Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
File: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft (raw, json)
Hash identifier: VHjtLVXERAfK8W8B+rjC6kyRdFWaqD74Nu36XC8UZ5k=
Subject key identifier: 70:C9:08:D8:35:88:8C:41:28:95:A4:90:22:91:00:C2:CD:78:43:2D
Authority key identifier: 29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
Certificate issuer: /CN=29851f7ae610b1d0061500b343a4868f3256066e
Certificate serial: 019655A561FD1DD14E803CE133EAE0E4311B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
Manifest number: 0599
Signing time: Mon 21 Apr 2025 00:00:23 +0000
Manifest this update: Mon 21 Apr 2025 00:00:23 +0000
Manifest next update: Tue 22 Apr 2025 00:00:23 +0000
Files and hashes: 1: JCxOuTIjLujlao5I9hrb5gQegGo.roa (hash: SDv0FBjSKSZUTMpJ38YSkos63s4YQ/vsV3WiI+cz/dg=)
2: KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl (hash: kWGIATJBuUpViolEj2G1wgl8aooB+LnuUf6t3Ux7vM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 00:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:55:a5:61:fd:1d:d1:4e:80:3c:e1:33:ea:e0:e4:31:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29851f7ae610b1d0061500b343a4868f3256066e
Validity
Not Before: Apr 21 00:00:23 2025 GMT
Not After : Apr 22 00:00:23 2025 GMT
Subject: CN=70c908d835888c412895a490229100c2cd78432d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:c5:e2:64:50:59:79:66:6d:75:38:1d:35:
bf:42:00:63:a6:25:04:8f:89:18:f3:08:f8:22:9d:
c7:28:a0:66:f2:1b:e0:66:b2:8e:33:81:2e:95:11:
ea:3e:e3:e7:52:8f:88:6a:b2:4b:9f:ad:38:70:72:
9a:a4:cb:6f:89:df:a2:ea:f2:ee:ef:ec:12:b9:ba:
ec:e5:68:90:22:2c:05:35:be:14:ec:20:1b:92:af:
31:36:36:d9:a9:47:6e:c2:15:63:9e:11:22:2a:18:
5b:09:ff:38:99:59:54:ea:fb:dd:dd:b9:18:eb:06:
61:55:5e:c8:f2:83:42:d6:4e:2e:db:58:6e:8d:52:
8a:aa:1a:4b:c5:a0:f5:87:3d:6a:54:3b:c3:7e:66:
c5:1d:5c:ac:c4:ec:79:ea:7a:e4:45:fd:33:ba:d1:
4d:e3:9b:c4:9e:a6:e4:41:91:ea:37:b1:85:3e:ae:
b1:d8:b1:3d:a4:46:f1:44:87:04:22:8c:ec:52:08:
a1:04:f7:b3:18:be:29:6c:5e:5a:01:57:58:e6:ae:
cc:e3:0f:0e:67:43:77:a8:c6:b5:20:85:38:d1:59:
91:43:0e:69:50:c1:40:13:bb:da:3e:d7:db:e8:d6:
94:d3:ab:f1:61:cf:d6:52:8f:92:c3:83:25:f4:1b:
b1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:C9:08:D8:35:88:8C:41:28:95:A4:90:22:91:00:C2:CD:78:43:2D
X509v3 Authority Key Identifier:
keyid:29:85:1F:7A:E6:10:B1:D0:06:15:00:B3:43:A4:86:8F:32:56:06:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/824652-56e4-4be5-9be3-d04ded7ded00/1/KYUfeuYQsdAGFQCzQ6SGjzJWBm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:dc:dc:23:3e:34:d4:b1:e6:24:a9:a2:0e:16:b0:24:70:58:
eb:86:29:30:1e:5f:00:2b:9a:3a:ee:9c:d2:b9:21:36:39:d9:
5e:4b:a0:3b:19:b9:c1:37:cc:af:8c:15:42:46:34:18:84:72:
67:c8:fd:ff:39:35:e3:e4:a1:1e:ac:2d:dc:3c:f2:a8:85:bb:
63:0b:f1:72:34:94:45:6f:7f:67:30:90:93:0d:70:7a:2e:a5:
6f:6b:79:55:a4:3a:79:51:df:b0:d6:8e:22:36:05:88:05:9f:
7f:9d:72:c5:52:9a:26:df:59:95:4e:67:69:be:99:ce:ee:36:
be:fa:21:40:cc:d8:fa:8b:7c:93:b7:d1:10:76:36:39:58:39:
90:67:59:01:e7:eb:99:f9:b6:f3:c9:6d:f2:11:c7:c9:78:a3:
06:a4:77:bf:4b:53:d8:2a:7c:3a:2a:b5:49:ea:91:1e:e1:b4:
bf:0b:56:c9:6b:56:ea:f3:22:c5:66:bd:6c:1e:bb:2e:9e:03:
3c:9b:7c:59:ce:cb:ff:89:4a:16:32:51:3e:c4:3e:49:a8:e4:
d4:2e:8c:c4:19:4d:6b:31:e7:31:fb:ae:a1:e5:2e:d8:04:ed:
f9:53:22:73:87:96:d1:93:29:75:90:05:b2:d5:df:38:09:65:
5c:64:43:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZVpWH9HdFOgDzhM+rg5DEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ODUxZjdhZTYxMGIxZDAwNjE1MDBiMzQzYTQ4NjhmMzI1
NjA2NmUwHhcNMjUwNDIxMDAwMDIzWhcNMjUwNDIyMDAwMDIzWjAzMTEwLwYDVQQD
Eyg3MGM5MDhkODM1ODg4YzQxMjg5NWE0OTAyMjkxMDBjMmNkNzg0MzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBHF4mRQWXlmbXU4HTW/QgBjpiUE
j4kY8wj4Ip3HKKBm8hvgZrKOM4EulRHqPuPnUo+IarJLn604cHKapMtvid+i6vLu
7+wSubrs5WiQIiwFNb4U7CAbkq8xNjbZqUduwhVjnhEiKhhbCf84mVlU6vvd3bkY
6wZhVV7I8oNC1k4u21hujVKKqhpLxaD1hz1qVDvDfmbFHVysxOx56nrkRf0zutFN
45vEnqbkQZHqN7GFPq6x2LE9pEbxRIcEIozsUgihBPezGL4pbF5aAVdY5q7M4w8O
Z0N3qMa1IIU40VmRQw5pUMFAE7vaPtfb6NaU06vxYc/WUo+Sw4Ml9BuxFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHDJCNg1iIxBKJWkkCKRAMLNeEMtMB8GA1UdIwQY
MBaAFCmFH3rmELHQBhUAs0Okho8yVgZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMt
ZDA0ZGVkN2RlZDAwLzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84MjQ2NTItNTZlNC00YmU1LTliZTMtZDA0ZGVkN2RlZDAw
LzEvS1lVZmV1WVFzZEFHRlFDelE2U0dqekpXQm00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAldzcIz40
1LHmJKmiDhawJHBY64YpMB5fACuaOu6c0rkhNjnZXkugOxm5wTfMr4wVQkY0GIRy
Z8j9/zk14+ShHqwt3DzyqIW7YwvxcjSURW9/ZzCQkw1wei6lb2t5VaQ6eVHfsNaO
IjYFiAWff51yxVKaJt9ZlU5nab6Zzu42vvohQMzY+ot8k7fREHY2OVg5kGdZAefr
mfm288lt8hHHyXijBqR3v0tT2Cp8Oiq1SeqRHuG0vwtWyWtW6vMixWa9bB67Lp4D
PJt8Wc7L/4lKFjJRPsQ+Sajk1C6MxBlNazHnMfuuoeUu2ATt+VMic4eW0ZMpdZAF
stXfOAllXGRDIw==
-----END CERTIFICATE-----
Generated at Mon Apr 21 06:47:20 2025 by rpki-client