Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
File: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft (raw, json)
Hash identifier: oC47mF+ztaE3GQ4uaCJm+aggtrXVdUHSdB89QgDqaP0=
Subject key identifier: 3B:CD:C7:F8:98:8E:22:AE:E2:67:22:0C:F0:FA:68:FB:FC:69:E6:04
Authority key identifier: 29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
Certificate issuer: /CN=29da6411a13264dc6de0f101108540ef741ed19a
Certificate serial: 01967D8E95D519AB54108A5CC8E1C06D6B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
Manifest number: 1130
Signing time: Mon 28 Apr 2025 18:00:18 +0000
Manifest this update: Mon 28 Apr 2025 18:00:18 +0000
Manifest next update: Tue 29 Apr 2025 18:00:18 +0000
Files and hashes: 1: KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl (hash: azIpC/DX2dfP9+IplS1fGIjYJN7HOWFtNcpBqBgAJrA=)
2: ofG1VLRjjYIcZfzAaNigWWgyFxw.roa (hash: ZHICR+Axb4b3KRXOcmZzuP26q8FUw656ivJ0mJFMsoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:8e:95:d5:19:ab:54:10:8a:5c:c8:e1:c0:6d:6b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29da6411a13264dc6de0f101108540ef741ed19a
Validity
Not Before: Apr 28 18:00:18 2025 GMT
Not After : Apr 29 18:00:18 2025 GMT
Subject: CN=3bcdc7f8988e22aee267220cf0fa68fbfc69e604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d1:a1:53:2b:9c:4a:60:47:83:5f:f1:9e:15:
13:6b:d9:a9:27:4b:fc:47:95:66:de:8e:03:1c:1b:
88:8e:39:cf:15:11:12:9f:44:ec:01:4a:97:3f:9b:
ef:99:35:20:d1:a2:5d:13:ba:e6:f9:50:3d:e5:20:
73:9e:19:4d:9d:a6:73:85:24:f1:f9:4b:5c:9c:c6:
d5:0e:7b:90:40:3c:45:01:3c:19:2b:37:0a:3f:89:
f6:94:57:8c:91:1b:17:7f:33:b3:e6:62:49:7a:bd:
14:bd:86:a5:67:83:45:d2:0e:ef:39:35:99:b7:3d:
d3:fc:47:10:74:14:b1:cb:8d:80:2a:8a:3c:01:f7:
c6:ee:66:44:0f:40:88:3d:fc:f5:65:94:26:a3:b9:
a7:73:a1:d8:02:07:43:e8:33:0b:0f:3b:44:3e:31:
ff:a5:20:e1:a8:17:0b:02:76:ce:bb:4a:5f:9f:bc:
f4:8f:15:bf:70:5a:73:0e:13:62:9b:43:d4:01:77:
3e:05:89:25:08:e1:1a:4d:26:4b:76:d7:c2:b1:70:
36:32:f5:36:ac:6b:61:f8:d2:ff:cd:68:f7:1b:5b:
2e:31:ab:8b:d9:3e:0e:f9:b0:79:45:d4:8a:c0:42:
b1:23:90:96:91:ef:02:a1:22:0f:e0:54:80:59:b3:
c4:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CD:C7:F8:98:8E:22:AE:E2:67:22:0C:F0:FA:68:FB:FC:69:E6:04
X509v3 Authority Key Identifier:
keyid:29:DA:64:11:A1:32:64:DC:6D:E0:F1:01:10:85:40:EF:74:1E:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a56c12-db7a-4220-9b15-1c2b842d22be/1/KdpkEaEyZNxt4PEBEIVA73Qe0Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5c:37:cc:fb:b2:5b:e9:a5:5d:04:08:92:00:cc:6a:9c:c4:
b3:ee:c1:62:a4:ca:73:4f:ed:2e:21:13:77:76:93:ed:d5:97:
cd:26:0a:68:ab:11:f0:c2:f3:17:65:3c:ed:22:28:cc:0c:7f:
f2:26:a3:b5:37:e7:53:1c:b8:50:26:72:f0:96:02:7c:33:da:
6e:4b:9a:e5:7b:1e:07:c3:79:25:a6:02:e8:e0:7a:0b:ea:57:
bc:c6:f0:39:fa:9e:d1:5f:35:14:ab:b5:2d:65:86:cb:d9:88:
4a:2b:36:97:75:dc:19:fa:0f:3d:bc:65:90:1a:69:84:ae:fe:
a5:17:49:53:03:09:66:5d:c3:16:41:78:2a:04:b0:10:59:3d:
f4:c4:b2:a1:2d:52:d3:3f:d6:d1:24:a9:88:3c:5c:88:49:22:
d5:38:8f:a3:1e:6c:b5:51:de:b7:22:ad:a1:9c:65:24:e5:08:
e5:9b:38:77:7d:88:4b:2d:e4:ec:37:e6:c3:c2:c9:92:89:33:
fc:38:66:ff:2b:0c:7c:a8:e3:77:6e:28:78:a1:a9:72:82:3a:
c5:b6:8e:79:ea:b0:0c:7a:04:97:c5:58:e5:e9:d4:8b:a3:54:
e7:99:60:34:a2:3e:49:46:47:fc:ff:34:a3:8d:db:8d:fe:1a:
c7:a1:0e:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9jpXVGatUEIpcyOHAbWsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZGE2NDExYTEzMjY0ZGM2ZGUwZjEwMTEwODU0MGVmNzQx
ZWQxOWEwHhcNMjUwNDI4MTgwMDE4WhcNMjUwNDI5MTgwMDE4WjAzMTEwLwYDVQQD
EygzYmNkYzdmODk4OGUyMmFlZTI2NzIyMGNmMGZhNjhmYmZjNjllNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNGhUyucSmBHg1/xnhUTa9mpJ0v8
R5Vm3o4DHBuIjjnPFRESn0TsAUqXP5vvmTUg0aJdE7rm+VA95SBznhlNnaZzhSTx
+UtcnMbVDnuQQDxFATwZKzcKP4n2lFeMkRsXfzOz5mJJer0UvYalZ4NF0g7vOTWZ
tz3T/EcQdBSxy42AKoo8AffG7mZED0CIPfz1ZZQmo7mnc6HYAgdD6DMLDztEPjH/
pSDhqBcLAnbOu0pfn7z0jxW/cFpzDhNim0PUAXc+BYklCOEaTSZLdtfCsXA2MvU2
rGth+NL/zWj3G1suMauL2T4O+bB5RdSKwEKxI5CWke8CoSIP4FSAWbPEjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDvNx/iYjiKu4mciDPD6aPv8aeYEMB8GA1UdIwQY
MBaAFCnaZBGhMmTcbeDxARCFQO90HtGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUt
MWMyYjg0MmQyMmJlLzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hNTZjMTItZGI3YS00MjIwLTliMTUtMWMyYjg0MmQyMmJl
LzEvS2Rwa0VhRXlaTnh0NFBFQkVJVkE3M1FlMFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVw3zPuy
W+mlXQQIkgDMapzEs+7BYqTKc0/tLiETd3aT7dWXzSYKaKsR8MLzF2U87SIozAx/
8iajtTfnUxy4UCZy8JYCfDPabkua5XseB8N5JaYC6OB6C+pXvMbwOfqe0V81FKu1
LWWGy9mISis2l3XcGfoPPbxlkBpphK7+pRdJUwMJZl3DFkF4KgSwEFk99MSyoS1S
0z/W0SSpiDxciEki1TiPox5stVHetyKtoZxlJOUI5Zs4d32ISy3k7Dfmw8LJkokz
/Dhm/ysMfKjjd24oeKGpcoI6xbaOeeqwDHoEl8VY5enUi6NU55lgNKI+SUZH/P80
o43bjf4ax6EOvA==
-----END CERTIFICATE-----
Generated at Mon Apr 28 20:09:44 2025 by rpki-client