Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: KYpjOy6ezse7wPgPctTe0MbCsHSVuf+MvC8d03ZeebQ=
Subject key identifier: 6B:76:CC:07:93:C7:BF:90:A5:7C:E2:5A:92:5F:A5:61:C8:BD:48:DC
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 019650484CE4F51808582F7FE5944B92FBD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 124E
Signing time: Sat 19 Apr 2025 23:00:37 +0000
Manifest this update: Sat 19 Apr 2025 23:00:37 +0000
Manifest next update: Sun 20 Apr 2025 23:00:37 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: WHhVvAdXWiTmsO66ZdUj4vrGs01TCCR9K/E2/vFrRY0=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 16:41:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:50:48:4c:e4:f5:18:08:58:2f:7f:e5:94:4b:92:fb:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Apr 19 23:00:37 2025 GMT
Not After : Apr 20 23:00:37 2025 GMT
Subject: CN=6b76cc0793c7bf90a57ce25a925fa561c8bd48dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:61:a8:d8:b0:03:b9:36:80:da:55:0b:fc:
aa:9f:a8:fe:96:45:99:c6:c0:13:52:cc:21:ff:f7:
92:2e:e8:60:3a:cc:f8:60:5f:93:d7:a5:3a:77:6c:
fa:74:c9:91:f8:97:7a:06:cc:05:1d:ea:38:c9:93:
5e:b1:fe:b2:61:2c:36:29:c9:be:24:56:57:af:de:
57:47:36:20:76:88:18:38:39:68:92:f0:81:d5:fb:
73:c8:44:4f:ac:d2:06:7d:73:b4:2e:9b:d8:33:0f:
6f:dd:b5:f3:b5:8a:c5:cc:9f:e6:d5:00:82:74:f0:
0c:21:5b:ff:55:cb:85:bd:f9:46:96:cc:c9:67:5c:
a8:a8:4d:09:39:06:14:59:56:ad:18:f7:d4:c9:6f:
26:59:65:85:a3:a4:ad:cd:1e:fa:05:c1:d9:b6:fa:
ed:63:3b:28:c2:7d:b4:34:45:08:fb:96:33:68:c3:
75:cf:00:c7:49:e4:2c:09:75:4f:a9:16:9e:ba:cc:
00:71:27:be:c5:a1:11:85:f4:21:60:aa:31:91:2a:
75:59:97:0c:3a:6b:9c:41:ab:be:bf:46:ea:02:3a:
bf:f2:c3:f1:a2:3d:d5:00:bd:72:bc:48:0b:65:91:
7b:50:29:4f:32:79:64:ed:da:ed:4d:1e:ca:68:32:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:CC:07:93:C7:BF:90:A5:7C:E2:5A:92:5F:A5:61:C8:BD:48:DC
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8b:56:86:83:80:0f:ed:ae:9b:56:85:36:b1:21:13:ab:3c:
1b:91:32:21:dd:b4:98:aa:c2:f5:4f:b1:48:47:37:1c:15:d8:
ba:1e:b1:e1:00:3a:c9:9f:18:25:65:f0:c7:8c:b9:f1:d1:28:
f9:94:9a:9c:70:9f:30:f9:54:cc:4d:e0:bc:c1:32:cc:9f:56:
00:a2:9c:b0:67:77:13:2b:8a:92:f5:8c:2a:ab:22:9a:c5:0a:
fb:6d:d0:54:7d:23:a1:da:83:ec:66:7e:ae:8e:cb:c4:59:09:
67:c8:4b:a3:8a:91:8f:36:7d:f9:0f:d2:7b:e8:31:5e:0a:aa:
bc:0d:b9:80:4f:3c:7d:f9:a5:52:36:8f:dd:33:de:07:93:45:
d0:0c:dd:d7:95:71:f7:fb:53:5b:7b:7b:cb:e6:8f:fd:7b:be:
ba:d1:15:36:bc:fb:ed:60:cf:fd:5b:52:5d:7e:67:33:ab:03:
34:d6:06:1b:7d:0f:39:82:30:15:f2:58:9e:2a:64:9b:0f:c0:
3c:a0:8b:31:1b:07:5d:55:01:93:72:22:17:df:04:1e:00:5b:
a6:61:9d:35:39:5f:e3:df:6d:4e:89:1d:b5:73:82:97:5b:aa:
f4:02:da:79:ce:d3:5d:9e:fc:a1:06:ec:4c:7c:9b:ea:e3:30:
42:ce:46:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZQSEzk9RgIWC9/5ZRLkvvSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl
MmJmZTIwHhcNMjUwNDE5MjMwMDM3WhcNMjUwNDIwMjMwMDM3WjAzMTEwLwYDVQQD
Eyg2Yjc2Y2MwNzkzYzdiZjkwYTU3Y2UyNWE5MjVmYTU2MWM4YmQ0OGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOZhqNiwA7k2gNpVC/yqn6j+lkWZ
xsATUswh//eSLuhgOsz4YF+T16U6d2z6dMmR+Jd6BswFHeo4yZNesf6yYSw2Kcm+
JFZXr95XRzYgdogYODlokvCB1ftzyERPrNIGfXO0LpvYMw9v3bXztYrFzJ/m1QCC
dPAMIVv/VcuFvflGlszJZ1yoqE0JOQYUWVatGPfUyW8mWWWFo6StzR76BcHZtvrt
Yzsown20NEUI+5YzaMN1zwDHSeQsCXVPqRaeuswAcSe+xaERhfQhYKoxkSp1WZcM
OmucQau+v0bqAjq/8sPxoj3VAL1yvEgLZZF7UClPMnlk7drtTR7KaDL55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt2zAeTx7+QpXziWpJfpWHIvUjcMB8GA1UdIwQY
MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt
ODVhNTM0ZjE4MGZkLzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk
LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYtWhoOA
D+2um1aFNrEhE6s8G5EyId20mKrC9U+xSEc3HBXYuh6x4QA6yZ8YJWXwx4y58dEo
+ZSanHCfMPlUzE3gvMEyzJ9WAKKcsGd3EyuKkvWMKqsimsUK+23QVH0jodqD7GZ+
ro7LxFkJZ8hLo4qRjzZ9+Q/Se+gxXgqqvA25gE88ffmlUjaP3TPeB5NF0Azd15Vx
9/tTW3t7y+aP/Xu+utEVNrz77WDP/VtSXX5nM6sDNNYGG30POYIwFfJYnipkmw/A
PKCLMRsHXVUBk3IiF98EHgBbpmGdNTlf499tTokdtXOCl1uq9ALaec7TXZ78oQbs
THyb6uMwQs5GPA==
-----END CERTIFICATE-----
Generated at Sun Apr 20 01:57:46 2025 by rpki-client