Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
File: KuLRf9W7nXYRETxYakEIAseF7fI.mft (raw, json)
Hash identifier: 3fX6IBLTxBXQqRok0xi+Wan5a+eFGwo88/zdDkSSkW0=
Subject key identifier: 82:EC:DE:E8:CA:F2:76:3C:B1:4E:30:45:75:60:4F:8E:8A:EE:A5:C8
Authority key identifier: 2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
Certificate issuer: /CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Certificate serial: 019683FEE62FE9E95C2FA3CA882A4A3282D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
Manifest number: 0AB1
Signing time: Wed 30 Apr 2025 00:00:42 +0000
Manifest this update: Wed 30 Apr 2025 00:00:42 +0000
Manifest next update: Thu 01 May 2025 00:00:42 +0000
Files and hashes: 1: KuLRf9W7nXYRETxYakEIAseF7fI.crl (hash: EAMUYjrSHQTG7x46ODNcKK6DgFVh9jO8lonixYFL70k=)
2: WW00EN3MrsTzqtLNcacZPoJnrh0.roa (hash: j+ELBwy24bd0McE+tNDFFzjcwNY6uxzFX9utCzZ+kV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:fe:e6:2f:e9:e9:5c:2f:a3:ca:88:2a:4a:32:82:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ae2d17fd5bb9d7611113c586a410802c785edf2
Validity
Not Before: Apr 30 00:00:42 2025 GMT
Not After : May 1 00:00:42 2025 GMT
Subject: CN=82ecdee8caf2763cb14e304575604f8e8aeea5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:1b:2a:12:ee:05:4f:09:92:66:a1:0c:66:34:
4c:ce:7a:6f:fe:5b:17:7e:dd:06:18:2d:d7:53:26:
a8:bd:5b:23:82:d3:24:f5:22:0b:e5:7e:31:0a:21:
5f:e4:3d:31:86:7c:4a:44:94:49:5d:41:8d:20:8e:
3d:8d:0e:e4:dd:00:2c:52:21:9a:e0:9c:df:8f:2d:
f0:89:1f:ea:81:87:9a:61:bf:81:a7:bd:65:ed:65:
18:db:a6:8c:ac:a6:18:74:f4:f1:ff:ba:3b:ab:1c:
c2:bd:82:23:5a:17:7d:81:f7:2c:f0:af:dd:68:ed:
bd:6e:90:0e:1c:35:88:75:92:47:84:8f:4a:06:5d:
0b:c6:70:d2:f9:80:1a:8c:64:3e:c4:a6:db:7c:83:
49:35:c8:38:da:c5:5c:1d:23:b8:ec:52:25:35:7d:
44:d2:e6:44:4a:e3:e0:71:52:3f:cf:be:9a:14:d2:
d6:4e:c8:1f:e8:00:6b:75:8f:d0:f9:9f:0b:44:1b:
f0:1c:e6:a3:c8:4b:bd:df:c4:0e:e8:8d:7d:0d:dc:
34:78:4d:af:23:8a:ea:8b:7f:e2:3e:81:89:9d:13:
51:b2:8c:b1:3c:40:ae:6e:fb:f1:b4:05:a3:4b:2b:
0f:85:29:d4:0b:5b:42:04:43:b9:23:21:7f:2e:30:
65:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:EC:DE:E8:CA:F2:76:3C:B1:4E:30:45:75:60:4F:8E:8A:EE:A5:C8
X509v3 Authority Key Identifier:
keyid:2A:E2:D1:7F:D5:BB:9D:76:11:11:3C:58:6A:41:08:02:C7:85:ED:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KuLRf9W7nXYRETxYakEIAseF7fI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba7fd6-b3a8-4931-ac05-ab4887c63ea5/1/KuLRf9W7nXYRETxYakEIAseF7fI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:97:40:8a:25:d3:84:aa:d6:4e:64:2e:9f:39:02:9c:9e:d3:
fb:98:b3:9f:02:13:f6:a7:78:1a:ec:72:01:5d:de:f7:a9:b5:
31:14:86:97:27:88:41:f9:83:02:d4:e2:29:e0:a9:a5:00:37:
51:8e:de:15:b2:a6:d0:10:df:65:55:91:8e:91:60:54:e4:17:
15:97:b1:39:88:24:b1:16:0c:47:41:77:f6:c4:60:bb:35:7e:
26:da:f2:f4:ce:fd:11:35:f4:7d:f0:25:6b:7e:5e:38:0f:4e:
ce:bc:7b:f7:13:29:5e:3b:d5:81:1a:3f:d9:fc:71:9d:54:44:
fd:28:31:a9:a5:e3:57:4c:21:66:11:6d:d4:dc:ee:26:68:11:
9d:cb:9d:c3:9d:07:4e:ec:60:5c:3d:37:c6:41:da:3e:54:b3:
ef:a5:1b:d1:cf:09:ce:5c:86:5c:ce:37:a4:a2:52:7b:75:4b:
ba:88:ca:28:08:d1:11:42:93:cc:90:1f:18:8d:d7:bb:5e:fa:
15:75:c4:52:e9:a0:c9:70:8f:3f:13:a3:a5:1d:5c:32:36:a4:
91:8a:ba:ea:eb:e9:4a:b5:14:e8:fe:26:cd:49:dc:ca:6a:e5:
43:06:fa:38:fb:45:09:7d:f5:9b:69:46:35:b7:4c:5e:0f:12:
a6:0c:0b:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaD/uYv6elcL6PKiCpKMoLVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhZTJkMTdmZDViYjlkNzYxMTExM2M1ODZhNDEwODAyYzc4
NWVkZjIwHhcNMjUwNDMwMDAwMDQyWhcNMjUwNTAxMDAwMDQyWjAzMTEwLwYDVQQD
Eyg4MmVjZGVlOGNhZjI3NjNjYjE0ZTMwNDU3NTYwNGY4ZThhZWVhNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hsqEu4FTwmSZqEMZjRMznpv/lsX
ft0GGC3XUyaovVsjgtMk9SIL5X4xCiFf5D0xhnxKRJRJXUGNII49jQ7k3QAsUiGa
4Jzfjy3wiR/qgYeaYb+Bp71l7WUY26aMrKYYdPTx/7o7qxzCvYIjWhd9gfcs8K/d
aO29bpAOHDWIdZJHhI9KBl0LxnDS+YAajGQ+xKbbfINJNcg42sVcHSO47FIlNX1E
0uZESuPgcVI/z76aFNLWTsgf6ABrdY/Q+Z8LRBvwHOajyEu938QO6I19Ddw0eE2v
I4rqi3/iPoGJnRNRsoyxPECubvvxtAWjSysPhSnUC1tCBEO5IyF/LjBlwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILs3ujK8nY8sU4wRXVgT46K7qXIMB8GA1UdIwQY
MBaAFCri0X/Vu512ERE8WGpBCALHhe3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUt
YWI0ODg3YzYzZWE1LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iYTdmZDYtYjNhOC00OTMxLWFjMDUtYWI0ODg3YzYzZWE1
LzEvS3VMUmY5VzduWFlSRVR4WWFrRUlBc2VGN2ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJdAiiXT
hKrWTmQunzkCnJ7T+5iznwIT9qd4GuxyAV3e96m1MRSGlyeIQfmDAtTiKeCppQA3
UY7eFbKm0BDfZVWRjpFgVOQXFZexOYgksRYMR0F39sRguzV+Jtry9M79ETX0ffAl
a35eOA9Ozrx79xMpXjvVgRo/2fxxnVRE/SgxqaXjV0whZhFt1NzuJmgRncudw50H
TuxgXD03xkHaPlSz76Ub0c8JzlyGXM43pKJSe3VLuojKKAjREUKTzJAfGI3Xu176
FXXEUumgyXCPPxOjpR1cMjakkYq66uvpSrUU6P4mzUncymrlQwb6OPtFCX31m2lG
NbdMXg8SpgwL4A==
-----END CERTIFICATE-----
Generated at Wed Apr 30 05:33:31 2025 by rpki-client