Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
File: KeieDArUFRV01m8rML0dpKqd8Fs.mft (raw, json)
Hash identifier: ykVPTHeOqN34Pk27C7HW7ijV4XxHgSIeTQmyw+ltZtM=
Subject key identifier: 2F:9A:F9:8A:DA:38:C3:F6:2E:8B:18:99:C9:C1:67:8C:57:33:CF:14
Authority key identifier: 29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
Certificate issuer: /CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Certificate serial: 0194C38780C5F6089CFB5044593DA716AD05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
Manifest number: 10FA
Signing time: Sat 01 Feb 2025 22:00:24 +0000
Manifest this update: Sat 01 Feb 2025 22:00:24 +0000
Manifest next update: Sun 02 Feb 2025 22:00:24 +0000
Files and hashes: 1: KeieDArUFRV01m8rML0dpKqd8Fs.crl (hash: PxpFil2bIDpcovM3aIBd6Z2ib9mFYn9PKlkzRBP/Alw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:80:c5:f6:08:9c:fb:50:44:59:3d:a7:16:ad:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e89e0c0ad4151574d66f2b30bd1da4aa9df05b
Validity
Not Before: Feb 1 22:00:24 2025 GMT
Not After : Feb 2 22:00:24 2025 GMT
Subject: CN=2f9af98ada38c3f62e8b1899c9c1678c5733cf14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:e3:bf:67:db:f6:d1:eb:e7:a1:1f:f7:30:
11:52:33:90:c3:7f:c3:25:a8:8b:88:fc:c6:b4:6c:
0f:96:c5:71:13:16:a4:f5:d2:1e:d0:34:ee:30:c3:
48:1b:13:18:76:4a:ca:f5:07:72:d0:0d:37:8f:72:
34:13:9b:05:fa:8f:53:4d:87:7c:4e:ef:d8:88:66:
79:1a:6b:5c:c4:b1:2a:01:09:b6:b5:a2:03:68:77:
5f:f7:8e:81:87:a0:54:0b:a6:f9:25:7d:a3:0b:65:
6e:3c:93:55:96:33:f7:2f:23:83:7e:0f:bc:50:c2:
31:10:c0:0a:78:ca:ae:17:5c:52:f0:42:72:7f:e0:
e2:a7:02:5b:ba:82:c0:d8:6d:7e:af:f0:c5:cc:0a:
d4:d0:13:55:52:9e:49:4b:11:29:5b:13:05:d8:e0:
f7:15:e7:32:0b:45:70:04:cd:e8:f2:c1:eb:cc:84:
39:80:96:58:3e:d2:d7:87:aa:95:97:fa:ce:66:62:
00:83:55:4a:ab:cd:f5:91:a7:39:ee:fd:e8:99:20:
99:d5:10:18:b0:b3:59:f4:33:18:b7:fc:51:4a:52:
69:f9:05:cf:69:61:82:67:26:3f:67:49:32:c0:7e:
49:f8:1c:02:62:ab:88:00:6b:e3:21:53:97:ad:d3:
28:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:9A:F9:8A:DA:38:C3:F6:2E:8B:18:99:C9:C1:67:8C:57:33:CF:14
X509v3 Authority Key Identifier:
keyid:29:E8:9E:0C:0A:D4:15:15:74:D6:6F:2B:30:BD:1D:A4:AA:9D:F0:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeieDArUFRV01m8rML0dpKqd8Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b87c2a-cd03-4538-9dc4-991fae5c9b07/1/KeieDArUFRV01m8rML0dpKqd8Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:0f:3c:f9:74:16:f0:6d:df:f1:53:04:65:c6:71:08:d4:59:
75:d6:61:64:1d:0f:5e:b9:5a:60:14:c9:c9:fe:29:2e:3b:35:
19:9d:8c:a3:47:08:81:9e:14:3a:34:57:8d:18:4e:b3:81:60:
1b:6a:4e:07:82:c0:fa:e2:59:a9:2e:df:9c:9b:76:6f:f7:c0:
89:76:ad:c9:78:9b:3a:67:7e:91:d0:8b:49:69:76:cb:52:24:
be:fa:6e:ff:0d:ac:9b:30:e9:8c:1c:4b:4c:c8:03:fe:00:25:
37:6b:dd:9c:f6:36:23:ed:98:b0:03:69:ee:e5:1c:a9:51:0b:
c6:0f:59:e4:46:2a:48:2d:32:97:88:4a:97:90:d1:ff:ee:b2:
66:e0:32:59:a3:4c:29:b4:8b:ff:31:a6:8f:db:11:aa:bf:b7:
88:4f:67:e1:ef:01:07:21:44:d1:25:ec:52:28:e0:0f:aa:32:
9d:c4:36:9a:e9:06:50:20:fc:fd:84:72:2a:a7:91:17:51:f0:
4a:fa:f7:73:80:55:ca:2b:ed:27:b3:27:2d:8a:71:21:e1:e9:
90:4d:70:41:c1:58:9f:38:41:85:d6:b7:15:39:60:50:12:3d:
d0:ed:d7:6f:28:66:b2:02:67:27:ad:b3:e4:2d:ce:43:b5:6a:
c2:ad:c0:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh4DF9gic+1BEWT2nFq0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTg5ZTBjMGFkNDE1MTU3NGQ2NmYyYjMwYmQxZGE0YWE5
ZGYwNWIwHhcNMjUwMjAxMjIwMDI0WhcNMjUwMjAyMjIwMDI0WjAzMTEwLwYDVQQD
EygyZjlhZjk4YWRhMzhjM2Y2MmU4YjE4OTljOWMxNjc4YzU3MzNjZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXDjv2fb9tHr56Ef9zARUjOQw3/D
JaiLiPzGtGwPlsVxExak9dIe0DTuMMNIGxMYdkrK9Qdy0A03j3I0E5sF+o9TTYd8
Tu/YiGZ5GmtcxLEqAQm2taIDaHdf946Bh6BUC6b5JX2jC2VuPJNVljP3LyODfg+8
UMIxEMAKeMquF1xS8EJyf+DipwJbuoLA2G1+r/DFzArU0BNVUp5JSxEpWxMF2OD3
FecyC0VwBM3o8sHrzIQ5gJZYPtLXh6qVl/rOZmIAg1VKq831kac57v3omSCZ1RAY
sLNZ9DMYt/xRSlJp+QXPaWGCZyY/Z0kywH5J+BwCYquIAGvjIVOXrdMoxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+a+YraOMP2LosYmcnBZ4xXM88UMB8GA1UdIwQY
MBaAFCnongwK1BUVdNZvKzC9HaSqnfBbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS9iODdjMmEtY2QwMy00NTM4LTlkYzQt
OTkxZmFlNWM5YjA3LzEvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS9iODdjMmEtY2QwMy00NTM4LTlkYzQtOTkxZmFlNWM5YjA3
LzEvS2VpZURBclVGUlYwMW04ck1MMGRwS3FkOEZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQ88+XQW
8G3f8VMEZcZxCNRZddZhZB0PXrlaYBTJyf4pLjs1GZ2Mo0cIgZ4UOjRXjRhOs4Fg
G2pOB4LA+uJZqS7fnJt2b/fAiXatyXibOmd+kdCLSWl2y1Ikvvpu/w2smzDpjBxL
TMgD/gAlN2vdnPY2I+2YsANp7uUcqVELxg9Z5EYqSC0yl4hKl5DR/+6yZuAyWaNM
KbSL/zGmj9sRqr+3iE9n4e8BByFE0SXsUijgD6oyncQ2mukGUCD8/YRyKqeRF1Hw
Svr3c4BVyivtJ7MnLYpxIeHpkE1wQcFYnzhBhda3FTlgUBI90O3XbyhmsgJnJ62z
5C3OQ7Vqwq3Aow==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:41:17 2025 by rpki-client