Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
File: KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft (raw, json)
Hash identifier: 4S/oc7gb4Yw2x//xnArn0/kRd/zyQPo4YMCTGF+UpJ8=
Subject key identifier: 96:4B:2B:DC:6E:83:30:06:1F:6E:BE:95:7E:C2:E0:83:F9:1F:47:ED
Authority key identifier: 29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
Certificate issuer: /CN=29275327a5e85f3c8c14c984036f493feb59b016
Certificate serial: 0196591540191B582F2E192DA3A4D6A401DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
Manifest number: 1503
Signing time: Mon 21 Apr 2025 16:01:26 +0000
Manifest this update: Mon 21 Apr 2025 16:01:26 +0000
Manifest next update: Tue 22 Apr 2025 16:01:26 +0000
Files and hashes: 1: 8xhcAhx-8qnVZ-kOHJ3qOMkDPz4.roa (hash: 27BFHjr8J4UtWYs76eZEJg2mPxJknmE0rT/irucN/h0=)
2: KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl (hash: PPwb4+9JnueQHfceWauHS8xYSwU491W12pfqMlgS8TE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:59:15:40:19:1b:58:2f:2e:19:2d:a3:a4:d6:a4:01:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29275327a5e85f3c8c14c984036f493feb59b016
Validity
Not Before: Apr 21 16:01:26 2025 GMT
Not After : Apr 22 16:01:26 2025 GMT
Subject: CN=964b2bdc6e8330061f6ebe957ec2e083f91f47ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:99:96:13:fb:06:27:ba:ce:3e:24:11:ca:71:
92:00:24:36:39:a7:61:e7:fd:78:ea:31:f7:4c:be:
6a:9e:44:98:0b:97:fd:de:0c:e6:01:7a:db:fc:7f:
79:5d:50:42:2d:cf:14:51:03:2d:07:a1:19:87:07:
b9:7b:49:09:dd:e3:17:af:e1:01:0f:e5:d4:d0:03:
1a:79:4c:78:23:9e:4a:6d:e3:27:02:24:de:5c:4c:
8f:de:d1:27:08:50:8b:53:55:c7:0b:d4:b9:28:a0:
ee:bc:85:2e:34:44:09:f7:b5:9a:4e:88:b2:83:5f:
ee:16:7f:c9:ec:50:a0:f7:1b:e4:18:a3:8f:c6:91:
70:2a:33:e8:fc:f7:3e:74:f9:01:4e:ec:9b:b3:82:
1c:4f:21:27:8d:f6:51:7e:04:18:17:b9:01:60:e6:
a5:12:e9:1c:38:01:55:ea:9b:8a:9d:35:a6:b1:de:
e5:1d:d3:36:34:f3:08:f0:63:fc:14:19:fd:e4:d4:
f0:4d:03:0b:de:1d:bb:14:41:3e:97:33:75:6a:c5:
80:0b:50:ca:52:a7:af:ed:97:28:b3:e5:e9:b6:b0:
56:a7:f4:c5:b9:39:a0:d3:af:e6:7b:42:53:a2:3e:
30:70:46:e1:8c:c0:dc:df:bd:cc:d9:37:6d:4b:54:
08:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:2B:DC:6E:83:30:06:1F:6E:BE:95:7E:C2:E0:83:F9:1F:47:ED
X509v3 Authority Key Identifier:
keyid:29:27:53:27:A5:E8:5F:3C:8C:14:C9:84:03:6F:49:3F:EB:59:B0:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KSdTJ6XoXzyMFMmEA29JP-tZsBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a1de44-86a9-4d29-b8e5-166fdd0b1822/1/KSdTJ6XoXzyMFMmEA29JP-tZsBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d4:49:3c:67:7f:58:d8:71:6c:4c:53:18:f8:db:23:44:3e:
0e:d7:42:39:13:d1:29:a4:c7:0a:79:7b:27:87:c6:88:94:44:
ce:8d:a1:67:66:63:fd:dc:eb:1d:95:66:49:cc:2c:2d:4f:ea:
fb:9d:9c:ab:27:7e:42:f6:a1:6c:06:c4:5d:84:c2:e2:f1:b4:
45:b2:fc:a8:87:00:4e:91:86:73:1d:34:7e:8d:ea:3a:ee:1c:
de:c3:6c:f4:30:e3:d8:e6:02:54:23:4d:f9:1d:7d:c7:6f:2d:
62:46:36:69:c1:de:8a:8e:a9:9b:ed:ac:bc:20:d2:c4:1a:9e:
11:4e:15:09:f1:81:80:47:00:a3:af:fb:b1:e7:16:54:1e:b9:
d2:66:54:d3:48:4f:75:ea:9c:2d:da:13:48:aa:16:a9:6e:c1:
16:23:9b:79:d3:92:db:57:12:be:26:f5:b6:6c:b4:c7:2c:94:
a1:90:03:2f:00:14:f7:d6:7e:cf:da:c7:a2:3d:2a:37:61:cd:
9a:15:da:da:99:bd:02:89:ea:18:06:0f:7a:40:53:da:e9:60:
b2:56:e8:cf:70:9d:6d:6c:3e:b3:70:9c:cd:e2:1e:87:ba:ac:
42:63:75:06:c9:25:88:15:18:28:c2:80:06:d1:29:86:11:99:
55:97:1d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZZFUAZG1gvLhkto6TWpAHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5Mjc1MzI3YTVlODVmM2M4YzE0Yzk4NDAzNmY0OTNmZWI1
OWIwMTYwHhcNMjUwNDIxMTYwMTI2WhcNMjUwNDIyMTYwMTI2WjAzMTEwLwYDVQQD
Eyg5NjRiMmJkYzZlODMzMDA2MWY2ZWJlOTU3ZWMyZTA4M2Y5MWY0N2VkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5mWE/sGJ7rOPiQRynGSACQ2Oadh
5/146jH3TL5qnkSYC5f93gzmAXrb/H95XVBCLc8UUQMtB6EZhwe5e0kJ3eMXr+EB
D+XU0AMaeUx4I55KbeMnAiTeXEyP3tEnCFCLU1XHC9S5KKDuvIUuNEQJ97WaToiy
g1/uFn/J7FCg9xvkGKOPxpFwKjPo/Pc+dPkBTuybs4IcTyEnjfZRfgQYF7kBYOal
EukcOAFV6puKnTWmsd7lHdM2NPMI8GP8FBn95NTwTQML3h27FEE+lzN1asWAC1DK
Uqev7Zcos+XptrBWp/TFuTmg06/me0JToj4wcEbhjMDc373M2TdtS1QIcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZLK9xugzAGH26+lX7C4IP5H0ftMB8GA1UdIwQY
MBaAFCknUyel6F88jBTJhANvST/rWbAWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUt
MTY2ZmRkMGIxODIyLzEvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9hMWRlNDQtODZhOS00ZDI5LWI4ZTUtMTY2ZmRkMGIxODIy
LzEvS1NkVEo2WG9YenlNRk1tRUEyOUpQLXRac0JZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAadRJPGd/
WNhxbExTGPjbI0Q+DtdCORPRKaTHCnl7J4fGiJREzo2hZ2Zj/dzrHZVmScwsLU/q
+52cqyd+QvahbAbEXYTC4vG0RbL8qIcATpGGcx00fo3qOu4c3sNs9DDj2OYCVCNN
+R19x28tYkY2acHeio6pm+2svCDSxBqeEU4VCfGBgEcAo6/7secWVB650mZU00hP
deqcLdoTSKoWqW7BFiObedOS21cSvib1tmy0xyyUoZADLwAU99Z+z9rHoj0qN2HN
mhXa2pm9AonqGAYPekBT2ulgslboz3CdbWw+s3CczeIeh7qsQmN1BskliBUYKMKA
BtEphhGZVZcd1A==
-----END CERTIFICATE-----
Generated at Tue Apr 22 00:12:11 2025 by rpki-client