Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
File: KVkHdOd6iZSkKDEow1kh0DewbyE.mft (raw, json)
Hash identifier: lsuXNNERwCc27zzqjj7PSoJDIWCkgDoGrjb0wktWEnY=
Subject key identifier: 06:4F:8D:A1:E3:C3:C7:73:5B:2C:41:38:49:09:E9:39:5D:B6:47:DA
Authority key identifier: 29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
Certificate issuer: /CN=29590774e77a8994a4283128c35921d037b06f21
Certificate serial: 0196789FB2B78833C678A8FC1B2908E9D558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
Manifest number: 150E
Signing time: Sun 27 Apr 2025 19:00:53 +0000
Manifest this update: Sun 27 Apr 2025 19:00:53 +0000
Manifest next update: Mon 28 Apr 2025 19:00:53 +0000
Files and hashes: 1: KVkHdOd6iZSkKDEow1kh0DewbyE.crl (hash: NT2M2Mq8+BahmtXAWsSaQMTjMv15ezP62tS0B5A+9qo=)
2: gxGfsBx6lLiLQDxOb4KsEBJPPD4.roa (hash: D/Hy5r+AT898TQXYisKdolhcFtwKf/D8Em+z0xE13iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:9f:b2:b7:88:33:c6:78:a8:fc:1b:29:08:e9:d5:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29590774e77a8994a4283128c35921d037b06f21
Validity
Not Before: Apr 27 19:00:53 2025 GMT
Not After : Apr 28 19:00:53 2025 GMT
Subject: CN=064f8da1e3c3c7735b2c41384909e9395db647da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:51:8a:98:42:16:5b:25:5f:30:f3:b7:63:2c:
10:96:1c:db:23:05:b9:0b:33:dd:9b:ce:d1:c7:10:
99:7c:68:ba:7a:df:d2:8e:48:8a:a4:93:0f:82:2a:
a3:71:b7:c7:1c:85:e4:89:6c:e8:4f:45:ef:b1:ce:
bf:24:a7:fe:05:32:77:12:78:5b:e5:d4:33:29:53:
3d:50:a4:89:ab:a1:3b:06:fb:76:9e:5b:2d:cf:a1:
c8:9e:5d:f5:33:90:75:5b:eb:bc:a6:06:9e:06:83:
ab:8a:59:56:4a:0f:b4:8c:af:76:3f:50:9e:1b:a4:
a6:38:29:88:c6:df:f1:44:30:69:37:9b:f8:5d:18:
47:62:6b:2c:4b:0f:ca:87:cf:69:52:90:a8:6c:1e:
b9:92:75:1b:27:e0:97:21:23:8d:2e:9a:75:8f:e9:
88:8b:83:9c:ed:c2:8f:4c:a8:e8:80:d1:f6:3b:0b:
ac:cb:ce:44:e6:ad:8b:bf:de:6a:a4:f5:0a:c6:6f:
4e:04:8a:e9:5a:45:fb:d7:aa:07:be:f5:a2:00:0a:
5b:a1:b8:c2:cf:9b:fc:39:06:e6:01:86:b1:e4:ba:
83:bc:dc:52:8c:e3:64:a0:a6:e1:d4:41:b3:62:56:
9e:ce:3c:99:3e:81:23:69:fa:cc:33:92:eb:27:d4:
f8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4F:8D:A1:E3:C3:C7:73:5B:2C:41:38:49:09:E9:39:5D:B6:47:DA
X509v3 Authority Key Identifier:
keyid:29:59:07:74:E7:7A:89:94:A4:28:31:28:C3:59:21:D0:37:B0:6F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KVkHdOd6iZSkKDEow1kh0DewbyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/6745fe-e475-4c58-a31e-f2c0da61ac13/1/KVkHdOd6iZSkKDEow1kh0DewbyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:f1:f2:31:f9:3c:a6:9f:3c:68:c2:52:ea:2e:ab:90:ed:42:
cf:fa:7c:7d:05:11:81:2c:d3:b6:32:83:16:9b:7b:73:78:12:
60:51:db:b7:0b:0d:e6:b1:6b:50:5d:e4:43:ca:53:66:7d:42:
3d:21:b0:da:d0:27:2d:82:fe:8b:3e:31:76:75:72:15:96:2e:
dd:47:a9:7f:bf:33:08:3d:c0:16:68:d3:fa:84:65:ab:7d:54:
5d:ad:7c:59:96:bc:0f:e5:f9:74:f2:7f:70:41:8b:80:eb:c6:
ef:f0:be:f7:06:11:55:f4:f7:7e:e6:a8:ca:d6:d5:c0:09:1d:
92:49:93:38:cf:13:9a:b6:25:74:99:34:ad:9c:62:9a:61:e9:
cb:90:59:e2:7a:8f:8a:6a:00:36:2a:56:ec:27:b4:8d:41:31:
f2:76:cb:ff:0b:a0:e4:6b:59:8a:93:51:d8:75:d6:7e:b3:ea:
35:17:8d:ef:4f:16:50:d0:c4:af:1d:ec:fd:84:39:1b:f7:15:
0e:2e:c3:2b:e7:be:65:01:79:dd:2d:5b:07:13:f2:45:7d:a1:
c5:bf:6f:19:ea:25:76:e3:0a:a6:ff:6b:43:9f:ea:6d:ca:b2:
ca:48:5e:2e:81:6e:34:15:09:df:61:1f:fb:f9:58:f1:a4:fb:
62:fb:b8:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ4n7K3iDPGeKj8GykI6dVYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5NTkwNzc0ZTc3YTg5OTRhNDI4MzEyOGMzNTkyMWQwMzdi
MDZmMjEwHhcNMjUwNDI3MTkwMDUzWhcNMjUwNDI4MTkwMDUzWjAzMTEwLwYDVQQD
EygwNjRmOGRhMWUzYzNjNzczNWIyYzQxMzg0OTA5ZTkzOTVkYjY0N2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lGKmEIWWyVfMPO3YywQlhzbIwW5
CzPdm87RxxCZfGi6et/SjkiKpJMPgiqjcbfHHIXkiWzoT0Xvsc6/JKf+BTJ3Enhb
5dQzKVM9UKSJq6E7Bvt2nlstz6HInl31M5B1W+u8pgaeBoOrillWSg+0jK92P1Ce
G6SmOCmIxt/xRDBpN5v4XRhHYmssSw/Kh89pUpCobB65knUbJ+CXISONLpp1j+mI
i4Oc7cKPTKjogNH2Owusy85E5q2Lv95qpPUKxm9OBIrpWkX716oHvvWiAApbobjC
z5v8OQbmAYax5LqDvNxSjONkoKbh1EGzYlaezjyZPoEjafrMM5LrJ9T4eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZPjaHjw8dzWyxBOEkJ6TldtkfaMB8GA1UdIwQY
MBaAFClZB3TneomUpCgxKMNZIdA3sG8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUt
ZjJjMGRhNjFhYzEzLzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni82NzQ1ZmUtZTQ3NS00YzU4LWEzMWUtZjJjMGRhNjFhYzEz
LzEvS1ZrSGRPZDZpWlNrS0RFb3cxa2gwRGV3YnlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc/HyMfk8
pp88aMJS6i6rkO1Cz/p8fQURgSzTtjKDFpt7c3gSYFHbtwsN5rFrUF3kQ8pTZn1C
PSGw2tAnLYL+iz4xdnVyFZYu3Uepf78zCD3AFmjT+oRlq31UXa18WZa8D+X5dPJ/
cEGLgOvG7/C+9wYRVfT3fuaoytbVwAkdkkmTOM8TmrYldJk0rZximmHpy5BZ4nqP
imoANipW7Ce0jUEx8nbL/wug5GtZipNR2HXWfrPqNReN708WUNDErx3s/YQ5G/cV
Di7DK+e+ZQF53S1bBxPyRX2hxb9vGeolduMKpv9rQ5/qbcqyykheLoFuNBUJ32Ef
+/lY8aT7Yvu4+A==
-----END CERTIFICATE-----
Generated at Mon Apr 28 04:30:44 2025 by rpki-client