Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
File: KPev7E0_BvgNaHKm1iRs0B5z1qY.mft (raw, json)
Hash identifier: 5raozg7VIRK+/pFEoTX7wtpA0Jo1I2vua9xqv/9N0Rc=
Subject key identifier: 20:DD:DE:38:F9:5B:52:B7:0C:CF:CE:2A:91:2B:2C:44:85:4F:F1:68
Authority key identifier: 28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
Certificate issuer: /CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Certificate serial: 0196A8424F2DB9AE0DB97A1307133C892C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
Manifest number: 1525
Signing time: Wed 07 May 2025 01:00:39 +0000
Manifest this update: Wed 07 May 2025 01:00:39 +0000
Manifest next update: Thu 08 May 2025 01:00:39 +0000
Files and hashes: 1: KPev7E0_BvgNaHKm1iRs0B5z1qY.crl (hash: uVHoos3IaMXK/zHZ5N9BSnJpXPjq0TXZhPoOlNBrPmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a8:42:4f:2d:b9:ae:0d:b9:7a:13:07:13:3c:89:2c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28f7afec4d3f06f80d6872a6d6246cd01e73d6a6
Validity
Not Before: May 7 01:00:39 2025 GMT
Not After : May 8 01:00:39 2025 GMT
Subject: CN=20ddde38f95b52b70ccfce2a912b2c44854ff168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:0e:2f:81:b8:0d:60:ab:8a:60:e5:84:6c:
52:ac:7a:69:68:76:a8:a5:83:76:45:f6:a4:c7:03:
28:f7:53:d4:ef:64:3f:3c:e5:c2:2d:84:3b:44:b6:
ca:67:65:3f:7f:62:92:81:03:a3:84:6e:49:2e:44:
19:a5:26:aa:94:ff:d6:da:5a:34:70:39:b7:20:67:
97:00:c0:af:1e:85:48:fd:e0:e2:00:7b:15:05:1b:
ff:d8:b5:b1:d9:e2:d2:e8:f9:cf:d3:d9:f5:9c:70:
e9:1c:70:08:95:f7:21:eb:85:5e:26:2b:e6:1d:9e:
17:e5:29:5b:58:b4:1b:43:c5:ec:f3:03:27:93:db:
a2:b0:fc:14:d4:78:f1:93:41:30:53:06:bb:2a:9e:
68:94:c4:10:39:5e:7c:26:da:a0:40:16:78:98:b5:
f4:23:c3:64:fd:1d:de:10:3d:d4:e3:94:8b:1a:01:
d9:c2:77:b5:d4:fd:fe:5d:b9:ca:3a:34:89:09:92:
01:d7:7c:fa:90:05:e2:4e:72:ee:73:40:47:73:8d:
31:18:42:0c:9d:15:53:83:62:17:d3:48:cd:af:36:
f4:c8:2e:7e:34:b1:d1:65:30:32:29:28:8e:86:8b:
32:b2:35:fb:9b:61:57:ca:a8:17:c2:a2:bc:7b:73:
44:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DD:DE:38:F9:5B:52:B7:0C:CF:CE:2A:91:2B:2C:44:85:4F:F1:68
X509v3 Authority Key Identifier:
keyid:28:F7:AF:EC:4D:3F:06:F8:0D:68:72:A6:D6:24:6C:D0:1E:73:D6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KPev7E0_BvgNaHKm1iRs0B5z1qY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/217a30-8ee1-4913-a127-576d403c918f/1/KPev7E0_BvgNaHKm1iRs0B5z1qY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:d4:0b:f1:0e:64:52:fd:b7:9b:c0:f0:41:89:84:8e:c7:e2:
75:24:71:ea:bc:19:e1:84:a8:8a:e9:b1:77:0f:fb:f2:a6:f7:
a2:c8:2d:13:3e:e4:b9:b9:bb:83:dc:dc:5f:7a:47:82:c7:a3:
28:83:2f:3c:19:ab:5c:c4:8d:75:ca:88:24:9f:64:f0:bc:98:
68:41:6b:3b:ad:96:d1:4c:bd:e6:6f:41:d0:98:ed:70:fe:94:
b6:25:cf:aa:50:35:be:32:87:f0:1b:65:01:58:62:f0:1d:a0:
31:6c:8a:39:53:0a:87:3b:71:a1:81:fd:fc:1b:49:5d:fd:4a:
17:fc:30:01:33:78:12:d6:ca:4b:4f:7a:e0:68:47:ea:40:9a:
78:bb:15:2f:ab:5d:93:fc:87:2e:f4:d5:c7:ab:cc:7e:3a:22:
6a:ee:c2:47:6f:42:6a:03:d5:13:7f:2c:93:d1:37:c3:2d:dc:
49:45:34:d1:e5:b4:ac:58:4c:97:37:a4:e9:87:19:93:5b:b0:
01:f6:da:2e:08:6b:b4:7f:bd:52:17:c1:8b:79:90:30:f4:09:
18:36:2a:7a:d0:57:d6:d0:50:55:9a:5b:00:1f:a1:f8:b9:1c:
55:56:3b:ad:0a:11:ae:57:9b:94:65:e5:3b:f7:34:0e:f5:f4:
7e:f7:ea:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaoQk8tua4NuXoTBxM8iSx/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ZjdhZmVjNGQzZjA2ZjgwZDY4NzJhNmQ2MjQ2Y2QwMWU3
M2Q2YTYwHhcNMjUwNTA3MDEwMDM5WhcNMjUwNTA4MDEwMDM5WjAzMTEwLwYDVQQD
EygyMGRkZGUzOGY5NWI1MmI3MGNjZmNlMmE5MTJiMmM0NDg1NGZmMTY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMwOL4G4DWCrimDlhGxSrHppaHao
pYN2RfakxwMo91PU72Q/POXCLYQ7RLbKZ2U/f2KSgQOjhG5JLkQZpSaqlP/W2lo0
cDm3IGeXAMCvHoVI/eDiAHsVBRv/2LWx2eLS6PnP09n1nHDpHHAIlfch64VeJivm
HZ4X5SlbWLQbQ8Xs8wMnk9uisPwU1Hjxk0EwUwa7Kp5olMQQOV58JtqgQBZ4mLX0
I8Nk/R3eED3U45SLGgHZwne11P3+XbnKOjSJCZIB13z6kAXiTnLuc0BHc40xGEIM
nRVTg2IX00jNrzb0yC5+NLHRZTAyKSiOhosysjX7m2FXyqgXwqK8e3NEcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDd3jj5W1K3DM/OKpErLESFT/FoMB8GA1UdIwQY
MBaAFCj3r+xNPwb4DWhyptYkbNAec9amMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjct
NTc2ZDQwM2M5MThmLzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yMTdhMzAtOGVlMS00OTEzLWExMjctNTc2ZDQwM2M5MThm
LzEvS1BldjdFMF9CdmdOYUhLbTFpUnMwQjV6MXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3tQL8Q5k
Uv23m8DwQYmEjsfidSRx6rwZ4YSoiumxdw/78qb3osgtEz7kubm7g9zcX3pHgsej
KIMvPBmrXMSNdcqIJJ9k8LyYaEFrO62W0Uy95m9B0JjtcP6UtiXPqlA1vjKH8Btl
AVhi8B2gMWyKOVMKhztxoYH9/BtJXf1KF/wwATN4EtbKS0964GhH6kCaeLsVL6td
k/yHLvTVx6vMfjoiau7CR29CagPVE38sk9E3wy3cSUU00eW0rFhMlzek6YcZk1uw
AfbaLghrtH+9UhfBi3mQMPQJGDYqetBX1tBQVZpbAB+h+LkcVVY7rQoRrleblGXl
O/c0DvX0fvfqYQ==
-----END CERTIFICATE-----
Generated at Wed May 7 04:16:29 2025 by rpki-client