Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
File: KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft (raw, json)
Hash identifier: CS5ThkylSCCsQhiVMGlhCX8XHROSnONcOz4DMAcaLEI=
Subject key identifier: 81:AC:A7:7E:14:43:EA:57:A0:DE:AA:B9:1F:7B:E3:F8:8A:BB:04:DF
Authority key identifier: 29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
Certificate issuer: /CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Certificate serial: 019687DBB9254A16C752386833D87BF721D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
Manifest number: 0E84
Signing time: Wed 30 Apr 2025 18:00:45 +0000
Manifest this update: Wed 30 Apr 2025 18:00:45 +0000
Manifest next update: Thu 01 May 2025 18:00:45 +0000
Files and hashes: 1: KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl (hash: YaGASEqUWB+Y2AplRnVFgrZCNRB5RpTOsJo/1Ld8ahM=)
2: kiF2H4Ucoq9Nw51li6ImqM3ctGg.roa (hash: gOoMaXdniQu2tAHNZ6SbwXijF8n71W3w0mmuL2WSkY8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 May 2025 13:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:87:db:b9:25:4a:16:c7:52:38:68:33:d8:7b:f7:21:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2902c99ca732c64a19c7d9734a98fb24e5455549
Validity
Not Before: Apr 30 18:00:45 2025 GMT
Not After : May 1 18:00:45 2025 GMT
Subject: CN=81aca77e1443ea57a0deaab91f7be3f88abb04df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:5d:37:8a:b1:a7:3c:8b:10:e6:f9:fb:96:95:
b6:22:6b:a0:c5:87:5a:88:0f:77:07:d4:af:24:d7:
53:e6:81:41:14:07:9e:c7:30:52:70:2a:e9:0c:60:
2e:61:5a:55:3c:a4:58:65:47:65:51:21:88:23:f0:
54:14:b3:77:04:2c:57:51:35:64:09:ae:97:ab:28:
fa:99:a7:1e:90:d0:29:29:e7:b3:67:c3:fa:56:f9:
0c:37:48:66:ed:46:10:d3:d8:a3:f7:9d:85:a5:c0:
c0:9d:9c:0d:8f:d2:9c:ae:3a:c7:87:e2:37:21:89:
29:36:5b:06:cd:6b:de:cc:c3:3d:0e:d6:02:84:fc:
a8:0b:ab:a2:8c:17:a1:54:f2:85:7d:16:8a:00:6a:
53:e8:f1:21:ab:2d:d7:bd:6f:1f:05:62:a7:20:c6:
73:26:80:a6:a1:b9:a4:c8:36:fc:d8:a0:85:e2:cb:
17:8e:ca:75:2d:53:ad:39:13:d8:14:6f:2b:01:ce:
f3:10:df:80:fe:6b:83:e3:4d:28:52:f5:ca:64:5a:
50:1d:b6:d4:03:c5:8e:d9:89:60:a5:07:c7:f1:c4:
76:23:e3:56:6c:42:1c:cc:22:20:f4:7e:47:e4:91:
fd:36:29:1e:58:c9:9a:14:f2:15:da:e4:50:3f:c2:
6e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AC:A7:7E:14:43:EA:57:A0:DE:AA:B9:1F:7B:E3:F8:8A:BB:04:DF
X509v3 Authority Key Identifier:
keyid:29:02:C9:9C:A7:32:C6:4A:19:C7:D9:73:4A:98:FB:24:E5:45:55:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQLJnKcyxkoZx9lzSpj7JOVFVUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/54ca24-6e56-47d3-a429-b649a578f89c/1/KQLJnKcyxkoZx9lzSpj7JOVFVUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:2b:b3:09:39:7e:d9:4c:de:fe:67:2d:96:fc:6a:76:44:36:
6e:e4:4f:f1:eb:ea:21:34:39:62:ac:7d:73:05:8a:0d:86:a7:
3f:00:8f:f9:8c:b0:cc:a7:5b:08:f1:a6:c6:66:7d:21:bc:c6:
ff:44:a2:61:07:3c:44:26:d8:42:8b:31:6c:78:b2:93:09:64:
91:e6:e7:67:e6:10:ce:a2:dc:80:4c:bb:55:f5:2a:2b:b4:66:
28:79:c7:24:0f:8b:1c:77:ba:98:6a:b1:89:49:61:3c:ce:7d:
de:cc:09:25:c2:97:f7:85:66:5a:e6:3e:93:12:7b:90:8a:b8:
80:ab:13:63:80:90:af:c9:ed:12:82:5b:89:00:29:24:dc:07:
fc:d5:73:63:33:e9:d8:63:5d:06:fd:f0:5c:9d:e1:43:ca:4d:
dd:8b:18:6f:c0:61:78:78:43:7e:9d:a3:a8:ac:0d:02:49:5e:
97:1a:8b:78:88:ff:f5:b8:10:d3:ec:69:d3:2d:23:9d:49:49:
2c:c6:40:54:7b:ae:1d:a6:79:d4:ec:9d:88:d9:ed:9d:7e:0a:
40:9f:2c:36:21:d4:95:59:a0:7e:1a:27:8b:2b:1a:76:ab:25:
6f:11:73:cb:03:fe:9a:84:cb:1d:24:61:23:f7:08:80:96:35:
ad:f4:60:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaH27klShbHUjhoM9h79yHWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDJjOTljYTczMmM2NGExOWM3ZDk3MzRhOThmYjI0ZTU0
NTU1NDkwHhcNMjUwNDMwMTgwMDQ1WhcNMjUwNTAxMTgwMDQ1WjAzMTEwLwYDVQQD
Eyg4MWFjYTc3ZTE0NDNlYTU3YTBkZWFhYjkxZjdiZTNmODhhYmIwNGRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6F03irGnPIsQ5vn7lpW2ImugxYda
iA93B9SvJNdT5oFBFAeexzBScCrpDGAuYVpVPKRYZUdlUSGII/BUFLN3BCxXUTVk
Ca6Xqyj6macekNApKeezZ8P6VvkMN0hm7UYQ09ij952FpcDAnZwNj9KcrjrHh+I3
IYkpNlsGzWvezMM9DtYChPyoC6uijBehVPKFfRaKAGpT6PEhqy3XvW8fBWKnIMZz
JoCmobmkyDb82KCF4ssXjsp1LVOtORPYFG8rAc7zEN+A/muD400oUvXKZFpQHbbU
A8WO2YlgpQfH8cR2I+NWbEIczCIg9H5H5JH9NikeWMmaFPIV2uRQP8JujwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGsp34UQ+pXoN6quR974/iKuwTfMB8GA1UdIwQY
MBaAFCkCyZynMsZKGcfZc0qY+yTlRVVJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0Mjkt
YjY0OWE1NzhmODljLzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81NGNhMjQtNmU1Ni00N2QzLWE0MjktYjY0OWE1NzhmODlj
LzEvS1FMSm5LY3l4a29aeDlselNwajdKT1ZGVlVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFyuzCTl+
2Uze/mctlvxqdkQ2buRP8evqITQ5Yqx9cwWKDYanPwCP+YywzKdbCPGmxmZ9IbzG
/0SiYQc8RCbYQosxbHiykwlkkebnZ+YQzqLcgEy7VfUqK7RmKHnHJA+LHHe6mGqx
iUlhPM593swJJcKX94VmWuY+kxJ7kIq4gKsTY4CQr8ntEoJbiQApJNwH/NVzYzPp
2GNdBv3wXJ3hQ8pN3YsYb8BheHhDfp2jqKwNAklelxqLeIj/9bgQ0+xp0y0jnUlJ
LMZAVHuuHaZ51OydiNntnX4KQJ8sNiHUlVmgfhoniysadqslbxFzywP+moTLHSRh
I/cIgJY1rfRgPg==
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:15:24 2025 by rpki-client