Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
File: KqFL_4NIDRDND767gLLLUJH8-C8.mft (raw, json)
Hash identifier: dPhQXJ0kd92vmnrlaoe9jSggE2A9LsbE/F/BP0mKQt4=
Subject key identifier: EC:41:A1:26:CE:1A:A4:28:6B:54:53:23:7C:A0:6A:AE:85:0E:32:D9
Authority key identifier: 2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
Certificate issuer: /CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Certificate serial: 019682EC679E2A19D4FCB581CADEEE1E799C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
Manifest number: 1514
Signing time: Tue 29 Apr 2025 19:00:53 +0000
Manifest this update: Tue 29 Apr 2025 19:00:53 +0000
Manifest next update: Wed 30 Apr 2025 19:00:53 +0000
Files and hashes: 1: 0zY-sGp0Ft0AM9Sf-NYlNdybUWg.roa (hash: eX1zp0GC5bqV6hOy4nxEisONQ8sH8x4mX06jY0ZL3fw=)
2: KqFL_4NIDRDND767gLLLUJH8-C8.crl (hash: 0NbNGHV6IzHnSiGOjxhn6sQqRSq+FPeRG0q9GP/wCKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:82:ec:67:9e:2a:19:d4:fc:b5:81:ca:de:ee:1e:79:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2aa14bff83480d10cd0fbebb80b2cb5091fcf82f
Validity
Not Before: Apr 29 19:00:53 2025 GMT
Not After : Apr 30 19:00:53 2025 GMT
Subject: CN=ec41a126ce1aa4286b5453237ca06aae850e32d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b7:4f:22:71:41:4d:36:80:c5:7b:e0:47:c8:
03:e6:e4:66:d2:d3:20:50:07:cb:67:ec:80:57:bd:
75:ed:22:c9:f5:31:bd:16:6f:97:b3:70:e6:14:70:
53:b1:1a:60:8d:87:78:95:e5:56:25:f7:93:0c:c2:
ad:83:2e:11:a5:3b:f8:91:01:65:48:b7:cd:15:ff:
e6:92:05:ec:be:98:58:28:1a:b5:0c:59:37:4c:00:
d8:b0:cb:88:e6:51:cd:a4:03:e9:bf:b5:6a:95:d9:
b7:11:b0:f3:c5:c0:59:b5:21:25:81:12:3d:36:f3:
ae:0a:f5:ab:7e:f0:0d:1c:78:1f:10:8c:4c:6d:1e:
87:0a:7b:31:b3:52:d1:cc:1d:87:0b:31:e1:3d:48:
48:6d:ce:17:67:6c:22:c2:71:c1:60:12:37:9e:75:
9a:d6:2a:ba:6e:e0:55:96:48:38:ef:9b:f5:88:7c:
98:07:5f:67:7c:b1:60:da:45:c5:71:b7:89:fa:cd:
0b:44:fe:de:aa:13:07:ae:d2:cb:67:ec:75:07:11:
91:10:82:f9:e0:b8:82:08:11:2c:a6:4e:5e:54:19:
16:27:b7:a6:1a:6c:12:db:6a:6e:dc:d0:f8:28:94:
ed:9d:aa:86:68:44:aa:90:ad:97:32:50:c8:63:83:
4c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:41:A1:26:CE:1A:A4:28:6B:54:53:23:7C:A0:6A:AE:85:0E:32:D9
X509v3 Authority Key Identifier:
keyid:2A:A1:4B:FF:83:48:0D:10:CD:0F:BE:BB:80:B2:CB:50:91:FC:F8:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KqFL_4NIDRDND767gLLLUJH8-C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/b19811-fa23-47b0-b577-17698f88c3bd/1/KqFL_4NIDRDND767gLLLUJH8-C8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:05:e7:0f:a5:f5:7e:57:b1:9b:fe:c3:29:66:6e:ca:e5:74:
5c:3a:9e:f5:8e:e0:21:16:ed:70:e8:3d:c3:8c:16:99:bd:15:
17:28:2e:17:cc:b4:b0:6a:4b:b6:31:bb:b6:6f:40:21:74:78:
e8:f3:66:41:a0:98:40:d8:4c:5b:fb:5a:61:4a:cb:1e:44:51:
94:64:b2:b3:6d:b2:f1:35:be:a4:9c:a8:db:48:04:72:c7:0e:
61:3f:84:b4:e5:5f:85:fa:a8:ad:1c:a3:4e:b1:18:9f:e2:6b:
bc:33:a5:2d:b7:0a:e9:41:09:93:1a:a3:6a:80:cd:77:a6:03:
6c:01:fb:bf:76:9f:da:a9:eb:17:8d:a0:89:44:f3:a4:7d:35:
d7:30:e6:9a:64:95:e9:e8:58:75:81:ce:0c:4e:5d:7a:0f:23:
24:92:18:73:07:b3:46:63:f1:fd:3c:59:ea:f5:33:45:80:71:
f6:dc:aa:6e:31:23:7a:ed:98:d2:01:14:bd:5d:11:3f:2a:60:
7b:16:37:32:8e:83:26:92:52:55:63:22:3d:fb:e1:00:45:f0:
83:f1:ab:83:8c:7a:0a:a2:19:c1:d6:86:7b:10:fc:83:c9:ed:
69:a3:31:06:7b:fc:c5:ca:e0:8b:59:5e:27:d0:09:7d:00:3c:
ee:29:37:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaC7GeeKhnU/LWByt7uHnmcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYTE0YmZmODM0ODBkMTBjZDBmYmViYjgwYjJjYjUwOTFm
Y2Y4MmYwHhcNMjUwNDI5MTkwMDUzWhcNMjUwNDMwMTkwMDUzWjAzMTEwLwYDVQQD
EyhlYzQxYTEyNmNlMWFhNDI4NmI1NDUzMjM3Y2EwNmFhZTg1MGUzMmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrdPInFBTTaAxXvgR8gD5uRm0tMg
UAfLZ+yAV7117SLJ9TG9Fm+Xs3DmFHBTsRpgjYd4leVWJfeTDMKtgy4RpTv4kQFl
SLfNFf/mkgXsvphYKBq1DFk3TADYsMuI5lHNpAPpv7Vqldm3EbDzxcBZtSElgRI9
NvOuCvWrfvANHHgfEIxMbR6HCnsxs1LRzB2HCzHhPUhIbc4XZ2wiwnHBYBI3nnWa
1iq6buBVlkg475v1iHyYB19nfLFg2kXFcbeJ+s0LRP7eqhMHrtLLZ+x1BxGREIL5
4LiCCBEspk5eVBkWJ7emGmwS22pu3ND4KJTtnaqGaESqkK2XMlDIY4NMpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOxBoSbOGqQoa1RTI3ygaq6FDjLZMB8GA1UdIwQY
MBaAFCqhS/+DSA0QzQ++u4Cyy1CR/PgvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1Nzct
MTc2OThmODhjM2JkLzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iMTk4MTEtZmEyMy00N2IwLWI1NzctMTc2OThmODhjM2Jk
LzEvS3FGTF80TklEUkRORDc2N2dMTExVSkg4LUM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKwXnD6X1
flexm/7DKWZuyuV0XDqe9Y7gIRbtcOg9w4wWmb0VFyguF8y0sGpLtjG7tm9AIXR4
6PNmQaCYQNhMW/taYUrLHkRRlGSys22y8TW+pJyo20gEcscOYT+EtOVfhfqorRyj
TrEYn+JrvDOlLbcK6UEJkxqjaoDNd6YDbAH7v3af2qnrF42giUTzpH011zDmmmSV
6ehYdYHODE5deg8jJJIYcwezRmPx/TxZ6vUzRYBx9tyqbjEjeu2Y0gEUvV0RPypg
exY3Mo6DJpJSVWMiPfvhAEXwg/Grg4x6CqIZwdaGexD8g8ntaaMxBnv8xcrgi1le
J9AJfQA87ik3Zg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:13:22 2025 by rpki-client