Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
File: Kt_vhCTbu4eonZOJhODis-2aq4s.mft (raw, json)
Hash identifier: a8DMqR8gWakAkOlLbvYGhgWryBwnu4bKE53psGbGVqE=
Subject key identifier: 8C:38:36:1B:44:9E:F4:6D:57:5F:4D:BE:DF:85:DD:B7:41:22:EB:A4
Authority key identifier: 2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
Certificate issuer: /CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Certificate serial: 0194C387D2A4EC2270FC484F80C21EF4156C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
Manifest number: 0412
Signing time: Sat 01 Feb 2025 22:00:45 +0000
Manifest this update: Sat 01 Feb 2025 22:00:45 +0000
Manifest next update: Sun 02 Feb 2025 22:00:45 +0000
Files and hashes: 1: Kt_vhCTbu4eonZOJhODis-2aq4s.crl (hash: XoeGc6ke2CkspOBuCfn5qnwufoDGVYs6hq39KsCxNTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:c3:87:d2:a4:ec:22:70:fc:48:4f:80:c2:1e:f4:15:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2adfef8424dbbb87a89d938984e0e2b3ed9aab8b
Validity
Not Before: Feb 1 22:00:45 2025 GMT
Not After : Feb 2 22:00:45 2025 GMT
Subject: CN=8c38361b449ef46d575f4dbedf85ddb74122eba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:37:48:39:87:69:1b:7a:37:fe:1c:ba:85:
58:c1:06:15:67:80:4f:7a:24:0e:a6:7c:3e:86:ab:
be:7b:28:50:2e:3c:7e:c9:91:a7:05:01:65:5f:ce:
6f:f0:4a:97:b4:b6:71:99:e9:d5:8e:10:cf:8d:36:
3d:24:bf:35:b6:0b:98:b0:29:c6:d2:09:ce:68:c7:
86:ff:0c:42:6b:5f:13:fd:f5:ed:9e:83:52:4e:d3:
65:2e:b6:bb:56:96:2b:00:ef:d5:0a:14:ba:80:af:
6b:4a:b1:1b:59:a8:2f:86:6d:40:3a:9c:7f:56:e8:
5c:f8:73:52:e4:24:54:23:45:40:86:21:d8:65:c2:
5d:d7:2f:62:4b:86:8c:7d:bd:e3:ce:d0:bc:b2:a3:
2e:24:a6:08:f2:95:d4:17:5b:a4:e5:74:9d:bd:18:
4d:11:b6:a6:92:be:f5:e2:12:1d:15:5c:da:5d:16:
ea:a4:3d:28:7a:c6:f5:d0:3c:4e:38:17:ca:e8:b4:
6d:9c:a3:66:31:74:d2:41:9f:fc:36:00:69:d3:0b:
a7:fb:65:bf:25:f6:ac:e1:91:fb:fd:25:97:97:de:
ae:cb:7c:91:a7:c8:6a:9d:3c:01:8d:70:c3:1b:a2:
f8:03:28:61:a3:44:e9:c9:ec:f3:0e:4d:ca:3f:fc:
ba:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:38:36:1B:44:9E:F4:6D:57:5F:4D:BE:DF:85:DD:B7:41:22:EB:A4
X509v3 Authority Key Identifier:
keyid:2A:DF:EF:84:24:DB:BB:87:A8:9D:93:89:84:E0:E2:B3:ED:9A:AB:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kt_vhCTbu4eonZOJhODis-2aq4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/f8d111-7ecb-4ba6-beee-11aa1113e8d6/1/Kt_vhCTbu4eonZOJhODis-2aq4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c3:bb:ec:a5:81:8e:a3:b9:c8:15:5e:9e:e0:8d:7f:85:a6:
d2:f3:19:46:e6:dc:84:54:d7:90:d8:a1:45:01:c2:52:f4:bb:
db:8c:34:db:95:ea:e6:fe:28:58:a1:1e:fb:89:a5:c3:da:44:
6f:46:df:32:3a:82:47:a4:be:bb:38:e5:40:c3:f4:6d:16:d5:
89:e7:e3:9f:a9:e1:de:74:c2:a1:c8:ee:08:39:a2:36:d7:1f:
51:82:3b:f9:fe:ad:16:7d:0d:eb:be:3b:87:2f:f5:44:67:90:
47:92:7a:e0:c0:74:b5:7f:7d:39:61:b9:53:f3:6d:4a:fa:64:
3d:b9:37:70:92:36:07:2f:d8:8a:d9:b2:ef:47:6d:41:46:7c:
54:10:aa:d8:8e:d4:a9:4b:fd:6f:42:2d:11:25:63:6c:89:ec:
20:38:5e:f3:0a:07:6b:49:e9:b0:29:e9:6c:36:5d:5f:42:25:
e8:f7:8e:f3:a9:9b:ff:f2:4f:aa:59:9b:c3:fd:3c:53:89:89:
f9:4d:56:da:10:f1:03:6d:cb:5a:b4:a9:f4:e8:13:97:92:ba:
01:cd:6c:89:b0:8d:5e:30:2e:0a:17:ba:de:e4:8b:ca:9e:f5:
0e:2c:0f:a4:f3:08:78:ef:ff:8a:51:3b:5a:7f:fa:90:67:a6:
28:1b:a3:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZTDh9Kk7CJw/EhPgMIe9BVsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZGZlZjg0MjRkYmJiODdhODlkOTM4OTg0ZTBlMmIzZWQ5
YWFiOGIwHhcNMjUwMjAxMjIwMDQ1WhcNMjUwMjAyMjIwMDQ1WjAzMTEwLwYDVQQD
Eyg4YzM4MzYxYjQ0OWVmNDZkNTc1ZjRkYmVkZjg1ZGRiNzQxMjJlYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3U3SDmHaRt6N/4cuoVYwQYVZ4BP
eiQOpnw+hqu+eyhQLjx+yZGnBQFlX85v8EqXtLZxmenVjhDPjTY9JL81tguYsCnG
0gnOaMeG/wxCa18T/fXtnoNSTtNlLra7VpYrAO/VChS6gK9rSrEbWagvhm1AOpx/
Vuhc+HNS5CRUI0VAhiHYZcJd1y9iS4aMfb3jztC8sqMuJKYI8pXUF1uk5XSdvRhN
Ebamkr714hIdFVzaXRbqpD0oesb10DxOOBfK6LRtnKNmMXTSQZ/8NgBp0wun+2W/
Jfas4ZH7/SWXl96uy3yRp8hqnTwBjXDDG6L4Ayhho0TpyezzDk3KP/y6jQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw4NhtEnvRtV19Nvt+F3bdBIuukMB8GA1UdIwQY
MBaAFCrf74Qk27uHqJ2TiYTg4rPtmquLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUt
MTFhYTExMTNlOGQ2LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi9mOGQxMTEtN2VjYi00YmE2LWJlZWUtMTFhYTExMTNlOGQ2
LzEvS3RfdmhDVGJ1NGVvblpPSmhPRGlzLTJhcTRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX8O77KWB
jqO5yBVenuCNf4Wm0vMZRubchFTXkNihRQHCUvS724w025Xq5v4oWKEe+4mlw9pE
b0bfMjqCR6S+uzjlQMP0bRbViefjn6nh3nTCocjuCDmiNtcfUYI7+f6tFn0N6747
hy/1RGeQR5J64MB0tX99OWG5U/NtSvpkPbk3cJI2By/Yitmy70dtQUZ8VBCq2I7U
qUv9b0ItESVjbInsIDhe8woHa0npsCnpbDZdX0Il6PeO86mb//JPqlmbw/08U4mJ
+U1W2hDxA23LWrSp9OgTl5K6Ac1sibCNXjAuChe63uSLyp71DiwPpPMIeO//ilE7
Wn/6kGemKBujKg==
-----END CERTIFICATE-----
Generated at Sun Feb 2 07:02:33 2025 by rpki-client