Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
File: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft (raw, json)
Hash identifier: DzXMPN8cNcTR7wV0ohxA/ODVjmVfFtzvChBkw6SLBag=
Subject key identifier: CE:38:AE:C2:1B:8E:BE:2C:98:D0:DF:6E:F6:3A:CB:85:90:69:FB:F1
Authority key identifier: 29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
Certificate issuer: /CN=29390ec0adca5f0743d181145c7899f991fb65e0
Certificate serial: 01967642EB6929683200BAFCF0CC6000877D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
Manifest number: 1510
Signing time: Sun 27 Apr 2025 08:00:19 +0000
Manifest this update: Sun 27 Apr 2025 08:00:19 +0000
Manifest next update: Mon 28 Apr 2025 08:00:19 +0000
Files and hashes: 1: KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl (hash: Zvx/rc2Gdb9AwH5iABK9cGzjnPGCwOK+kOuT/EE5sbE=)
2: bWPpXfM0t8DZozdgVuoIuOmty6U.roa (hash: DNEemSG0PqXZNx4n7cLqzTbH2v8r72VEpOmSe4kxNgk=)
3: ksEVVLS3M5w1AKi-nF72xAY7y7o.roa (hash: z5VVyVNSP1G0pwH68pGPs7a4UWtVv2Td4kN9zQtymP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:42:eb:69:29:68:32:00:ba:fc:f0:cc:60:00:87:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29390ec0adca5f0743d181145c7899f991fb65e0
Validity
Not Before: Apr 27 08:00:19 2025 GMT
Not After : Apr 28 08:00:19 2025 GMT
Subject: CN=ce38aec21b8ebe2c98d0df6ef63acb859069fbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e0:89:c7:ec:98:90:d7:c2:47:c8:ed:c2:dc:
0b:8a:6e:6d:45:bb:49:9c:a2:5d:23:6a:42:14:a6:
79:a8:93:90:2a:a2:94:c7:fe:4f:4f:94:d1:30:db:
d0:af:da:14:a2:39:f0:46:79:20:c5:22:48:00:cf:
ed:50:89:27:fd:75:6a:da:41:81:85:ce:5f:f8:a1:
c1:6e:2f:dd:82:57:97:10:10:c6:0e:cb:fd:84:fb:
38:d6:e4:02:16:b8:07:3a:2d:23:f5:2e:ac:e2:e6:
f1:d7:71:8c:64:dc:79:56:cf:08:ea:92:77:f5:ef:
8d:24:16:ad:8f:81:95:0e:20:08:24:e5:3f:d7:93:
70:bf:3a:dc:9b:56:99:6b:8e:27:21:85:9f:b0:e4:
35:83:92:0f:3b:ec:01:58:5a:83:a3:a1:52:8b:b2:
22:9b:18:1c:35:68:a9:53:f5:7b:5d:1e:6a:04:35:
b6:81:a8:63:e6:ea:47:e3:e1:08:d1:5a:b3:e1:2d:
ad:4d:33:98:60:37:46:5e:bd:61:5f:82:1a:10:7a:
35:92:bf:2a:c2:0b:30:01:1b:f9:81:00:91:c2:45:
70:05:5e:db:e7:e9:00:45:09:8a:18:1b:a3:0b:d0:
cf:ff:e7:3f:c5:4b:c1:4e:a6:44:66:9a:93:7b:93:
31:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:38:AE:C2:1B:8E:BE:2C:98:D0:DF:6E:F6:3A:CB:85:90:69:FB:F1
X509v3 Authority Key Identifier:
keyid:29:39:0E:C0:AD:CA:5F:07:43:D1:81:14:5C:78:99:F9:91:FB:65:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b31392-2d1c-4934-a59e-ed433aac7828/1/KTkOwK3KXwdD0YEUXHiZ-ZH7ZeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:28:34:bb:0f:d5:b4:ef:c2:4d:5c:91:6e:76:9d:d3:d6:
d3:e2:4e:e3:95:36:5e:0c:a9:d1:81:f6:7b:f5:97:6e:27:39:
82:e1:e6:19:54:99:2f:94:ec:bd:35:e1:bd:3c:a5:30:09:2f:
72:66:84:95:0c:7b:5d:b3:d6:fc:06:b0:ae:75:83:13:f8:2a:
9c:da:5f:03:1e:59:3e:c2:31:f7:02:e6:8a:8c:89:25:ae:db:
a9:d8:b5:c3:da:44:bc:b0:95:bb:15:97:da:8d:a4:ac:0a:2d:
17:0c:75:2e:15:ab:2c:12:e5:26:e2:5b:3a:e3:f6:22:f4:28:
6c:b8:8f:7f:c7:d6:da:60:17:01:e6:fe:60:39:42:28:83:83:
51:58:40:ec:3b:f3:ee:50:37:47:69:2b:89:8b:98:b7:4f:83:
b8:bd:12:04:1a:ac:ae:c3:02:f4:77:08:2f:5f:48:d3:dd:c8:
1b:e7:cc:e6:b1:fb:da:fd:38:38:40:6b:e9:be:7e:1c:70:4d:
a9:e8:cb:df:61:39:cf:f9:f1:8a:f1:10:69:8c:46:4d:8f:8f:
5d:a6:e2:f9:a2:a5:46:07:e9:9e:17:20:55:d9:cf:d2:e8:71:
8a:57:bb:33:c9:67:4c:fa:41:70:82:b3:5e:5d:37:58:49:22:
6c:c9:e4:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ2QutpKWgyALr88MxgAId9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MzkwZWMwYWRjYTVmMDc0M2QxODExNDVjNzg5OWY5OTFm
YjY1ZTAwHhcNMjUwNDI3MDgwMDE5WhcNMjUwNDI4MDgwMDE5WjAzMTEwLwYDVQQD
EyhjZTM4YWVjMjFiOGViZTJjOThkMGRmNmVmNjNhY2I4NTkwNjlmYmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOCJx+yYkNfCR8jtwtwLim5tRbtJ
nKJdI2pCFKZ5qJOQKqKUx/5PT5TRMNvQr9oUojnwRnkgxSJIAM/tUIkn/XVq2kGB
hc5f+KHBbi/dgleXEBDGDsv9hPs41uQCFrgHOi0j9S6s4ubx13GMZNx5Vs8I6pJ3
9e+NJBatj4GVDiAIJOU/15Nwvzrcm1aZa44nIYWfsOQ1g5IPO+wBWFqDo6FSi7Ii
mxgcNWipU/V7XR5qBDW2gahj5upH4+EI0Vqz4S2tTTOYYDdGXr1hX4IaEHo1kr8q
wgswARv5gQCRwkVwBV7b5+kARQmKGBujC9DP/+c/xUvBTqZEZpqTe5Mx6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM44rsIbjr4smNDfbvY6y4WQafvxMB8GA1UdIwQY
MBaAFCk5DsCtyl8HQ9GBFFx4mfmR+2XgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUt
ZWQ0MzNhYWM3ODI4LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iMzEzOTItMmQxYy00OTM0LWE1OWUtZWQ0MzNhYWM3ODI4
LzEvS1RrT3dLM0tYd2REMFlFVVhIaVotWkg3WmVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZMEoNLsP
1bTvwk1ckW52ndPW0+JO45U2Xgyp0YH2e/WXbic5guHmGVSZL5TsvTXhvTylMAkv
cmaElQx7XbPW/AawrnWDE/gqnNpfAx5ZPsIx9wLmioyJJa7bqdi1w9pEvLCVuxWX
2o2krAotFwx1LhWrLBLlJuJbOuP2IvQobLiPf8fW2mAXAeb+YDlCKIODUVhA7Dvz
7lA3R2kriYuYt0+DuL0SBBqsrsMC9HcIL19I093IG+fM5rH72v04OEBr6b5+HHBN
qejL32E5z/nxivEQaYxGTY+PXabi+aKlRgfpnhcgVdnP0uhxile7M8lnTPpBcIKz
Xl03WEkibMnkpw==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:23:48 2025 by rpki-client