Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: NuMGRVxAbnw5fJ1fyesLCEPjBhbNEyxbN63r6LV7aBs=
Subject key identifier: EE:F3:02:4C:9E:53:CB:A3:52:CA:0F:4A:E2:08:55:58:AF:99:63:2B
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 0196214A409C5D26D72428D87BB2F36E64E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 11ED
Signing time: Thu 10 Apr 2025 20:00:36 +0000
Manifest this update: Thu 10 Apr 2025 20:00:36 +0000
Manifest next update: Fri 11 Apr 2025 20:00:36 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: rW+JclTMIeudZvf1fsPvBX2yfcjpdKW+0ZU59RX3wsI=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:21:4a:40:9c:5d:26:d7:24:28:d8:7b:b2:f3:6e:64:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Apr 10 20:00:36 2025 GMT
Not After : Apr 11 20:00:36 2025 GMT
Subject: CN=eef3024c9e53cba352ca0f4ae2085558af99632b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8e:25:24:c0:32:33:fe:73:7c:40:0b:6b:84:
1d:fc:fd:9c:07:ce:88:b1:c0:1e:af:77:6a:40:08:
5c:e8:c5:bd:c4:9c:39:ee:11:5b:68:e3:0a:14:5c:
63:24:15:f0:92:7c:6e:cb:9c:b7:e1:ee:b6:1c:68:
22:c9:55:e5:b2:c6:66:63:15:87:43:5a:fa:48:b3:
ab:fc:18:a6:fb:3d:f2:01:66:ef:96:de:b7:d4:d0:
46:d0:f6:ab:d8:19:91:63:c7:16:f3:7d:7f:71:c6:
89:ee:1a:be:91:23:98:f7:78:eb:70:bf:02:58:90:
34:33:29:a4:21:bf:e3:4f:36:74:17:80:58:9e:4d:
6f:11:0d:8d:2b:1c:0e:79:5e:b1:65:0c:a4:46:ce:
9c:f5:3b:c9:7c:e7:77:75:8a:b2:78:7c:fa:44:95:
17:d3:a7:c2:f6:b0:99:e7:a0:ac:53:5f:50:ae:05:
8e:2e:88:f8:1d:f8:5f:77:4d:68:5d:8e:87:0c:c8:
9f:2b:ab:8b:21:83:21:5b:66:97:d9:22:10:63:d0:
ab:c9:49:23:ef:aa:68:e7:56:79:bb:a2:ee:0b:a3:
4f:b1:09:23:01:05:be:7f:ab:0b:f3:7d:1e:fb:c1:
d3:1a:db:b6:5a:4d:05:4e:65:0e:cb:74:be:5b:0f:
58:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F3:02:4C:9E:53:CB:A3:52:CA:0F:4A:E2:08:55:58:AF:99:63:2B
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:8f:64:78:1e:e2:0c:57:5b:74:89:81:42:ce:1b:51:ad:4f:
cb:8a:5b:c9:25:3f:c9:16:02:aa:3c:ff:67:27:f5:18:b8:ff:
92:ec:2f:ed:27:82:5d:c5:8b:ac:86:f1:a2:53:74:92:2c:68:
da:b4:6c:51:ae:c3:34:df:be:a8:93:98:9a:71:22:da:38:cc:
18:2a:75:9e:7a:02:2f:1b:c2:1c:98:a9:85:f6:40:69:12:e0:
b0:79:a5:09:8a:de:8c:01:b8:d1:96:1f:fe:de:4e:8d:75:0a:
63:22:50:e0:ac:9c:bd:2d:0a:92:4f:70:9f:20:75:f5:de:fd:
0e:61:5c:ce:3a:37:3f:76:0b:aa:0f:8d:72:c4:45:4c:ef:9a:
9b:b3:4a:0d:bc:4a:8c:8c:63:58:d5:e9:9c:3c:9e:b3:2f:c5:
37:ba:aa:14:e6:bd:3b:fd:07:d3:9f:ed:36:41:f0:6c:00:17:
be:92:e6:97:60:b9:62:29:f6:b2:cc:1c:c6:33:b5:4a:44:e9:
e6:4a:9b:4d:5e:89:93:15:42:6f:1b:46:2f:90:9a:1b:da:27:
51:3e:ac:56:52:5e:60:76:94:fc:9a:63:bf:c6:fd:ec:af:28:
03:dc:74:9c:56:6d:6b:ca:52:c3:10:7b:24:54:16:56:4f:fb:
52:6c:46:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYhSkCcXSbXJCjYe7LzbmTiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1
YzYwY2QwHhcNMjUwNDEwMjAwMDM2WhcNMjUwNDExMjAwMDM2WjAzMTEwLwYDVQQD
EyhlZWYzMDI0YzllNTNjYmEzNTJjYTBmNGFlMjA4NTU1OGFmOTk2MzJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr44lJMAyM/5zfEALa4Qd/P2cB86I
scAer3dqQAhc6MW9xJw57hFbaOMKFFxjJBXwknxuy5y34e62HGgiyVXlssZmYxWH
Q1r6SLOr/Bim+z3yAWbvlt631NBG0Par2BmRY8cW831/ccaJ7hq+kSOY93jrcL8C
WJA0MymkIb/jTzZ0F4BYnk1vEQ2NKxwOeV6xZQykRs6c9TvJfOd3dYqyeHz6RJUX
06fC9rCZ56CsU19QrgWOLoj4Hfhfd01oXY6HDMifK6uLIYMhW2aX2SIQY9CryUkj
76po51Z5u6LuC6NPsQkjAQW+f6sL830e+8HTGtu2Wk0FTmUOy3S+Ww9YSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO7zAkyeU8ujUsoPSuIIVVivmWMrMB8GA1UdIwQY
MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt
MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1
LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm49keB7i
DFdbdImBQs4bUa1Py4pbySU/yRYCqjz/Zyf1GLj/kuwv7SeCXcWLrIbxolN0kixo
2rRsUa7DNN++qJOYmnEi2jjMGCp1nnoCLxvCHJiphfZAaRLgsHmlCYrejAG40ZYf
/t5OjXUKYyJQ4KycvS0Kkk9wnyB19d79DmFczjo3P3YLqg+NcsRFTO+am7NKDbxK
jIxjWNXpnDyesy/FN7qqFOa9O/0H05/tNkHwbAAXvpLml2C5Yin2sswcxjO1SkTp
5kqbTV6JkxVCbxtGL5CaG9onUT6sVlJeYHaU/Jpjv8b97K8oA9x0nFZta8pSwxB7
JFQWVk/7UmxG6Q==
-----END CERTIFICATE-----
Generated at Thu Apr 10 23:06:09 2025 by rpki-client