Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File: KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier: 1gMUUCoCXA2WRj0S13eXAz6NPqm3pO1wTe1hyM1KvEg=
Subject key identifier: E1:6F:98:AF:E1:E9:F4:65:CF:E1:EA:5A:D4:28:8F:8E:75:87:6C:77
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer: /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial: 019739507DC50690E6D2A9BC0FFD0C83B7B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number: 127E
Signing time: Wed 04 Jun 2025 05:01:05 +0000
Manifest this update: Wed 04 Jun 2025 05:01:05 +0000
Manifest next update: Thu 05 Jun 2025 05:01:05 +0000
Files and hashes: 1: 0kP7QawaDykIu2n6jExAEsOCXMc.roa (hash: DrIxeYyOLVknU21yiJrBY1u2e7Kvc6S4OpbT295PIv4=)
2: FTGHUrnOnM0CZqV9qHNon3zzeQk.roa (hash: qfEgLxXIZ1yGqxOy4Va2BU39hv93XgdmfKbFLCHxqtY=)
3: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: MUZdLAJjtirG9jibndKd5y91C2DPt5j4q5Z4ySGsFPg=)
4: ze5Hj6zKQG-Tt5n-ha7sVFbj4mw.roa (hash: AN3Ve5w1vCNtVQ51w0ixgbhIRYxGbXsS7Tmo5KWlvMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:50:7d:c5:06:90:e6:d2:a9:bc:0f:fd:0c:83:b7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Validity
Not Before: Jun 4 05:01:05 2025 GMT
Not After : Jun 5 05:01:05 2025 GMT
Subject: CN=e16f98afe1e9f465cfe1ea5ad4288f8e75876c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:44:7d:b8:99:59:2c:37:b5:f7:a6:1e:37:
2c:64:88:b8:dc:80:60:fc:eb:70:a7:5b:81:7e:61:
3c:6d:76:c2:ad:7d:2b:91:d7:77:c9:9d:ce:02:12:
5f:51:fb:df:f1:df:8c:07:72:1b:6a:8e:1b:cb:f9:
43:6a:91:60:a0:9e:4c:a7:40:d9:4a:94:52:b9:a1:
43:f7:57:41:1b:a9:c3:e7:6c:63:7e:d3:b4:19:10:
0f:e5:03:91:ba:0f:cc:d2:69:e6:70:f3:69:d9:ac:
20:42:3a:aa:67:bb:e9:a8:07:f8:e9:ec:a9:1f:e8:
54:04:9c:f1:d9:dc:96:71:9b:a4:59:9a:3f:e0:4f:
1b:b2:35:c7:0d:19:20:f3:69:09:f3:6a:58:63:95:
63:d4:0e:30:6e:4d:35:5e:50:6a:f4:0d:32:de:c8:
2c:0c:4c:e8:fd:45:82:f0:82:15:09:22:1c:5c:99:
0e:f5:2e:e6:93:21:f0:81:ed:51:76:7a:6b:20:e4:
e8:62:7f:28:a7:3b:0c:3b:04:5d:10:97:0d:e0:f6:
c7:81:19:31:0e:d2:ee:ca:bf:b3:a8:d2:20:a0:d1:
eb:fb:29:5f:75:d9:55:e6:a4:ab:3e:51:c4:d0:93:
43:e0:5a:f7:fd:0a:82:f9:53:eb:ca:74:b5:cd:f3:
87:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6F:98:AF:E1:E9:F4:65:CF:E1:EA:5A:D4:28:8F:8E:75:87:6C:77
X509v3 Authority Key Identifier:
keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:0a:da:2d:b4:bd:e4:2e:13:74:50:de:15:1e:9c:7a:08:e1:
3e:2c:f7:5f:7a:78:86:77:da:0c:48:fb:a9:c6:da:44:fb:cd:
70:b2:5e:ad:f6:a0:73:49:0d:98:53:7a:54:25:40:f3:c5:11:
7a:4d:58:dc:06:e7:19:41:4a:3d:2d:ed:c1:df:8e:8d:b0:7f:
a6:72:56:57:7d:9f:98:c8:8e:9d:84:ed:12:48:d6:e2:0a:65:
39:81:2d:7f:b5:a1:33:1c:ef:57:33:3f:7c:e4:34:4d:af:81:
db:9b:0c:f8:ba:71:e0:0e:aa:25:e3:75:1c:e3:33:04:24:23:
b2:87:33:bf:b5:f3:6c:ab:03:47:76:39:15:1c:2b:30:33:63:
fd:c6:6e:73:56:23:12:b7:01:ff:bd:35:f6:7d:92:38:44:b7:
3f:eb:9f:e7:83:77:db:65:1d:d8:0b:94:57:ab:94:0e:f7:6b:
58:37:69:1a:55:6b:4f:d9:9d:5c:4e:25:f1:7f:ca:b8:b1:c5:
0d:5e:6a:c7:60:bd:50:19:c8:b8:6a:ce:f8:a8:db:0a:47:46:
36:30:cc:1c:95:9b:58:4b:cc:e4:c2:7b:f5:d3:90:b5:0b:69:
84:b9:d6:0c:03:e2:5f:7f:a7:68:59:9c:73:c9:c5:2f:b5:b1:
90:41:d2:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc5UH3FBpDm0qm8D/0Mg7e0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1
YzYwY2QwHhcNMjUwNjA0MDUwMTA1WhcNMjUwNjA1MDUwMTA1WjAzMTEwLwYDVQQD
EyhlMTZmOThhZmUxZTlmNDY1Y2ZlMWVhNWFkNDI4OGY4ZTc1ODc2Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmZEfbiZWSw3tfemHjcsZIi43IBg
/Otwp1uBfmE8bXbCrX0rkdd3yZ3OAhJfUfvf8d+MB3Ibao4by/lDapFgoJ5Mp0DZ
SpRSuaFD91dBG6nD52xjftO0GRAP5QORug/M0mnmcPNp2awgQjqqZ7vpqAf46eyp
H+hUBJzx2dyWcZukWZo/4E8bsjXHDRkg82kJ82pYY5Vj1A4wbk01XlBq9A0y3sgs
DEzo/UWC8IIVCSIcXJkO9S7mkyHwge1RdnprIOToYn8opzsMOwRdEJcN4PbHgRkx
DtLuyr+zqNIgoNHr+ylfddlV5qSrPlHE0JND4Fr3/QqC+VPrynS1zfOHGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOFvmK/h6fRlz+HqWtQoj451h2x3MB8GA1UdIwQY
MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt
MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1
LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAraLbS9
5C4TdFDeFR6cegjhPiz3X3p4hnfaDEj7qcbaRPvNcLJerfagc0kNmFN6VCVA88UR
ek1Y3AbnGUFKPS3twd+OjbB/pnJWV32fmMiOnYTtEkjW4gplOYEtf7WhMxzvVzM/
fOQ0Ta+B25sM+Lpx4A6qJeN1HOMzBCQjsoczv7XzbKsDR3Y5FRwrMDNj/cZuc1Yj
ErcB/7019n2SOES3P+uf54N322Ud2AuUV6uUDvdrWDdpGlVrT9mdXE4l8X/KuLHF
DV5qx2C9UBnIuGrO+KjbCkdGNjDMHJWbWEvM5MJ79dOQtQtphLnWDAPiX3+naFmc
c8nFL7WxkEHSAA==
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:06:51 2025 by rpki-client