Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
File: kUS2KYi--9kYP26_brLRlMso5uM.mft (raw, json)
Hash identifier: 9kTtg9qFCVuLxfKNgOvyi6xyNFM83kWLqTkJ6RqE0j0=
Subject key identifier: 31:FA:D3:34:C6:71:78:83:30:FD:90:4A:44:5E:BA:1D:64:47:D5:28
Authority key identifier: 91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
Certificate issuer: /CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Certificate serial: 0196895C929915770A6E58B2CB58C8E8C9B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
Manifest number: 06D9
Signing time: Thu 01 May 2025 01:01:07 +0000
Manifest this update: Thu 01 May 2025 01:01:07 +0000
Manifest next update: Fri 02 May 2025 01:01:07 +0000
Files and hashes: 1: kUS2KYi--9kYP26_brLRlMso5uM.crl (hash: RLZDJ2AhKQKSf+n8qbE6F4UFz2k/zQXwaUlDrhpNkV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 01:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:89:5c:92:99:15:77:0a:6e:58:b2:cb:58:c8:e8:c9:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9144b62988befbd9183f6ebf6eb2d194cb28e6e3
Validity
Not Before: May 1 01:01:07 2025 GMT
Not After : May 2 01:01:07 2025 GMT
Subject: CN=31fad334c671788330fd904a445eba1d6447d528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:e5:f1:54:18:5e:83:a1:f7:ad:d0:11:8f:80:
dd:26:9c:cd:a6:20:13:d8:a9:db:c5:92:a3:cc:79:
db:b7:5a:80:4c:4f:80:ee:2f:19:05:94:19:6f:8d:
10:a2:5b:4b:c8:9e:88:bf:66:60:66:42:ab:50:d3:
66:b8:50:85:2d:d9:7f:e2:96:8d:d6:d6:0a:72:db:
91:79:96:b2:f1:0e:be:0a:b4:f3:a6:0c:6c:9f:48:
7d:0c:41:29:f5:26:90:b9:2f:74:43:bd:64:a7:12:
62:0e:10:c1:31:96:9c:98:2b:47:9f:b0:99:3e:d7:
b5:a1:71:1b:17:4e:a4:02:63:c2:e3:d2:61:99:68:
d1:28:5f:ff:0c:15:7a:1a:92:22:4a:a6:af:74:8b:
09:69:ed:2a:94:53:73:07:a2:e6:d1:9a:9e:30:b5:
d5:aa:21:d8:de:be:f1:18:fa:f1:5d:a2:28:03:e8:
aa:2d:33:dc:7b:03:d6:a9:bc:b2:b2:69:67:c3:52:
93:a1:a9:3b:6a:a1:58:e0:bb:70:eb:c3:6b:ad:d9:
b8:a8:f6:5f:f6:b2:23:78:8f:ad:d7:c1:56:8d:cf:
0f:ef:40:56:49:ea:ba:52:5e:d4:b9:d6:87:d4:97:
b1:3f:d9:46:ac:21:7a:40:7d:df:b4:bd:6f:48:cb:
ac:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:FA:D3:34:C6:71:78:83:30:FD:90:4A:44:5E:BA:1D:64:47:D5:28
X509v3 Authority Key Identifier:
keyid:91:44:B6:29:88:BE:FB:D9:18:3F:6E:BF:6E:B2:D1:94:CB:28:E6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUS2KYi--9kYP26_brLRlMso5uM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/93574e-d811-43c2-bd1c-990ba0c06326/1/kUS2KYi--9kYP26_brLRlMso5uM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:9b:8c:b2:8a:41:7d:c8:93:df:a1:c6:7a:02:58:73:ad:94:
39:80:d5:8f:3d:d9:ad:a8:b2:de:aa:44:92:b6:8d:5f:9e:fd:
75:c3:c0:46:5f:05:4a:24:d9:95:a7:4c:56:07:db:72:f7:02:
4a:c8:fb:a3:4c:47:c6:cd:fd:bd:d8:72:4f:a6:f6:5a:14:91:
9a:1c:6e:47:bf:f8:09:d0:82:a7:09:00:6e:ef:63:6e:e3:bc:
63:b7:0c:b2:26:e0:ab:5b:6e:61:23:56:59:01:ce:5c:2c:e7:
96:f4:17:cb:13:90:03:b0:12:0b:5f:b7:24:48:7c:9f:e7:05:
24:52:e5:5d:da:a3:32:17:77:59:26:22:0e:6c:69:af:5f:fd:
69:a7:ee:73:c5:be:b9:86:a4:a7:c9:16:3f:30:6c:aa:69:c1:
08:3e:ef:12:5a:20:84:fe:fd:e6:bc:4e:e3:dc:9b:2f:97:8a:
92:b2:16:bc:02:ea:bd:97:9a:f6:7b:67:c1:e1:ae:f5:4f:d8:
8a:79:c2:ef:56:7e:de:93:f9:ce:97:ae:e4:ab:96:48:6c:a3:
b0:ab:6b:de:c3:fc:64:6a:22:05:58:ce:4f:25:87:0e:24:35:
ae:91:7a:a7:ea:25:01:1d:57:5c:7f:01:e9:f1:12:42:4a:0d:
2e:c2:a3:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaJXJKZFXcKbliyy1jI6MmwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDRiNjI5ODhiZWZiZDkxODNmNmViZjZlYjJkMTk0Y2Iy
OGU2ZTMwHhcNMjUwNTAxMDEwMTA3WhcNMjUwNTAyMDEwMTA3WjAzMTEwLwYDVQQD
EygzMWZhZDMzNGM2NzE3ODgzMzBmZDkwNGE0NDVlYmExZDY0NDdkNTI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOXxVBheg6H3rdARj4DdJpzNpiAT
2KnbxZKjzHnbt1qATE+A7i8ZBZQZb40QoltLyJ6Iv2ZgZkKrUNNmuFCFLdl/4paN
1tYKctuReZay8Q6+CrTzpgxsn0h9DEEp9SaQuS90Q71kpxJiDhDBMZacmCtHn7CZ
Pte1oXEbF06kAmPC49JhmWjRKF//DBV6GpIiSqavdIsJae0qlFNzB6Lm0ZqeMLXV
qiHY3r7xGPrxXaIoA+iqLTPcewPWqbyysmlnw1KToak7aqFY4Ltw68Nrrdm4qPZf
9rIjeI+t18FWjc8P70BWSeq6Ul7UudaH1JexP9lGrCF6QH3ftL1vSMuswwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDH60zTGcXiDMP2QSkReuh1kR9UoMB8GA1UdIwQY
MBaAFJFEtimIvvvZGD9uv26y0ZTLKObjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMt
OTkwYmEwYzA2MzI2LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi85MzU3NGUtZDgxMS00M2MyLWJkMWMtOTkwYmEwYzA2MzI2
LzEva1VTMktZaS0tOWtZUDI2X2JyTFJsTXNvNXVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGJuMsopB
fciT36HGegJYc62UOYDVjz3Zraiy3qpEkraNX579dcPARl8FSiTZladMVgfbcvcC
Ssj7o0xHxs39vdhyT6b2WhSRmhxuR7/4CdCCpwkAbu9jbuO8Y7cMsibgq1tuYSNW
WQHOXCznlvQXyxOQA7ASC1+3JEh8n+cFJFLlXdqjMhd3WSYiDmxpr1/9aafuc8W+
uYakp8kWPzBsqmnBCD7vEloghP795rxO49ybL5eKkrIWvALqvZea9ntnweGu9U/Y
innC71Z+3pP5zpeu5KuWSGyjsKtr3sP8ZGoiBVjOTyWHDiQ1rpF6p+olAR1XXH8B
6fESQkoNLsKjlw==
-----END CERTIFICATE-----
Generated at Thu May 1 09:38:52 2025 by rpki-client