Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
File: k_6KleVSnXjnIEfU410afprVwRo.mft (raw, json)
Hash identifier: 6YluFWCaef8ybQwtpN2m6F/HQaMeeKIq2M9Jl8Ktg2A=
Subject key identifier: 56:8D:8A:97:12:CD:07:C5:BF:EE:68:01:8A:76:56:80:D7:4C:C8:19
Authority key identifier: 93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
Certificate issuer: /CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Certificate serial: 0196748B8CE673F6FDFD22E2F4BC37FAACD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
Manifest number: 0F73
Signing time: Sun 27 Apr 2025 00:00:24 +0000
Manifest this update: Sun 27 Apr 2025 00:00:24 +0000
Manifest next update: Mon 28 Apr 2025 00:00:24 +0000
Files and hashes: 1: 1-CkrT83J2r6H2IArRB97VaFfjh0.roa (hash: BhTDJ77YgLb9cA09YBYRFayzA/zGCXfnlywl/s38PZA=)
2: k_6KleVSnXjnIEfU410afprVwRo.crl (hash: rlR0oVDbJ6eMEIH5OniawmCXWkF/dJJl6cuJNh1kIx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 00:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:74:8b:8c:e6:73:f6:fd:fd:22:e2:f4:bc:37:fa:ac:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fe8a95e5529d78e72047d4e35d1a7e9ad5c11a
Validity
Not Before: Apr 27 00:00:24 2025 GMT
Not After : Apr 28 00:00:24 2025 GMT
Subject: CN=568d8a9712cd07c5bfee68018a765680d74cc819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:c9:c9:3b:02:dc:82:c7:f1:71:a9:1a:9e:c8:
68:fa:6d:0e:bd:83:48:6f:1f:1f:1a:e8:ba:7e:d3:
94:8a:1f:08:68:78:38:06:5d:37:94:7c:2a:8c:c9:
4c:f6:e4:90:e3:89:6d:30:1d:bf:e1:6c:24:67:14:
11:d1:1c:7f:ec:bc:ed:83:2d:bd:04:b1:54:9b:32:
c1:38:0f:95:c4:d1:40:a5:47:fd:96:65:d8:ad:5a:
1e:c4:05:76:a9:4c:d1:33:21:38:b2:a2:a8:3a:cb:
14:41:6f:c8:70:41:2d:3e:ea:13:ce:3b:64:e9:f5:
d3:39:cc:f1:04:a2:69:c1:05:32:ca:07:60:84:f4:
26:9d:24:19:01:87:ed:40:f4:17:13:a4:cc:92:43:
62:99:db:8e:7f:41:1c:cb:89:34:9c:39:2d:36:b6:
b6:de:f2:83:a0:b9:e3:c9:09:fa:06:86:31:9b:d8:
16:22:69:2e:97:c3:79:32:97:4b:6b:e3:20:82:13:
73:0c:ea:63:1b:34:c4:94:7f:00:24:05:d8:5d:6a:
de:c3:99:6a:63:7d:d0:56:01:0d:ce:a9:fb:b9:6c:
a4:22:7a:48:fb:ac:97:23:d4:f4:0f:ec:42:4a:4a:
c1:d2:87:52:ee:77:cb:4e:60:95:21:f2:eb:b7:cb:
6c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8D:8A:97:12:CD:07:C5:BF:EE:68:01:8A:76:56:80:D7:4C:C8:19
X509v3 Authority Key Identifier:
keyid:93:FE:8A:95:E5:52:9D:78:E7:20:47:D4:E3:5D:1A:7E:9A:D5:C1:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_6KleVSnXjnIEfU410afprVwRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0547bb-4408-491e-90a0-fa709a23ac74/1/k_6KleVSnXjnIEfU410afprVwRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a9:bd:bc:6f:92:1e:ad:44:67:b4:cd:77:2e:54:42:af:6e:
21:d6:af:10:79:d6:8f:15:41:67:86:97:91:ff:ea:3d:52:d6:
34:1a:33:3a:bc:a1:04:2a:9f:08:5f:80:30:0e:36:e4:7b:47:
19:08:ab:c7:02:97:b5:cd:16:d1:b3:92:f1:82:f4:97:e6:68:
f4:9e:c6:23:e9:89:58:d2:e5:0f:45:72:e4:f1:30:95:7b:22:
db:4e:77:65:8d:b8:7f:58:0c:db:25:4a:f6:b0:c1:34:07:c8:
70:cc:6e:0e:c6:8c:05:25:a7:6c:2c:8a:21:ad:43:ec:83:d6:
78:88:22:bb:e2:95:c0:13:66:7c:05:5d:47:93:57:be:8d:58:
cd:0e:12:c0:a6:2f:05:17:c8:5d:7d:25:f1:1c:df:9e:bf:ea:
08:35:cd:bc:2a:60:bf:3b:ba:92:da:02:4c:4a:a1:ed:3b:90:
27:13:a2:55:50:d8:b9:87:a8:b2:71:38:1c:8e:d6:8d:63:6c:
ff:ee:ef:93:8e:69:34:b6:89:51:43:f5:bb:8f:74:42:2b:44:
62:d9:3e:c1:61:f7:40:bd:bd:fe:1d:0a:5a:60:b0:66:a9:99:
29:5c:9c:20:1c:37:20:7a:4e:22:64:67:e7:e2:d6:a2:e0:49:
d4:d4:2d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ0i4zmc/b9/SLi9Lw3+qzWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmU4YTk1ZTU1MjlkNzhlNzIwNDdkNGUzNWQxYTdlOWFk
NWMxMWEwHhcNMjUwNDI3MDAwMDI0WhcNMjUwNDI4MDAwMDI0WjAzMTEwLwYDVQQD
Eyg1NjhkOGE5NzEyY2QwN2M1YmZlZTY4MDE4YTc2NTY4MGQ3NGNjODE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6snJOwLcgsfxcakansho+m0OvYNI
bx8fGui6ftOUih8IaHg4Bl03lHwqjMlM9uSQ44ltMB2/4WwkZxQR0Rx/7Lztgy29
BLFUmzLBOA+VxNFApUf9lmXYrVoexAV2qUzRMyE4sqKoOssUQW/IcEEtPuoTzjtk
6fXTOczxBKJpwQUyygdghPQmnSQZAYftQPQXE6TMkkNimduOf0Ecy4k0nDktNra2
3vKDoLnjyQn6BoYxm9gWImkul8N5MpdLa+MgghNzDOpjGzTElH8AJAXYXWrew5lq
Y33QVgENzqn7uWykInpI+6yXI9T0D+xCSkrB0odS7nfLTmCVIfLrt8tsPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFaNipcSzQfFv+5oAYp2VoDXTMgZMB8GA1UdIwQY
MBaAFJP+ipXlUp145yBH1ONdGn6a1cEaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAt
ZmE3MDlhMjNhYzc0LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wNTQ3YmItNDQwOC00OTFlLTkwYTAtZmE3MDlhMjNhYzc0
LzEva182S2xlVlNuWGpuSUVmVTQxMGFmcHJWd1JvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKm9vG+S
Hq1EZ7TNdy5UQq9uIdavEHnWjxVBZ4aXkf/qPVLWNBozOryhBCqfCF+AMA425HtH
GQirxwKXtc0W0bOS8YL0l+Zo9J7GI+mJWNLlD0Vy5PEwlXsi2053ZY24f1gM2yVK
9rDBNAfIcMxuDsaMBSWnbCyKIa1D7IPWeIgiu+KVwBNmfAVdR5NXvo1YzQ4SwKYv
BRfIXX0l8Rzfnr/qCDXNvCpgvzu6ktoCTEqh7TuQJxOiVVDYuYeosnE4HI7WjWNs
/+7vk45pNLaJUUP1u490QitEYtk+wWH3QL29/h0KWmCwZqmZKVycIBw3IHpOImRn
5+LWouBJ1NQt+w==
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:49:11 2025 by rpki-client