Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
File: KMaADXS8QQW0DnfqCFugJtvuw18.mft (raw, json)
Hash identifier: 9/1N26+SZewIQpZNHBXcClDmTZKzhNEipJLrBRBZexQ=
Subject key identifier: 7E:02:23:91:6F:C3:82:69:C5:A2:89:69:2D:08:26:CA:6A:20:AA:EB
Authority key identifier: 28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
Certificate issuer: /CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Certificate serial: 0196542550F74797EC2ECC5B92E38BC5A2E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
Manifest number: 0F3B
Signing time: Sun 20 Apr 2025 17:00:53 +0000
Manifest this update: Sun 20 Apr 2025 17:00:53 +0000
Manifest next update: Mon 21 Apr 2025 17:00:53 +0000
Files and hashes: 1: KMaADXS8QQW0DnfqCFugJtvuw18.crl (hash: zzygUc6FL5uOWfUo3dOXkS+vR2k76uRAn55IBW5ieMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:25:50:f7:47:97:ec:2e:cc:5b:92:e3:8b:c5:a2:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28c6800d74bc4105b40e77ea085ba026dbeec35f
Validity
Not Before: Apr 20 17:00:53 2025 GMT
Not After : Apr 21 17:00:53 2025 GMT
Subject: CN=7e0223916fc38269c5a289692d0826ca6a20aaeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bc:4d:f7:a4:94:50:87:fa:8d:8e:02:1b:33:
bf:db:bd:b2:f4:1c:0e:eb:8d:0d:a6:11:79:89:ca:
cf:53:c0:38:8f:58:8e:fd:f0:56:02:7f:62:b8:40:
da:18:97:ce:14:3d:fb:36:72:9d:9e:ff:cc:72:cb:
2a:d2:c2:6d:bf:b7:71:b6:63:03:66:c7:19:14:7b:
61:fa:3f:0b:e6:18:b1:e6:65:a9:20:cd:0d:37:95:
95:6e:16:7d:8d:94:45:84:bb:12:a3:33:bb:62:b5:
3c:12:f2:7f:67:0f:36:7e:a2:e1:3c:e7:26:eb:8c:
d8:25:e0:76:c4:42:b0:64:30:4c:17:18:84:c1:c2:
b3:99:a4:de:98:d4:3b:4e:4a:3c:bd:14:fc:f1:ec:
6f:d4:c2:d8:a3:cd:72:ee:1d:15:88:4e:3a:34:1f:
d3:eb:3a:5d:11:5f:8d:44:05:32:1a:f4:8b:e6:38:
29:30:19:ae:59:5c:3a:4f:03:f7:d2:6c:e2:70:97:
84:ef:4a:82:9e:bc:6d:95:73:80:f2:3a:0a:c7:ef:
34:fc:dc:dc:62:61:b6:06:2b:68:4c:95:7e:ee:da:
de:fb:1a:19:ae:b6:f7:5d:82:f3:51:13:3d:c8:3a:
a0:b3:12:f9:51:32:0f:15:35:01:cb:cd:4c:70:41:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:02:23:91:6F:C3:82:69:C5:A2:89:69:2D:08:26:CA:6A:20:AA:EB
X509v3 Authority Key Identifier:
keyid:28:C6:80:0D:74:BC:41:05:B4:0E:77:EA:08:5B:A0:26:DB:EE:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KMaADXS8QQW0DnfqCFugJtvuw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/242911-93c0-45e7-9012-4939bbfdfb86/1/KMaADXS8QQW0DnfqCFugJtvuw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:2a:18:43:56:36:eb:08:71:04:8e:8b:52:b7:de:ce:19:84:
5f:7e:da:7b:ef:cf:a8:d4:90:d7:72:e0:d8:29:0a:51:92:ce:
65:aa:11:0f:9d:03:97:60:86:49:90:7c:cc:7a:2a:c1:29:da:
9a:34:85:a4:01:e6:9d:98:ea:79:ae:ef:b9:93:1b:59:ce:41:
5c:f9:92:c1:f9:1b:fb:b6:7b:77:6f:54:75:8d:5a:c8:3f:32:
a2:26:32:ad:17:1d:41:4e:f2:b5:2a:9d:bd:86:79:e6:4d:34:
29:a3:83:49:f6:02:fc:ee:86:b1:7d:09:55:1c:e3:20:63:bc:
cc:16:26:e3:d0:b2:d8:9d:a1:e7:25:7c:17:58:01:d4:e8:47:
8f:2d:c7:f0:31:84:b8:70:4d:37:f1:6f:d4:04:0e:76:82:cc:
bf:54:06:54:44:66:8c:9b:9d:f1:65:85:4c:d1:e9:5d:8d:9f:
15:a6:02:0f:02:7a:34:04:4d:ca:d0:54:77:dd:db:dd:83:95:
53:d4:b0:77:ae:28:e4:fb:80:1c:96:83:5b:82:d0:83:85:d0:
35:9b:0c:37:b0:39:21:af:58:cf:e8:e1:7b:78:63:5a:7a:0b:
51:f6:de:29:6d:d6:bf:0a:b1:74:78:7e:49:3a:e3:c8:b7:72:
59:3f:85:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUJVD3R5fsLsxbkuOLxaLhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YzY4MDBkNzRiYzQxMDViNDBlNzdlYTA4NWJhMDI2ZGJl
ZWMzNWYwHhcNMjUwNDIwMTcwMDUzWhcNMjUwNDIxMTcwMDUzWjAzMTEwLwYDVQQD
Eyg3ZTAyMjM5MTZmYzM4MjY5YzVhMjg5NjkyZDA4MjZjYTZhMjBhYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7xN96SUUIf6jY4CGzO/272y9BwO
640NphF5icrPU8A4j1iO/fBWAn9iuEDaGJfOFD37NnKdnv/Mcssq0sJtv7dxtmMD
ZscZFHth+j8L5hix5mWpIM0NN5WVbhZ9jZRFhLsSozO7YrU8EvJ/Zw82fqLhPOcm
64zYJeB2xEKwZDBMFxiEwcKzmaTemNQ7Tko8vRT88exv1MLYo81y7h0ViE46NB/T
6zpdEV+NRAUyGvSL5jgpMBmuWVw6TwP30mzicJeE70qCnrxtlXOA8joKx+80/Nzc
YmG2BitoTJV+7tre+xoZrrb3XYLzURM9yDqgsxL5UTIPFTUBy81McEEUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH4CI5Fvw4JpxaKJaS0IJspqIKrrMB8GA1UdIwQY
MBaAFCjGgA10vEEFtA536ghboCbb7sNfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTIt
NDkzOWJiZmRmYjg2LzEvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8yNDI5MTEtOTNjMC00NWU3LTkwMTItNDkzOWJiZmRmYjg2
LzEvS01hQURYUzhRUVcwRG5mcUNGdWdKdHZ1dzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXSoYQ1Y2
6whxBI6LUrfezhmEX37ae+/PqNSQ13Lg2CkKUZLOZaoRD50Dl2CGSZB8zHoqwSna
mjSFpAHmnZjqea7vuZMbWc5BXPmSwfkb+7Z7d29UdY1ayD8yoiYyrRcdQU7ytSqd
vYZ55k00KaODSfYC/O6GsX0JVRzjIGO8zBYm49Cy2J2h5yV8F1gB1OhHjy3H8DGE
uHBNN/Fv1AQOdoLMv1QGVERmjJud8WWFTNHpXY2fFaYCDwJ6NARNytBUd93b3YOV
U9Swd64o5PuAHJaDW4LQg4XQNZsMN7A5Ia9Yz+jhe3hjWnoLUfbeKW3WvwqxdHh+
STrjyLdyWT+FYw==
-----END CERTIFICATE-----
Generated at Sun Apr 20 22:03:03 2025 by rpki-client