Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
File: Ka2L_getXSzLQ7DR26axkstR2-o.mft (raw, json)
Hash identifier: aZuufu0C2L0vScV4BW6tJlWXgmbWsfw8NR17UCEYZMY=
Subject key identifier: 81:0E:16:87:C1:01:C7:AC:57:EF:F3:A7:00:8B:DD:08:F6:C6:B3:A3
Authority key identifier: 29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
Certificate issuer: /CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Certificate serial: 0196734256B3F2D7851D9EC059A59CB39F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
Manifest number: 1514
Signing time: Sat 26 Apr 2025 18:00:49 +0000
Manifest this update: Sat 26 Apr 2025 18:00:49 +0000
Manifest next update: Sun 27 Apr 2025 18:00:49 +0000
Files and hashes: 1: Ka2L_getXSzLQ7DR26axkstR2-o.crl (hash: T0bZh1FID15hHT7HZ9hLPGSpvsgTJbFkKuoBAGKZe/M=)
2: h-R5SrdfAe7rN8zMOqkX0BtsnJ4.roa (hash: 3D3z76pesB4+PkPGfBCrb/veNRexeyxDAf3xN4YJwnQ=)
3: tOD9yELwWOB6I1JsshHxqOqJaWE.roa (hash: E867kd+hZLMJTwwIfg4wQE1B1KmxpcWNXSjEvrvHFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 17:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:73:42:56:b3:f2:d7:85:1d:9e:c0:59:a5:9c:b3:9f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ad8bfe07ad5d2ccb43b0d1dba6b192cb51dbea
Validity
Not Before: Apr 26 18:00:49 2025 GMT
Not After : Apr 27 18:00:49 2025 GMT
Subject: CN=810e1687c101c7ac57eff3a7008bdd08f6c6b3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:10:c3:b5:5e:cf:7d:b7:25:32:7e:54:2d:6e:
00:99:90:78:dd:77:fc:e1:28:f5:1b:28:86:bc:62:
13:67:54:13:9b:ba:99:76:13:19:e2:25:7f:8b:6b:
a4:4f:a0:e7:54:68:93:36:cf:43:ab:f0:51:34:89:
04:24:05:01:e2:8b:c8:13:f1:c2:a9:40:b6:08:26:
0c:0b:08:f3:4c:2e:58:42:fe:0c:b2:45:0b:6f:be:
18:fe:ab:ce:5e:4b:62:17:9f:68:38:11:8c:85:b1:
7c:cc:8e:12:ed:4e:24:e5:f6:40:e0:2c:64:3a:b3:
96:dd:fd:a0:1d:8e:7e:d6:97:8b:24:bf:c1:11:90:
c9:1b:b2:3d:cc:35:d8:00:15:50:19:99:c1:06:e7:
e0:0c:a7:7b:79:05:24:a6:ba:f2:23:4d:2b:00:13:
17:3c:6d:ed:e5:a7:18:29:f3:36:6d:9d:5a:9e:1c:
ba:cd:58:25:ef:2d:27:9c:8a:3d:ad:ae:49:e4:24:
70:84:14:74:28:59:e0:d4:9d:11:a6:39:7f:48:97:
64:f9:27:c5:97:71:56:22:6e:18:38:07:fc:b3:56:
d2:7e:b0:0a:30:0a:87:26:76:72:84:36:6a:5b:22:
39:53:e5:b2:04:07:27:30:bf:be:af:59:1d:3e:9c:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0E:16:87:C1:01:C7:AC:57:EF:F3:A7:00:8B:DD:08:F6:C6:B3:A3
X509v3 Authority Key Identifier:
keyid:29:AD:8B:FE:07:AD:5D:2C:CB:43:B0:D1:DB:A6:B1:92:CB:51:DB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka2L_getXSzLQ7DR26axkstR2-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/235d26-7094-4feb-9ca9-378499398f18/1/Ka2L_getXSzLQ7DR26axkstR2-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7c:37:c6:88:b2:6f:b3:f7:45:29:18:d8:aa:33:dd:db:4e:
88:25:ec:c2:6f:fc:25:6c:3c:76:2c:a9:b2:20:c5:f0:f0:7d:
c8:a9:61:e6:15:b2:59:67:56:a7:a7:d7:08:69:5d:34:3c:e1:
bb:0b:be:55:b7:92:80:c6:76:e4:a7:51:00:f4:58:cc:de:8c:
b4:3c:48:2e:c3:97:8d:fb:2b:61:2f:6d:57:76:82:e0:9c:02:
76:b1:67:bb:cb:94:b5:1c:6b:bb:03:5e:0d:f9:ab:0d:b8:e0:
f9:ce:6c:7e:31:73:a9:a8:ee:72:0a:ab:91:64:6d:10:d8:07:
0e:33:59:ef:ad:66:20:b2:cc:ff:49:38:b4:33:1f:a2:92:e1:
13:9d:fe:5a:51:e9:13:97:a9:5c:7d:f0:71:58:f1:d1:c7:72:
eb:f6:65:31:27:72:b7:7f:e2:d3:27:98:c7:56:52:bb:84:1e:
07:28:e3:87:cc:8a:06:a5:63:24:60:b8:17:d1:91:6b:fc:1b:
79:50:14:c0:80:9f:91:43:e4:45:65:7a:9e:35:50:a8:3c:f9:
c0:7a:79:fe:e2:c0:9c:f3:f2:9f:20:f9:bf:f8:e2:ed:b7:71:
27:e8:33:09:a1:b9:36:50:78:a7:eb:54:05:40:48:9e:db:06:
5e:4f:39:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZzQlaz8teFHZ7AWaWcs59sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5YWQ4YmZlMDdhZDVkMmNjYjQzYjBkMWRiYTZiMTkyY2I1
MWRiZWEwHhcNMjUwNDI2MTgwMDQ5WhcNMjUwNDI3MTgwMDQ5WjAzMTEwLwYDVQQD
Eyg4MTBlMTY4N2MxMDFjN2FjNTdlZmYzYTcwMDhiZGQwOGY2YzZiM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BDDtV7PfbclMn5ULW4AmZB43Xf8
4Sj1GyiGvGITZ1QTm7qZdhMZ4iV/i2ukT6DnVGiTNs9Dq/BRNIkEJAUB4ovIE/HC
qUC2CCYMCwjzTC5YQv4MskULb74Y/qvOXktiF59oOBGMhbF8zI4S7U4k5fZA4Cxk
OrOW3f2gHY5+1peLJL/BEZDJG7I9zDXYABVQGZnBBufgDKd7eQUkprryI00rABMX
PG3t5acYKfM2bZ1anhy6zVgl7y0nnIo9ra5J5CRwhBR0KFng1J0Rpjl/SJdk+SfF
l3FWIm4YOAf8s1bSfrAKMAqHJnZyhDZqWyI5U+WyBAcnML++r1kdPpzkUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEOFofBAcesV+/zpwCL3Qj2xrOjMB8GA1UdIwQY
MBaAFCmti/4HrV0sy0Ow0dumsZLLUdvqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTkt
Mzc4NDk5Mzk4ZjE4LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8yMzVkMjYtNzA5NC00ZmViLTljYTktMzc4NDk5Mzk4ZjE4
LzEvS2EyTF9nZXRYU3pMUTdEUjI2YXhrc3RSMi1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYnw3xoiy
b7P3RSkY2Koz3dtOiCXswm/8JWw8diypsiDF8PB9yKlh5hWyWWdWp6fXCGldNDzh
uwu+VbeSgMZ25KdRAPRYzN6MtDxILsOXjfsrYS9tV3aC4JwCdrFnu8uUtRxruwNe
DfmrDbjg+c5sfjFzqajucgqrkWRtENgHDjNZ761mILLM/0k4tDMfopLhE53+WlHp
E5epXH3wcVjx0cdy6/ZlMSdyt3/i0yeYx1ZSu4QeByjjh8yKBqVjJGC4F9GRa/wb
eVAUwICfkUPkRWV6njVQqDz5wHp5/uLAnPPynyD5v/ji7bdxJ+gzCaG5NlB4p+tU
BUBIntsGXk85lA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:34 2025 by rpki-client