Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
File: kkd4YEd6U1S1qGll3TmemJh-WQ4.mft (raw, json)
Hash identifier: MSboXBTSyULzO/xzp/tNse1e0inCCAYyuZqLhLHUnGM=
Subject key identifier: 50:1B:4B:5F:68:69:87:B1:7B:76:47:97:4A:1E:CF:B0:E9:A0:D7:CE
Authority key identifier: 92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
Certificate issuer: /CN=92477860477a5354b5a86965dd399e98987e590e
Certificate serial: 01967642E798F7E954D6D79ECDB055475CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
Manifest number: 01DB
Signing time: Sun 27 Apr 2025 08:00:18 +0000
Manifest this update: Sun 27 Apr 2025 08:00:18 +0000
Manifest next update: Mon 28 Apr 2025 08:00:18 +0000
Files and hashes: 1: kkd4YEd6U1S1qGll3TmemJh-WQ4.crl (hash: 23M/XUE5HIRNQP+5hUUA0r3TFs6fI1Zd2TYmbFsgJCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:e7:98:f7:e9:54:d6:d7:9e:cd:b0:55:47:5c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92477860477a5354b5a86965dd399e98987e590e
Validity
Not Before: Apr 27 08:00:18 2025 GMT
Not After : Apr 28 08:00:18 2025 GMT
Subject: CN=501b4b5f686987b17b7647974a1ecfb0e9a0d7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:72:54:37:2e:5e:e8:1a:a4:bd:2f:6f:4d:42:
8d:bc:0a:3e:8b:a2:f2:9b:48:32:49:9e:99:53:5b:
00:c9:30:01:7e:76:9c:5c:e1:04:26:6b:47:f4:bb:
96:7b:8f:8d:71:1f:06:6c:e0:27:23:ce:26:54:b7:
79:62:c6:12:d2:f9:5f:e6:e5:68:78:95:21:fd:0e:
26:90:ec:95:55:98:ab:a8:62:c7:9e:3b:62:77:7d:
0b:85:1b:2c:8c:6a:06:00:0d:5a:f6:13:1c:33:dc:
c0:49:f5:d3:26:da:00:0e:b4:a8:f0:e9:ec:36:07:
cf:c2:5e:53:d4:60:7d:a8:8c:98:fa:60:17:a5:7e:
bb:f2:9e:bd:a9:9a:06:f3:7b:4a:af:dd:02:b0:23:
a6:0b:d1:17:d2:02:38:26:63:d2:dd:c0:50:d6:54:
c2:b4:f5:df:15:7a:8c:db:bd:52:41:bd:06:a8:69:
52:71:e3:fe:d7:52:42:77:2d:f3:7e:c1:5d:2f:89:
5c:be:f4:51:51:e1:62:9c:ae:c1:9f:0a:3c:47:67:
51:8e:85:3b:25:3b:45:8c:f3:2b:05:7b:be:0d:70:
81:23:d7:43:6f:05:b8:7a:d6:67:9a:02:65:23:4b:
85:91:7c:70:b5:41:d9:c3:e2:46:6d:ed:55:c8:dd:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:4B:5F:68:69:87:B1:7B:76:47:97:4A:1E:CF:B0:E9:A0:D7:CE
X509v3 Authority Key Identifier:
keyid:92:47:78:60:47:7A:53:54:B5:A8:69:65:DD:39:9E:98:98:7E:59:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkd4YEd6U1S1qGll3TmemJh-WQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/cb6661-171c-406f-b313-a637cd846cf6/1/kkd4YEd6U1S1qGll3TmemJh-WQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3d:f1:7d:5f:75:c4:a8:6d:59:1a:42:ed:85:d3:67:c2:2e:
36:77:95:c6:74:8c:f9:63:d8:f8:bd:7c:76:65:0f:11:5d:62:
e0:fc:d4:60:d6:ee:9a:f0:10:a7:d4:fa:e4:f5:40:68:04:41:
e9:e6:4a:65:77:01:aa:4d:34:d0:82:af:98:e0:d1:53:30:21:
97:7c:14:8d:4e:91:2a:cf:4c:d5:44:74:df:db:e2:ba:17:59:
4f:ca:a5:cb:ee:6f:05:78:b6:a2:86:b3:dd:39:1d:f2:a8:c3:
a5:9f:9d:19:20:e6:43:14:06:ef:6e:c9:9b:ea:77:f1:58:ea:
1e:81:b6:c5:8b:9a:b9:94:82:94:69:de:4e:a1:67:8f:1b:7c:
ce:c8:ff:6e:19:81:bd:8a:7c:cc:34:7b:1e:91:49:aa:4b:7a:
f3:46:22:3a:7b:2a:0b:9f:dc:b5:aa:3b:4a:74:22:4f:d2:cd:
ae:93:df:95:47:dc:89:a6:2d:1f:e4:f9:dc:a7:2d:dc:f4:3c:
56:db:4e:25:7a:65:9a:2f:a1:20:5a:b3:4b:5d:25:76:18:97:
d9:10:d1:35:ab:4e:a0:fe:d1:54:f8:78:79:8a:53:c8:ee:cc:
4a:d8:9a:b8:16:4f:fd:cc:ff:1a:4e:af:65:1d:01:e7:c1:24:
6c:24:cc:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QueY9+lU1teezbBVR1zjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDc3ODYwNDc3YTUzNTRiNWE4Njk2NWRkMzk5ZTk4OTg3
ZTU5MGUwHhcNMjUwNDI3MDgwMDE4WhcNMjUwNDI4MDgwMDE4WjAzMTEwLwYDVQQD
Eyg1MDFiNGI1ZjY4Njk4N2IxN2I3NjQ3OTc0YTFlY2ZiMGU5YTBkN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXJUNy5e6BqkvS9vTUKNvAo+i6Ly
m0gySZ6ZU1sAyTABfnacXOEEJmtH9LuWe4+NcR8GbOAnI84mVLd5YsYS0vlf5uVo
eJUh/Q4mkOyVVZirqGLHnjtid30LhRssjGoGAA1a9hMcM9zASfXTJtoADrSo8Ons
NgfPwl5T1GB9qIyY+mAXpX678p69qZoG83tKr90CsCOmC9EX0gI4JmPS3cBQ1lTC
tPXfFXqM271SQb0GqGlSceP+11JCdy3zfsFdL4lcvvRRUeFinK7Bnwo8R2dRjoU7
JTtFjPMrBXu+DXCBI9dDbwW4etZnmgJlI0uFkXxwtUHZw+JGbe1VyN2xuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAbS19oaYexe3ZHl0oez7DpoNfOMB8GA1UdIwQY
MBaAFJJHeGBHelNUtahpZd05npiYflkOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMt
YTYzN2NkODQ2Y2Y2LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9jYjY2NjEtMTcxYy00MDZmLWIzMTMtYTYzN2NkODQ2Y2Y2
LzEva2tkNFlFZDZVMVMxcUdsbDNUbWVtSmgtV1E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHz3xfV91
xKhtWRpC7YXTZ8IuNneVxnSM+WPY+L18dmUPEV1i4PzUYNbumvAQp9T65PVAaARB
6eZKZXcBqk000IKvmODRUzAhl3wUjU6RKs9M1UR039viuhdZT8qly+5vBXi2ooaz
3Tkd8qjDpZ+dGSDmQxQG727Jm+p38VjqHoG2xYuauZSClGneTqFnjxt8zsj/bhmB
vYp8zDR7HpFJqkt680YiOnsqC5/ctao7SnQiT9LNrpPflUfciaYtH+T53Kct3PQ8
VttOJXplmi+hIFqzS10ldhiX2RDRNatOoP7RVPh4eYpTyO7MStiauBZP/cz/Gk6v
ZR0B58EkbCTMHg==
-----END CERTIFICATE-----
Generated at Sun Apr 27 13:27:41 2025 by rpki-client