Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
File: KqrPxdXjsmjyxrpDNrzJQfXI168.mft (raw, json)
Hash identifier: BIa6Emnh/fYA+ucbZmOAC+CAcgoDfXa6kPOwuETC0lY=
Subject key identifier: F9:C8:2A:72:6D:30:10:C9:2B:D6:29:37:D5:74:49:A1:B5:AB:FC:3B
Authority key identifier: 2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
Certificate issuer: /CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Certificate serial: 01958B848B90C3E09552D1D11B58C4CFB631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
Manifest number: 0E7C
Signing time: Wed 12 Mar 2025 18:01:14 +0000
Manifest this update: Wed 12 Mar 2025 18:01:14 +0000
Manifest next update: Thu 13 Mar 2025 18:01:14 +0000
Files and hashes: 1: KqrPxdXjsmjyxrpDNrzJQfXI168.crl (hash: /eohlD2wK+b9gl8LFiN7kE2WLRLyIXW+wH0JY45h6T8=)
2: YHCQmZQSLzGov9OQrOkdfN0GjNg.roa (hash: LJHw2nmrIzxX+QIoapfr72Feky+nKytQhXLYrU9sSE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Mar 2025 18:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:8b:84:8b:90:c3:e0:95:52:d1:d1:1b:58:c4:cf:b6:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aaacfc5d5e3b268f2c6ba4336bcc941f5c8d7af
Validity
Not Before: Mar 12 18:01:14 2025 GMT
Not After : Mar 13 18:01:14 2025 GMT
Subject: CN=f9c82a726d3010c92bd62937d57449a1b5abfc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8f:9a:96:a2:9c:f8:b3:3b:25:8e:42:cd:5b:
e8:b0:a2:4f:56:d2:65:d5:c4:26:6d:ea:e1:75:c6:
b9:d3:bc:c4:eb:48:b1:4a:fa:0e:33:8a:a7:3e:6c:
74:ab:94:23:05:32:3f:52:2b:47:b6:50:0b:dc:00:
a4:cd:94:d5:cb:9a:aa:45:f0:46:16:a5:df:a9:92:
95:a3:50:5b:9a:01:4c:00:2a:b6:3e:40:09:b2:e9:
8f:fb:1b:69:53:b9:cb:8f:8a:3d:9b:2c:3f:69:4c:
8d:28:0c:5f:f1:f6:dc:f3:1b:65:35:f0:c7:7b:ab:
f6:b9:37:53:79:42:a8:1e:0f:ba:29:19:43:fb:37:
fe:77:29:29:af:5d:ff:ab:79:7c:f8:44:fa:1e:df:
f4:82:d7:32:09:2c:b9:c3:31:4e:61:e0:be:a6:5e:
76:21:74:e2:71:ec:52:7e:f9:61:f7:8d:22:92:32:
b8:34:b8:2c:39:59:39:97:a0:70:56:36:36:ca:75:
b1:c3:13:78:49:3a:dd:ad:37:62:88:46:56:c2:56:
81:8e:ca:92:e4:a5:f5:5f:38:94:70:22:d7:03:1f:
09:d3:6e:8c:df:06:02:ed:77:fa:87:e7:b1:64:6d:
85:dc:fd:56:fd:e3:58:5f:e1:60:71:69:9e:64:43:
14:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:C8:2A:72:6D:30:10:C9:2B:D6:29:37:D5:74:49:A1:B5:AB:FC:3B
X509v3 Authority Key Identifier:
keyid:2A:AA:CF:C5:D5:E3:B2:68:F2:C6:BA:43:36:BC:C9:41:F5:C8:D7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqrPxdXjsmjyxrpDNrzJQfXI168.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c52d44-1bb6-4dc0-86ba-44cb4e953027/1/KqrPxdXjsmjyxrpDNrzJQfXI168.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b4:bb:e3:26:26:cf:a0:5e:06:96:d8:60:7e:45:6f:b0:79:
c1:98:24:a3:12:6c:d5:e6:24:c1:76:9f:d9:70:6f:cf:5b:6d:
23:43:1a:0f:14:52:2a:1d:51:f1:8d:10:fb:fb:50:c6:66:58:
bb:3e:56:7f:c1:c4:91:63:94:d5:d8:8d:2c:ca:a0:68:13:7c:
75:4a:aa:59:74:19:b2:0e:89:54:d7:ff:d9:24:48:7d:79:46:
e8:68:5b:cc:7f:7e:4d:f4:65:1d:5d:d3:3f:2c:cf:a4:de:4f:
d2:05:a9:b9:9f:bd:90:64:35:41:83:91:67:04:fb:c2:30:f7:
e2:ce:7e:99:4b:a2:2e:89:ca:55:86:73:51:94:45:b6:f6:5a:
15:19:c4:f3:b2:22:3e:38:7c:07:23:ea:19:69:ef:be:f8:03:
e0:67:8e:49:e7:67:d1:17:d0:45:d1:01:e9:c2:12:23:83:ed:
da:01:ec:6c:49:63:f7:41:92:42:7c:56:32:97:2b:51:4b:15:
6c:2c:71:30:26:ab:d2:d9:2d:80:c7:a2:13:83:9d:76:b1:60:
a1:03:f3:10:60:76:5f:fa:e7:d6:aa:09:96:ef:9a:51:2d:5b:
12:4f:f8:5f:76:25:94:93:a8:bf:6c:c1:74:e8:6f:10:07:c1:
4b:f9:6f:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZWLhIuQw+CVUtHRG1jEz7YxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYWFjZmM1ZDVlM2IyNjhmMmM2YmE0MzM2YmNjOTQxZjVj
OGQ3YWYwHhcNMjUwMzEyMTgwMTE0WhcNMjUwMzEzMTgwMTE0WjAzMTEwLwYDVQQD
EyhmOWM4MmE3MjZkMzAxMGM5MmJkNjI5MzdkNTc0NDlhMWI1YWJmYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4+alqKc+LM7JY5CzVvosKJPVtJl
1cQmberhdca507zE60ixSvoOM4qnPmx0q5QjBTI/UitHtlAL3ACkzZTVy5qqRfBG
FqXfqZKVo1BbmgFMACq2PkAJsumP+xtpU7nLj4o9myw/aUyNKAxf8fbc8xtlNfDH
e6v2uTdTeUKoHg+6KRlD+zf+dykpr13/q3l8+ET6Ht/0gtcyCSy5wzFOYeC+pl52
IXTicexSfvlh940ikjK4NLgsOVk5l6BwVjY2ynWxwxN4STrdrTdiiEZWwlaBjsqS
5KX1XziUcCLXAx8J026M3wYC7Xf6h+exZG2F3P1W/eNYX+FgcWmeZEMUHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPnIKnJtMBDJK9YpN9V0SaG1q/w7MB8GA1UdIwQY
MBaAFCqqz8XV47Jo8sa6Qza8yUH1yNevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEt
NDRjYjRlOTUzMDI3LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jNTJkNDQtMWJiNi00ZGMwLTg2YmEtNDRjYjRlOTUzMDI3
LzEvS3FyUHhkWGpzbWp5eHJwRE5yekpRZlhJMTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApbS74yYm
z6BeBpbYYH5Fb7B5wZgkoxJs1eYkwXaf2XBvz1ttI0MaDxRSKh1R8Y0Q+/tQxmZY
uz5Wf8HEkWOU1diNLMqgaBN8dUqqWXQZsg6JVNf/2SRIfXlG6GhbzH9+TfRlHV3T
PyzPpN5P0gWpuZ+9kGQ1QYORZwT7wjD34s5+mUuiLonKVYZzUZRFtvZaFRnE87Ii
Pjh8ByPqGWnvvvgD4GeOSedn0RfQRdEB6cISI4Pt2gHsbElj90GSQnxWMpcrUUsV
bCxxMCar0tktgMeiE4OddrFgoQPzEGB2X/rn1qoJlu+aUS1bEk/4X3YllJOov2zB
dOhvEAfBS/lvVA==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:51:54 2025 by rpki-client