Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
File: kwy6S0MwS1HEvd-9QzF4KtkRAso.mft (raw, json)
Hash identifier: YbzqlHpRJPgFWiH8V0nbwupMTmOthgNXE/voJlPRqEw=
Subject key identifier: 56:01:17:67:51:83:E8:A8:60:C7:1A:22:B5:D1:AD:2B:B3:14:DE:60
Authority key identifier: 93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
Certificate issuer: /CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Certificate serial: 01964C34E7E4DFE6DF54CCED0F5331EE52D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
Manifest number: 0212
Signing time: Sat 19 Apr 2025 04:00:57 +0000
Manifest this update: Sat 19 Apr 2025 04:00:57 +0000
Manifest next update: Sun 20 Apr 2025 04:00:57 +0000
Files and hashes: 1: kwy6S0MwS1HEvd-9QzF4KtkRAso.crl (hash: SoMcGRQG/YpjGICvlbaqrfo1K25X0DRaMt6ETtQAJm0=)
2: uxtuL63qPRDpKVk1ikR7XA0jVWo.roa (hash: MOBvDlpT4Tx/Y9+52ugnxgyKuM5ZQrSPEm8NwRXVQVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4c:34:e7:e4:df:e6:df:54:cc:ed:0f:53:31:ee:52:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=930cba4b43304b51c4bddfbd4331782ad91102ca
Validity
Not Before: Apr 19 04:00:57 2025 GMT
Not After : Apr 20 04:00:57 2025 GMT
Subject: CN=560117675183e8a860c71a22b5d1ad2bb314de60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2f:c2:29:da:4f:f4:7e:dd:5a:25:34:88:f1:
6b:65:fb:ba:6c:62:db:33:07:fd:70:7d:79:ee:25:
c6:0d:28:0d:e0:31:79:bb:8a:cf:73:76:2e:03:90:
fe:82:55:69:62:18:a7:dc:e1:09:72:3b:45:e8:c6:
9f:d7:0e:98:8b:50:a4:be:64:7d:f1:50:2f:dc:1b:
0a:5e:b7:ad:b3:c8:8d:a8:47:43:4d:7c:7e:6c:28:
3d:40:8a:ac:0e:0c:a0:ef:97:f9:fb:8e:90:8f:ef:
41:62:41:90:14:03:8c:0a:c0:af:ae:fc:67:41:c0:
e6:80:90:77:e4:ab:14:e5:6f:13:ef:2a:34:0c:14:
ed:1e:09:08:8a:f4:f1:ea:2a:78:81:97:79:16:f2:
a1:57:a4:00:ef:be:07:83:b5:46:82:15:b2:15:30:
6f:39:b7:c1:9f:39:94:26:52:93:bc:f1:8c:3a:1f:
ba:c6:dc:7d:e3:b7:84:90:7d:3e:3c:ac:01:ee:7a:
f0:82:ad:0a:cb:89:3f:83:02:ff:1a:cc:09:3e:ed:
40:37:95:8f:fd:b9:fe:f0:da:bf:7b:65:18:e5:f7:
1f:77:b8:15:af:74:84:48:5c:5b:ef:f1:91:6f:56:
5e:dd:19:3d:5c:8c:f3:04:e2:52:e1:c5:af:93:1e:
68:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:01:17:67:51:83:E8:A8:60:C7:1A:22:B5:D1:AD:2B:B3:14:DE:60
X509v3 Authority Key Identifier:
keyid:93:0C:BA:4B:43:30:4B:51:C4:BD:DF:BD:43:31:78:2A:D9:11:02:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kwy6S0MwS1HEvd-9QzF4KtkRAso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4eca3f-4f41-4598-aa1b-eedb1698c21a/1/kwy6S0MwS1HEvd-9QzF4KtkRAso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:98:b4:06:7d:8a:c3:0d:b9:90:5a:8f:07:af:cb:b0:a6:2d:
25:02:bf:d9:0f:28:fd:cc:21:bf:d7:c2:3d:70:41:b0:b1:11:
82:18:f7:23:48:49:1e:20:8d:ba:60:23:58:ed:90:c3:04:83:
a5:3d:82:96:b1:73:1f:70:05:c7:eb:0c:33:98:4d:d0:c8:24:
52:29:51:a7:04:3a:d8:6d:e1:82:7d:69:68:e5:81:64:ff:82:
61:eb:96:d4:f5:44:00:c3:6c:79:52:6b:be:0f:20:ae:00:08:
4a:f6:a2:87:f9:40:44:c2:48:06:01:b0:07:0e:fe:f2:89:17:
9c:75:40:07:7d:b8:ff:91:e4:a8:18:e9:5b:f4:e4:14:d2:18:
cc:b8:22:a5:e1:f5:6d:ab:4f:07:fc:0a:3b:ed:40:9b:c5:ca:
90:be:31:c3:92:8f:cb:4e:e6:61:01:02:25:25:3b:9d:db:50:
fd:29:bf:4e:09:bd:c4:f3:47:ba:33:ff:ab:77:ed:c9:b6:34:
9a:a9:dc:75:9f:f3:39:a3:ea:ec:1a:99:0c:02:bd:b9:bd:70:
0a:ee:cd:8d:d1:f6:1a:b9:b7:35:a5:ea:76:ad:cc:c5:10:89:
5f:04:aa:9d:ab:25:4b:36:c8:d8:a7:69:fa:e9:bb:10:68:57:
8f:fd:02:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZMNOfk3+bfVMztD1Mx7lLRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMGNiYTRiNDMzMDRiNTFjNGJkZGZiZDQzMzE3ODJhZDkx
MTAyY2EwHhcNMjUwNDE5MDQwMDU3WhcNMjUwNDIwMDQwMDU3WjAzMTEwLwYDVQQD
Eyg1NjAxMTc2NzUxODNlOGE4NjBjNzFhMjJiNWQxYWQyYmIzMTRkZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwy/CKdpP9H7dWiU0iPFrZfu6bGLb
Mwf9cH157iXGDSgN4DF5u4rPc3YuA5D+glVpYhin3OEJcjtF6Maf1w6Yi1CkvmR9
8VAv3BsKXrets8iNqEdDTXx+bCg9QIqsDgyg75f5+46Qj+9BYkGQFAOMCsCvrvxn
QcDmgJB35KsU5W8T7yo0DBTtHgkIivTx6ip4gZd5FvKhV6QA774Hg7VGghWyFTBv
ObfBnzmUJlKTvPGMOh+6xtx947eEkH0+PKwB7nrwgq0Ky4k/gwL/GswJPu1AN5WP
/bn+8Nq/e2UY5fcfd7gVr3SESFxb7/GRb1Ze3Rk9XIzzBOJS4cWvkx5oIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYBF2dRg+ioYMcaIrXRrSuzFN5gMB8GA1UdIwQY
MBaAFJMMuktDMEtRxL3fvUMxeCrZEQLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWIt
ZWVkYjE2OThjMjFhLzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80ZWNhM2YtNGY0MS00NTk4LWFhMWItZWVkYjE2OThjMjFh
LzEva3d5NlMwTXdTMUhFdmQtOVF6RjRLdGtSQXNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJi0Bn2K
ww25kFqPB6/LsKYtJQK/2Q8o/cwhv9fCPXBBsLERghj3I0hJHiCNumAjWO2QwwSD
pT2ClrFzH3AFx+sMM5hN0MgkUilRpwQ62G3hgn1paOWBZP+CYeuW1PVEAMNseVJr
vg8grgAISvaih/lARMJIBgGwBw7+8okXnHVAB324/5HkqBjpW/TkFNIYzLgipeH1
batPB/wKO+1Am8XKkL4xw5KPy07mYQECJSU7ndtQ/Sm/Tgm9xPNHujP/q3ftybY0
mqncdZ/zOaPq7BqZDAK9ub1wCu7NjdH2Grm3NaXqdq3MxRCJXwSqnaslSzbI2Kdp
+um7EGhXj/0CXw==
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:20:21 2025 by rpki-client