Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
File: kcEL_eWBOrR8OMXBkE7CazLCoJU.mft (raw, json)
Hash identifier: HgFZxKpBVxD3cea67x+lr26I9j0rL5xyGRb9pVxxXxI=
Subject key identifier: F0:47:64:3F:5A:4C:D8:81:B4:89:53:7E:F2:42:D8:8B:BF:43:5B:51
Authority key identifier: 91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
Certificate issuer: /CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Certificate serial: 01967F7D66B3CA5529D59C49023E433AC3D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
Manifest number: 152A
Signing time: Tue 29 Apr 2025 03:00:46 +0000
Manifest this update: Tue 29 Apr 2025 03:00:46 +0000
Manifest next update: Wed 30 Apr 2025 03:00:46 +0000
Files and hashes: 1: 12sEndDITu3xfG3rwq5fCgDFi4g.roa (hash: INrDxDNjEOUhYyeyQWwSgSxYwST/jFhVVKOzmgcOx8U=)
2: J-F67EchYLFsSdnuT0ELKO3zkVM.roa (hash: X3ffb8upes93ybjj9N2ywu5hcNrq4bSW9hgoat91kHU=)
3: kcEL_eWBOrR8OMXBkE7CazLCoJU.crl (hash: RV2fm4/EH6JioZHg3bcbZ4AitCrXvDQknNKg7fyPe+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7f:7d:66:b3:ca:55:29:d5:9c:49:02:3e:43:3a:c3:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91c10bfde5813ab47c38c5c1904ec26b32c2a095
Validity
Not Before: Apr 29 03:00:46 2025 GMT
Not After : Apr 30 03:00:46 2025 GMT
Subject: CN=f047643f5a4cd881b489537ef242d88bbf435b51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b3:6a:02:da:1b:46:ae:54:cd:39:6e:df:ce:
7e:47:5e:10:76:95:39:4c:85:28:86:be:de:14:6a:
ac:f0:42:04:a2:a4:46:ae:c4:cd:fe:97:2e:7c:18:
a6:ff:1f:4b:be:ce:05:b8:86:d1:95:5a:bb:ab:17:
3f:cf:f3:82:eb:3a:41:4f:b3:67:f9:b2:7e:ee:ab:
ba:cd:70:a3:f0:bc:00:b1:c0:7e:57:0a:3e:a0:98:
47:46:4d:e0:85:30:31:a2:e8:56:aa:ef:80:1c:02:
db:ff:fd:fe:09:ad:ff:42:35:f3:60:3b:4b:6d:07:
6e:8a:14:e2:58:7a:cc:c2:75:39:ca:48:ea:8f:62:
d4:81:c9:95:af:6b:2a:ae:1e:a2:be:7f:0d:39:4c:
8c:a3:cd:86:61:23:d7:81:de:36:d8:4c:69:06:b2:
88:9b:31:c9:a5:82:b3:a5:1b:74:06:da:5b:da:c7:
70:16:1a:64:e1:b9:e5:cd:62:33:92:0f:e2:68:93:
6b:90:89:45:a3:3d:4a:87:f5:2b:12:00:49:9a:a2:
79:43:56:93:4d:bd:84:7f:bd:c8:3a:57:57:87:28:
d3:c6:90:ab:ce:17:5a:e2:35:74:7b:8a:10:80:e3:
84:2a:44:a6:48:f1:32:e0:24:6e:e9:04:69:c7:ce:
bd:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:47:64:3F:5A:4C:D8:81:B4:89:53:7E:F2:42:D8:8B:BF:43:5B:51
X509v3 Authority Key Identifier:
keyid:91:C1:0B:FD:E5:81:3A:B4:7C:38:C5:C1:90:4E:C2:6B:32:C2:A0:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kcEL_eWBOrR8OMXBkE7CazLCoJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3feb15-6834-43e2-b6e7-04d74f368698/1/kcEL_eWBOrR8OMXBkE7CazLCoJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:cf:c5:24:8d:18:33:c5:39:e9:87:cc:18:42:ea:73:40:
3a:1f:c8:7e:70:31:18:5a:94:d9:82:ff:36:cd:9f:85:c6:a6:
b8:17:80:93:4e:4a:f0:ef:65:d3:11:3d:dc:76:ac:ef:17:13:
05:c7:10:10:ad:bf:9b:f4:63:96:9a:7a:ec:d1:1d:c9:49:6d:
ff:8c:ec:3d:42:fb:ce:95:0d:56:38:c5:d1:95:2d:09:65:14:
ea:3d:20:e4:b5:f3:9f:f5:e4:38:96:ce:9b:94:9c:06:a1:a8:
89:7a:7a:92:e9:28:d1:35:b4:75:f7:12:65:92:6d:c5:26:6b:
ad:df:a8:c0:15:c4:a6:ea:02:cd:10:02:36:c8:f8:b3:d6:da:
2b:b2:73:1d:cd:29:b3:81:d7:d8:81:4d:61:cc:10:36:f0:0d:
9e:55:2c:f7:53:e3:32:c6:28:2a:7b:52:c1:40:b7:b1:96:7b:
b9:c9:5b:47:5c:9b:9b:75:0c:a5:8c:76:73:ba:3e:a3:7e:d7:
30:9d:98:05:ad:8b:e4:23:c1:f4:97:3b:b7:be:50:e8:e8:54:
a9:00:4a:a8:f2:db:db:42:3b:00:56:37:5c:08:46:70:4c:de:
8b:d3:ea:d6:29:5b:53:ac:f0:69:dd:2c:e3:14:11:af:90:8f:
68:c3:60:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ/fWazylUp1ZxJAj5DOsPZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxYzEwYmZkZTU4MTNhYjQ3YzM4YzVjMTkwNGVjMjZiMzJj
MmEwOTUwHhcNMjUwNDI5MDMwMDQ2WhcNMjUwNDMwMDMwMDQ2WjAzMTEwLwYDVQQD
EyhmMDQ3NjQzZjVhNGNkODgxYjQ4OTUzN2VmMjQyZDg4YmJmNDM1YjUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17NqAtobRq5UzTlu385+R14QdpU5
TIUohr7eFGqs8EIEoqRGrsTN/pcufBim/x9Lvs4FuIbRlVq7qxc/z/OC6zpBT7Nn
+bJ+7qu6zXCj8LwAscB+Vwo+oJhHRk3ghTAxouhWqu+AHALb//3+Ca3/QjXzYDtL
bQduihTiWHrMwnU5ykjqj2LUgcmVr2sqrh6ivn8NOUyMo82GYSPXgd422ExpBrKI
mzHJpYKzpRt0Btpb2sdwFhpk4bnlzWIzkg/iaJNrkIlFoz1Kh/UrEgBJmqJ5Q1aT
Tb2Ef73IOldXhyjTxpCrzhda4jV0e4oQgOOEKkSmSPEy4CRu6QRpx869OwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBHZD9aTNiBtIlTfvJC2Iu/Q1tRMB8GA1UdIwQY
MBaAFJHBC/3lgTq0fDjFwZBOwmsywqCVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTct
MDRkNzRmMzY4Njk4LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy8zZmViMTUtNjgzNC00M2UyLWI2ZTctMDRkNzRmMzY4Njk4
LzEva2NFTF9lV0JPclI4T01YQmtFN0NhekxDb0pVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOvPxSSN
GDPFOemHzBhC6nNAOh/IfnAxGFqU2YL/Ns2fhcamuBeAk05K8O9l0xE93Has7xcT
BccQEK2/m/Rjlpp67NEdyUlt/4zsPUL7zpUNVjjF0ZUtCWUU6j0g5LXzn/XkOJbO
m5ScBqGoiXp6kuko0TW0dfcSZZJtxSZrrd+owBXEpuoCzRACNsj4s9baK7JzHc0p
s4HX2IFNYcwQNvANnlUs91PjMsYoKntSwUC3sZZ7uclbR1ybm3UMpYx2c7o+o37X
MJ2YBa2L5CPB9Jc7t75Q6OhUqQBKqPLb20I7AFY3XAhGcEzei9Pq1ilbU6zwad0s
4xQRr5CPaMNgMQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:48 2025 by rpki-client