Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
File: KYijxojo6x_vBsN0p6pc-P13jg8.mft (raw, json)
Hash identifier: HW1wrgOtNVXzTSrwxclxeMPwelnj9TJ1DJcbdV0De3E=
Subject key identifier: FA:EE:54:E9:68:3B:B6:7E:36:BC:0E:B4:41:AB:EA:47:89:19:B9:E4
Authority key identifier: 29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
Certificate issuer: /CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Certificate serial: 0194C463093BD7F3036EB2F8FC98ED726FFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
Manifest number: 137C
Signing time: Sun 02 Feb 2025 02:00:12 +0000
Manifest this update: Sun 02 Feb 2025 02:00:12 +0000
Manifest next update: Mon 03 Feb 2025 02:00:12 +0000
Files and hashes: 1: KYijxojo6x_vBsN0p6pc-P13jg8.crl (hash: R7/OmV3WgNY8kKbZUvjn/hPL395zCqH8x4TJWK4m0yE=)
2: fXGb1AdmtKED61MI3C4rhXBHP4g.roa (hash: eR+whMFm4iqXvD16fqLVfHjrwLVKXZG15LaXEU0R7b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c4:63:09:3b:d7:f3:03:6e:b2:f8:fc:98:ed:72:6f:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2988a3c688e8eb1fef06c374a7aa5cf8fd778e0f
Validity
Not Before: Feb 2 02:00:12 2025 GMT
Not After : Feb 3 02:00:12 2025 GMT
Subject: CN=faee54e9683bb67e36bc0eb441abea478919b9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:b6:5b:84:20:5c:88:94:70:55:24:19:b7:
31:8d:37:a2:61:cd:ac:4a:37:64:b3:d0:85:1d:53:
21:a3:bd:6e:f4:59:98:9e:a5:1a:72:fc:80:1d:43:
a4:46:d2:ab:08:c8:68:be:80:52:e8:9a:5c:4c:cf:
d9:a7:8d:35:87:b8:1e:d1:de:e1:8c:85:2f:97:4b:
0e:63:92:3c:59:f4:49:09:8b:c3:f6:65:b6:9a:08:
40:31:f0:6d:33:e9:eb:90:d8:98:64:cc:f0:2a:32:
07:6c:9d:94:f8:1b:44:cf:c1:c7:1e:bb:3d:17:06:
51:aa:6f:8b:5c:c7:ac:23:80:a7:10:e0:3c:9e:14:
e3:43:65:6c:49:17:90:05:9e:1e:a2:05:41:47:cf:
94:ea:f2:57:bb:f6:dd:0c:71:47:77:58:7a:e0:53:
2b:08:e8:85:f8:4a:81:93:a6:c2:4f:6d:b1:19:cc:
ba:03:de:ca:c6:48:0f:03:d4:75:34:ce:a7:fe:e0:
23:c8:c0:6e:1d:b2:2a:53:8a:b7:a1:bd:98:10:e3:
c0:4c:48:2c:18:9a:9b:bb:f0:95:fe:ee:9e:86:54:
15:aa:1f:0a:10:78:95:f1:99:b6:7e:6f:5c:5f:55:
3e:38:b3:19:21:87:6b:3c:28:7a:8e:d5:86:b9:a4:
62:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:EE:54:E9:68:3B:B6:7E:36:BC:0E:B4:41:AB:EA:47:89:19:B9:E4
X509v3 Authority Key Identifier:
keyid:29:88:A3:C6:88:E8:EB:1F:EF:06:C3:74:A7:AA:5C:F8:FD:77:8E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYijxojo6x_vBsN0p6pc-P13jg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/9f52d1-c95d-455b-af08-cec0dbc8d246/1/KYijxojo6x_vBsN0p6pc-P13jg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:e5:c9:bf:29:70:fa:70:0b:b7:71:f0:85:6f:99:ca:66:5f:
99:6c:11:5c:99:62:48:87:f9:0f:f1:23:08:26:24:96:b0:9c:
da:0e:bd:b5:b6:3e:27:b4:dd:68:57:71:e6:ef:ea:2d:8f:05:
8c:fa:ca:cc:01:b5:55:88:06:f4:55:bf:52:33:87:59:5a:b1:
46:8d:a8:fc:11:72:7c:6f:84:93:ea:83:93:6a:7f:8f:4e:16:
ca:09:b2:d6:1e:56:c0:3d:12:ca:d3:38:cd:a5:cb:89:53:61:
3b:45:83:ae:b2:e2:68:1a:71:57:84:5c:a5:0a:fc:f4:0f:46:
43:e2:0c:4f:56:5a:d8:73:0a:6f:0d:1c:01:6b:1b:37:a8:d1:
da:75:99:e2:ba:12:05:8b:43:e9:7b:72:c3:8e:e5:a3:b6:9d:
cb:64:22:c3:19:67:76:25:f1:64:a2:d9:bf:81:fe:ad:d8:39:
51:71:f5:16:63:7f:fd:c8:c4:9e:8b:1c:bb:11:00:50:d6:a8:
fc:90:ec:03:e8:58:41:ac:2b:8b:2b:ad:f8:cd:af:55:82:57:
a2:c0:44:5e:5d:28:1b:06:3f:53:4f:80:f2:23:7e:8c:97:91:
1a:5a:47:d1:a7:02:1f:b2:da:0b:e4:40:ec:bd:eb:3a:c7:d2:
58:21:ce:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTEYwk71/MDbrL4/Jjtcm/9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODhhM2M2ODhlOGViMWZlZjA2YzM3NGE3YWE1Y2Y4ZmQ3
NzhlMGYwHhcNMjUwMjAyMDIwMDEyWhcNMjUwMjAzMDIwMDEyWjAzMTEwLwYDVQQD
EyhmYWVlNTRlOTY4M2JiNjdlMzZiYzBlYjQ0MWFiZWE0Nzg5MTliOWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG62W4QgXIiUcFUkGbcxjTeiYc2s
Sjdks9CFHVMho71u9FmYnqUacvyAHUOkRtKrCMhovoBS6JpcTM/Zp401h7ge0d7h
jIUvl0sOY5I8WfRJCYvD9mW2mghAMfBtM+nrkNiYZMzwKjIHbJ2U+BtEz8HHHrs9
FwZRqm+LXMesI4CnEOA8nhTjQ2VsSReQBZ4eogVBR8+U6vJXu/bdDHFHd1h64FMr
COiF+EqBk6bCT22xGcy6A97KxkgPA9R1NM6n/uAjyMBuHbIqU4q3ob2YEOPATEgs
GJqbu/CV/u6ehlQVqh8KEHiV8Zm2fm9cX1U+OLMZIYdrPCh6jtWGuaRiwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPruVOloO7Z+NrwOtEGr6keJGbnkMB8GA1UdIwQY
MBaAFCmIo8aI6Osf7wbDdKeqXPj9d44PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgt
Y2VjMGRiYzhkMjQ2LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85ZjUyZDEtYzk1ZC00NTViLWFmMDgtY2VjMGRiYzhkMjQ2
LzEvS1lpanhvam82eF92QnNOMHA2cGMtUDEzamc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOXJvylw
+nALt3HwhW+ZymZfmWwRXJliSIf5D/EjCCYklrCc2g69tbY+J7TdaFdx5u/qLY8F
jPrKzAG1VYgG9FW/UjOHWVqxRo2o/BFyfG+Ek+qDk2p/j04Wygmy1h5WwD0SytM4
zaXLiVNhO0WDrrLiaBpxV4RcpQr89A9GQ+IMT1Za2HMKbw0cAWsbN6jR2nWZ4roS
BYtD6Xtyw47lo7ady2QiwxlndiXxZKLZv4H+rdg5UXH1FmN//cjEnoscuxEAUNao
/JDsA+hYQawriyut+M2vVYJXosBEXl0oGwY/U0+A8iN+jJeRGlpH0acCH7LaC+RA
7L3rOsfSWCHOnw==
-----END CERTIFICATE-----
Generated at Sun Feb 2 06:53:01 2025 by rpki-client