Scne+9/oCjh61jt7XhZTG
Vd+kEryKRDvWFCNLuTtxJzF/VkhVhi7NlId89HdX1yZYWMYk5wozUV8AVZQ2GlX/
TqAAQz1laLwJn/miMmNFSn2FCsxBJr8SonAzNJwxBJI8AJUZqV9Qy/cU2VFImouA
60THxn2aOo+61Z214OqKGOG/LREaMP1K1PaSsvxEKNfwVRYm2qVuB4XQyWfGQ0Qq
kgf/Yp++ng8fvZYn9bROeEVkW+7bWfu85s9ezjsOv4s5zENOOUkQxhCRcXtS4aOb
tPe2NLfpUL+cPym9yYh2Hx8uLEkBejQeq4D7MZTNCn3Aofhp1N+ZOYmBiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMoqz27+H8smjvSAa0T6L96lhB8XMB8GA1UdIwQY
MBaAFCi/HnIyN0KsTYE2q2yOhd97o37rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEt
MGM0ODFmMGFkMjBlLzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9iYTZkZjctZjMyNS00MTg0LWE1NGEtMGM0ODFmMGFkMjBl
LzEvS0w4ZWNqSTNRcXhOZ1RhcmJJNkYzM3VqZnVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlONI3TWi
/rk0AfSnPj0Zn3BKkfWUK7i310m0Lg2olKuXiYoC8T9mkwpQ8OoQJ0NNolht8t0d
gbpf8aSxKQuIfJaovDUuke+Ju3RQ1hbRMljxm2y8s9Ss1WuaWP4hXPiAw4sOBbnm
rGW8AR22PgZvmOdlxUaf0CP1N8RPlbS5n1wZ3eNgE+m2zE8EhZAsQb1nuMLYVZDu
GY2gSJZPhXaNLwKWeZDa/Uu7J9gWUABH1XMS5n/Xxp6GXKpEiHrYmEUSDDDoxbqs
3fK3bMhydfeVmsqXnpg0j9nbcitkdqxLkuY+M3i+ERc48oUDcurRG2XwbG/b1PlS
NKuk3LPdGAcZRw==
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:58:22 2025 by rpki-client