Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: ClwWOEAfMB45AT0KD5X2g1XedmO/V98XA+DTaeF176U=
Subject key identifier: 24:17:D5:93:3F:2B:18:C3:46:93:1B:9D:7F:0F:22:09:F6:E0:05:98
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 01988B7CF536E21D091809A61CDDF728EE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1331
Signing time: Fri 08 Aug 2025 21:01:18 +0000
Manifest this update: Fri 08 Aug 2025 21:01:18 +0000
Manifest next update: Sat 09 Aug 2025 21:01:18 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: yK2HaK018vfD0snhgk9m5Cj1tHgVk/ntPRow51JEkQk=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:7c:f5:36:e2:1d:09:18:09:a6:1c:dd:f7:28:ee:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: Aug 8 21:01:18 2025 GMT
Not After : Aug 9 21:01:18 2025 GMT
Subject: CN=2417d5933f2b18c346931b9d7f0f2209f6e00598
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:02:15:03:c1:b2:38:e1:0c:2e:17:92:f5:2a:
e3:d1:d0:af:5d:67:83:da:d9:2c:b1:86:75:82:3e:
0f:8c:ed:29:fe:8c:ad:b0:9f:da:77:e5:31:a3:e6:
a6:a9:d9:e3:7a:da:33:65:51:2a:51:bb:1d:90:94:
0b:10:58:d5:60:64:ec:c8:60:cd:d8:1e:85:e0:ff:
c6:e0:17:65:55:23:54:f2:5e:35:c7:11:ab:8b:6a:
d9:11:fd:d3:4f:eb:ef:2b:e6:ec:5f:89:5e:af:6d:
ae:8e:fb:2c:2f:0c:8b:46:4a:f4:40:f4:98:79:f0:
18:b9:e4:64:91:93:13:99:71:4b:9d:61:08:ce:38:
3d:51:c5:bf:aa:bb:33:aa:28:e2:f6:82:2a:c3:4f:
46:a1:29:b4:d9:57:45:0d:ec:8f:8b:ec:6d:f6:ba:
d8:42:be:1e:33:9a:5a:79:f2:27:e0:52:08:77:a4:
26:0a:e7:29:fb:54:bc:b2:e5:68:34:38:32:73:59:
96:1f:1c:be:68:4d:b1:35:92:f5:ce:6e:36:b8:cc:
03:30:e0:76:c3:85:00:c7:18:90:09:50:25:7f:83:
24:49:00:4e:b0:04:5f:9d:e1:38:c8:8a:81:98:5a:
95:f5:fa:86:68:f0:4b:7f:7f:e1:d3:2d:bf:03:4c:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:17:D5:93:3F:2B:18:C3:46:93:1B:9D:7F:0F:22:09:F6:E0:05:98
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:86:c8:2b:db:8d:55:01:b3:65:f1:18:de:37:24:82:ff:db:
56:b5:cb:7d:d8:c4:69:ff:82:1b:52:48:64:db:c5:81:39:95:
c7:db:5d:87:1c:79:10:56:27:46:1f:65:5d:46:9e:f6:3b:5b:
b8:bb:cb:ad:4f:b3:fb:cf:b1:b9:51:85:f0:5b:d7:98:c8:5d:
40:a1:32:ed:cb:82:94:14:a1:80:9b:89:bc:2f:d3:ae:42:17:
aa:8e:38:a9:2e:d2:cf:b6:d1:31:4c:0e:27:38:9c:c2:d1:cf:
95:7f:56:fa:f0:a6:49:6e:59:3e:30:f4:8e:9e:36:19:c9:10:
a6:d9:fc:dd:08:07:3a:bd:b1:5b:cb:64:4a:a7:8b:87:7d:16:
0a:99:cb:2a:e2:e7:a8:2d:6e:28:a8:94:b5:68:d5:de:60:60:
19:34:d1:6f:ee:94:48:e5:25:ca:c3:31:34:39:43:0b:30:d5:
83:21:81:37:91:d5:9a:3f:a8:5a:45:a9:0a:68:1e:9a:89:d0:
da:a2:98:ef:87:7e:77:fa:6e:ac:a1:6e:cc:23:f5:84:32:56:
9d:54:92:43:05:d7:75:96:86:47:ac:dd:8c:19:86:ad:8d:7b:
d6:1c:0c:9c:c9:3f:ea:9b:50:6a:4f:9e:b3:b7:80:c8:cf:5c:
d2:d2:93:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLfPU24h0JGAmmHN33KO5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj
ZjdhZDAwHhcNMjUwODA4MjEwMTE4WhcNMjUwODA5MjEwMTE4WjAzMTEwLwYDVQQD
EygyNDE3ZDU5MzNmMmIxOGMzNDY5MzFiOWQ3ZjBmMjIwOWY2ZTAwNTk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwIVA8GyOOEMLheS9Srj0dCvXWeD
2tkssYZ1gj4PjO0p/oytsJ/ad+Uxo+amqdnjetozZVEqUbsdkJQLEFjVYGTsyGDN
2B6F4P/G4BdlVSNU8l41xxGri2rZEf3TT+vvK+bsX4ler22ujvssLwyLRkr0QPSY
efAYueRkkZMTmXFLnWEIzjg9UcW/qrszqiji9oIqw09GoSm02VdFDeyPi+xt9rrY
Qr4eM5paefIn4FIId6QmCucp+1S8suVoNDgyc1mWHxy+aE2xNZL1zm42uMwDMOB2
w4UAxxiQCVAlf4MkSQBOsARfneE4yIqBmFqV9fqGaPBLf3/h0y2/A0yPywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCQX1ZM/KxjDRpMbnX8PIgn24AWYMB8GA1UdIwQY
MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt
ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj
LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGobIK9uN
VQGzZfEY3jckgv/bVrXLfdjEaf+CG1JIZNvFgTmVx9tdhxx5EFYnRh9lXUae9jtb
uLvLrU+z+8+xuVGF8FvXmMhdQKEy7cuClBShgJuJvC/TrkIXqo44qS7Sz7bRMUwO
JzicwtHPlX9W+vCmSW5ZPjD0jp42GckQptn83QgHOr2xW8tkSqeLh30WCpnLKuLn
qC1uKKiUtWjV3mBgGTTRb+6USOUlysMxNDlDCzDVgyGBN5HVmj+oWkWpCmgemonQ
2qKY74d+d/purKFuzCP1hDJWnVSSQwXXdZaGR6zdjBmGrY171hwMnMk/6ptQak+e
s7eAyM9c0tKTQg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:53 2025 by rpki-client