Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
File: KdIywSew2DMQPDH7UlTsuZVrDEw.mft (raw, json)
Hash identifier: qFeRa86EYaf+gsS873JnGZB2yYXJ0pX3819ePqYdf6s=
Subject key identifier: F6:2D:DD:0F:E8:86:87:36:E2:D7:3D:D9:E8:90:8C:07:12:30:CD:48
Authority key identifier: 29:D2:32:C1:27:B0:D8:33:10:3C:31:FB:52:54:EC:B9:95:6B:0C:4C
Certificate issuer: /CN=29d232c127b0d833103c31fb5254ecb9956b0c4c
Certificate serial: 019695977ACC21CF5F9038DDEE1CC7FAC0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdIywSew2DMQPDH7UlTsuZVrDEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
Manifest number: CB
Signing time: Sat 03 May 2025 10:00:54 +0000
Manifest this update: Sat 03 May 2025 10:00:54 +0000
Manifest next update: Sun 04 May 2025 10:00:54 +0000
Files and hashes: 1: KdIywSew2DMQPDH7UlTsuZVrDEw.crl (hash: x0I0Aapj9CHYcqSLFbEDNnIeUsBdNnsIGz51BewA93M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdIywSew2DMQPDH7UlTsuZVrDEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 May 2025 10:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:95:97:7a:cc:21:cf:5f:90:38:dd:ee:1c:c7:fa:c0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d232c127b0d833103c31fb5254ecb9956b0c4c
Validity
Not Before: May 3 10:00:54 2025 GMT
Not After : May 4 10:00:54 2025 GMT
Subject: CN=f62ddd0fe8868736e2d73dd9e8908c071230cd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d9:9f:2c:46:35:51:3f:71:86:e1:94:4d:b4:
e6:14:46:a3:5e:51:21:d1:10:b2:5b:4d:91:b7:39:
1d:75:03:2c:02:9e:f0:b1:c8:b0:56:a6:6f:ff:49:
15:a2:2d:02:9f:d7:49:c6:7f:b8:55:06:c4:7d:33:
ce:96:d3:29:46:6c:24:80:81:ca:5b:fa:49:97:ad:
6f:3e:d9:a3:c2:02:37:4b:4f:6f:a9:01:bc:72:2e:
7d:cb:6d:39:9e:15:74:4e:cf:5b:dd:65:af:53:c9:
5b:23:0d:83:d5:d6:8d:8e:02:dd:64:69:50:7d:cf:
2f:af:e7:47:28:3d:21:db:c4:c3:b8:e2:c8:00:5d:
ae:9c:ae:93:dd:bc:a3:e4:31:11:02:5f:10:cf:25:
dd:86:1d:7c:3b:99:47:a3:f5:06:1e:d1:30:49:6f:
0e:6e:7a:dc:2d:0f:c7:9c:5c:c6:34:d6:6e:2b:f1:
23:07:bc:30:19:26:7f:4f:56:e2:d2:c9:3d:c1:cd:
1d:48:d5:f7:31:47:76:e3:e3:48:bd:b4:d2:5d:0c:
89:0f:4d:9e:97:1a:02:8d:9f:06:03:ea:35:59:8b:
cb:41:66:b0:84:aa:e1:6c:71:25:79:4b:4d:8a:29:
29:ec:57:d6:3f:23:b2:b4:89:2c:c4:26:28:37:6b:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2D:DD:0F:E8:86:87:36:E2:D7:3D:D9:E8:90:8C:07:12:30:CD:48
X509v3 Authority Key Identifier:
keyid:29:D2:32:C1:27:B0:D8:33:10:3C:31:FB:52:54:EC:B9:95:6B:0C:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdIywSew2DMQPDH7UlTsuZVrDEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/597975-7117-44f6-9400-e1606be92b98/1/KdIywSew2DMQPDH7UlTsuZVrDEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cf:37:78:60:b2:3d:51:99:35:7b:8a:44:d4:77:ea:80:38:
16:30:13:d1:a7:d7:a9:15:ad:f0:e8:c2:01:9a:8a:a6:6a:3a:
1c:e4:7e:6c:3d:11:ed:d3:95:39:0f:53:4f:84:4d:e3:0c:28:
80:57:4e:b1:f1:1b:26:96:21:61:34:4c:df:be:c2:0e:6f:82:
40:1f:d0:34:b6:fd:f8:90:8b:9a:c4:33:c6:f0:ae:2b:58:2a:
81:2d:a6:ff:7f:88:e5:58:c5:01:94:8a:7c:bc:10:f4:b8:ff:
c1:95:97:23:02:ac:d8:9f:f1:de:73:a4:42:cb:ab:47:13:9f:
1f:59:b1:d1:00:bc:70:1b:75:5a:ba:de:03:ae:ae:a8:bb:f3:
99:f9:d2:d7:e0:4d:b6:cb:a0:4d:4f:73:6e:8d:bc:69:d3:df:
16:39:d2:56:38:5c:5d:46:69:2d:b9:df:28:1c:d3:01:a7:0d:
e5:0d:ae:dd:f0:62:37:e5:44:06:04:a0:36:d5:67:e3:3c:c2:
1e:93:d1:89:b4:71:79:27:64:49:c7:29:c1:e7:56:b0:b8:f6:
a6:8c:cb:88:52:50:e6:f4:74:10:32:b3:5d:60:09:30:95:73:
21:51:b5:f2:91:b4:d9:11:2f:5a:b8:a9:97:78:22:bc:08:b7:
ae:01:10:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaVl3rMIc9fkDjd7hzH+sDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDIzMmMxMjdiMGQ4MzMxMDNjMzFmYjUyNTRlY2I5OTU2
YjBjNGMwHhcNMjUwNTAzMTAwMDU0WhcNMjUwNTA0MTAwMDU0WjAzMTEwLwYDVQQD
EyhmNjJkZGQwZmU4ODY4NzM2ZTJkNzNkZDllODkwOGMwNzEyMzBjZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNmfLEY1UT9xhuGUTbTmFEajXlEh
0RCyW02RtzkddQMsAp7wsciwVqZv/0kVoi0Cn9dJxn+4VQbEfTPOltMpRmwkgIHK
W/pJl61vPtmjwgI3S09vqQG8ci59y205nhV0Ts9b3WWvU8lbIw2D1daNjgLdZGlQ
fc8vr+dHKD0h28TDuOLIAF2unK6T3byj5DERAl8QzyXdhh18O5lHo/UGHtEwSW8O
bnrcLQ/HnFzGNNZuK/EjB7wwGSZ/T1bi0sk9wc0dSNX3MUd24+NIvbTSXQyJD02e
lxoCjZ8GA+o1WYvLQWawhKrhbHEleUtNiikp7FfWPyOytIksxCYoN2t3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPYt3Q/ohoc24tc92eiQjAcSMM1IMB8GA1UdIwQY
MBaAFCnSMsEnsNgzEDwx+1JU7LmVawxMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RJeXdTZXcyRE1RUERIN1VsVHN1WlZyREV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS81OTc5NzUtNzExNy00NGY2LTk0MDAt
ZTE2MDZiZTkyYjk4LzEvS2RJeXdTZXcyRE1RUERIN1VsVHN1WlZyREV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS81OTc5NzUtNzExNy00NGY2LTk0MDAtZTE2MDZiZTkyYjk4
LzEvS2RJeXdTZXcyRE1RUERIN1VsVHN1WlZyREV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMM83eGCy
PVGZNXuKRNR36oA4FjAT0afXqRWt8OjCAZqKpmo6HOR+bD0R7dOVOQ9TT4RN4wwo
gFdOsfEbJpYhYTRM377CDm+CQB/QNLb9+JCLmsQzxvCuK1gqgS2m/3+I5VjFAZSK
fLwQ9Lj/wZWXIwKs2J/x3nOkQsurRxOfH1mx0QC8cBt1WrreA66uqLvzmfnS1+BN
tsugTU9zbo28adPfFjnSVjhcXUZpLbnfKBzTAacN5Q2u3fBiN+VEBgSgNtVn4zzC
HpPRibRxeSdkSccpwedWsLj2pozLiFJQ5vR0EDKzXWAJMJVzIVG18pG02REvWrip
l3givAi3rgEQqA==
-----END CERTIFICATE-----
Generated at Sat May 3 16:47:22 2025 by rpki-client