Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
File: KrkePe2CDHC4rOia6v_6vua_pVM.mft (raw, json)
Hash identifier: x7YiB9iKiXBXyUNK0nMy4ljfSL0TfCa5OWMVH+3aN9c=
Subject key identifier: 7E:F7:C1:71:D3:84:91:92:A0:7B:1F:3B:F1:B0:CF:B7:F6:1C:BA:BE
Authority key identifier: 2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
Certificate issuer: /CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Certificate serial: 019511D95A8B4DD112647EC77CC88A67806E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
Manifest number: 052D
Signing time: Mon 17 Feb 2025 03:00:11 +0000
Manifest this update: Mon 17 Feb 2025 03:00:11 +0000
Manifest next update: Tue 18 Feb 2025 03:00:11 +0000
Files and hashes: 1: KrkePe2CDHC4rOia6v_6vua_pVM.crl (hash: FrqqM5r71rBVYJ00VxsH2Z0K5J1sXwfkokP2JzN/tQk=)
2: z3h-H5HBZcjmh2dP-uTIZcL8mqs.roa (hash: UbD7o5RQ7Yy/qV+kWLLXW0biF8q9IDLYH8QBkrKYQu4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:11:d9:5a:8b:4d:d1:12:64:7e:c7:7c:c8:8a:67:80:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ab91e3ded820c70b8ace89aeafffabee6bfa553
Validity
Not Before: Feb 17 03:00:11 2025 GMT
Not After : Feb 18 03:00:11 2025 GMT
Subject: CN=7ef7c171d3849192a07b1f3bf1b0cfb7f61cbabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f8:fe:81:04:a0:8e:5f:38:ad:8f:4a:fb:2f:
9a:19:f8:27:d2:aa:07:06:bc:b6:aa:1c:f4:d0:ba:
62:a8:3e:cc:8a:d6:32:59:29:2b:20:0d:45:03:e7:
ba:bd:aa:fc:69:73:bf:99:25:13:90:78:9e:70:ac:
5c:06:b5:b9:db:13:83:ee:36:df:78:36:59:a2:86:
4f:aa:8d:ab:4c:61:03:8a:5d:ff:1b:e9:11:78:94:
f2:10:fc:ac:fa:17:51:43:50:7b:2f:e6:68:79:aa:
68:26:47:82:96:2c:0c:76:2d:36:d1:ed:af:53:64:
f6:ac:50:73:2d:e6:66:b0:17:65:9c:53:8f:8d:a9:
2d:c4:38:63:8e:41:6c:fa:89:f5:e4:32:de:f9:03:
ed:0e:3d:d0:1c:a3:eb:3f:7c:13:2e:5a:31:3b:0b:
70:ec:52:e8:a0:97:75:8b:c5:00:10:6f:95:f1:05:
ae:e9:97:7e:0c:0a:b0:f2:bd:94:dc:e0:52:e0:aa:
37:8d:84:11:22:2f:e7:cf:80:0b:40:29:a2:a3:a3:
0f:98:f7:b6:69:4b:3b:d7:8c:d3:b9:12:bc:e0:d1:
eb:c0:b3:1f:78:20:15:c8:61:08:8d:97:d3:d9:3b:
65:e4:63:fa:f9:67:28:35:b7:bf:fe:67:d4:63:39:
5a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F7:C1:71:D3:84:91:92:A0:7B:1F:3B:F1:B0:CF:B7:F6:1C:BA:BE
X509v3 Authority Key Identifier:
keyid:2A:B9:1E:3D:ED:82:0C:70:B8:AC:E8:9A:EA:FF:FA:BE:E6:BF:A5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KrkePe2CDHC4rOia6v_6vua_pVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/16d84b-0961-4d1e-85cc-61de21f51434/1/KrkePe2CDHC4rOia6v_6vua_pVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:a7:dd:6a:f7:1d:49:fc:d4:c4:90:27:39:1f:34:87:ce:3a:
37:b7:36:1a:93:6c:e1:7c:74:1b:51:19:8d:31:e9:ea:09:2d:
8f:ec:a8:b2:94:c0:38:a7:82:ed:c4:21:4d:e5:29:6c:8c:c8:
52:e3:ce:48:a6:06:81:d6:eb:fb:18:b8:bf:a7:9c:47:63:fd:
7c:61:34:d6:b8:c2:4a:a4:a3:52:60:73:d5:29:e9:66:b7:c9:
87:4d:0b:3b:88:c6:9f:ad:2c:a4:95:28:b5:37:ec:76:cc:9d:
82:e7:ff:35:dc:79:14:7e:38:7c:2c:07:d1:4d:b2:9e:ad:74:
0b:4d:48:1d:e9:77:6c:c5:c1:a7:b5:83:6d:dd:a5:d1:c5:d5:
72:aa:56:a6:42:7a:8d:5b:6d:2a:20:82:4a:bc:90:ec:ec:3f:
cd:89:f4:c8:c7:3e:f2:9a:36:a2:44:cf:8c:78:4f:6a:9e:4c:
02:da:40:56:22:f8:58:ad:be:03:ca:8e:db:f5:2e:50:e4:2c:
9d:e0:78:0d:5b:8c:a5:6a:c5:2f:92:bd:37:43:a0:d3:92:af:
7b:0b:15:3c:8e:65:64:4b:ff:1f:38:3e:86:ad:97:d3:b5:51:
d4:69:db:5b:91:9a:d2:b8:63:3d:d3:d2:0d:07:c2:43:76:6f:
50:02:77:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZUR2VqLTdESZH7HfMiKZ4BuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYjkxZTNkZWQ4MjBjNzBiOGFjZTg5YWVhZmZmYWJlZTZi
ZmE1NTMwHhcNMjUwMjE3MDMwMDExWhcNMjUwMjE4MDMwMDExWjAzMTEwLwYDVQQD
Eyg3ZWY3YzE3MWQzODQ5MTkyYTA3YjFmM2JmMWIwY2ZiN2Y2MWNiYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvj+gQSgjl84rY9K+y+aGfgn0qoH
Bry2qhz00LpiqD7MitYyWSkrIA1FA+e6var8aXO/mSUTkHiecKxcBrW52xOD7jbf
eDZZooZPqo2rTGEDil3/G+kReJTyEPys+hdRQ1B7L+ZoeapoJkeCliwMdi020e2v
U2T2rFBzLeZmsBdlnFOPjaktxDhjjkFs+on15DLe+QPtDj3QHKPrP3wTLloxOwtw
7FLooJd1i8UAEG+V8QWu6Zd+DAqw8r2U3OBS4Ko3jYQRIi/nz4ALQCmio6MPmPe2
aUs714zTuRK84NHrwLMfeCAVyGEIjZfT2Ttl5GP6+WcoNbe//mfUYzlasQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH73wXHThJGSoHsfO/Gwz7f2HLq+MB8GA1UdIwQY
MBaAFCq5Hj3tggxwuKzomur/+r7mv6VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2Mt
NjFkZTIxZjUxNDM0LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNmQ4NGItMDk2MS00ZDFlLTg1Y2MtNjFkZTIxZjUxNDM0
LzEvS3JrZVBlMkNESEM0ck9pYTZ2XzZ2dWFfcFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWqfdavcd
SfzUxJAnOR80h846N7c2GpNs4Xx0G1EZjTHp6gktj+yospTAOKeC7cQhTeUpbIzI
UuPOSKYGgdbr+xi4v6ecR2P9fGE01rjCSqSjUmBz1SnpZrfJh00LO4jGn60spJUo
tTfsdsydguf/Ndx5FH44fCwH0U2ynq10C01IHel3bMXBp7WDbd2l0cXVcqpWpkJ6
jVttKiCCSryQ7Ow/zYn0yMc+8po2okTPjHhPap5MAtpAViL4WK2+A8qO2/UuUOQs
neB4DVuMpWrFL5K9N0Og05KvewsVPI5lZEv/Hzg+hq2X07VR1GnbW5Ga0rhjPdPS
DQfCQ3ZvUAJ3Ug==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:30 2025 by rpki-client