Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
File: KeRudYZejUoIHktd2kbTyUADZ5s.mft (raw, json)
Hash identifier: M4sk3jP82sKxDkRG+rkCQo5wqBKKgt3tKmhys89pA84=
Subject key identifier: 3E:B7:8B:85:E4:BF:4D:3D:D1:D8:2B:26:F8:6A:6B:28:71:44:B5:9A
Authority key identifier: 29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
Certificate issuer: /CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Certificate serial: 0196BC6DEBC94E649D20B26B4AC403CD9BC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
Manifest number: 1412
Signing time: Sat 10 May 2025 23:00:42 +0000
Manifest this update: Sat 10 May 2025 23:00:42 +0000
Manifest next update: Sun 11 May 2025 23:00:42 +0000
Files and hashes: 1: KeRudYZejUoIHktd2kbTyUADZ5s.crl (hash: Vnyb7R+R7hc4/9xoUCCYwhJHGaCdLUSfVLSgaAoMQxY=)
2: sYwqpJAH6xt25FV658_Z0b8PqQ4.roa (hash: nTc7YSWaucHsViUALBoDYtryVR1AkC4pCCvnaDdeVwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:6d:eb:c9:4e:64:9d:20:b2:6b:4a:c4:03:cd:9b:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29e46e75865e8d4a081e4b5dda46d3c94003679b
Validity
Not Before: May 10 23:00:42 2025 GMT
Not After : May 11 23:00:42 2025 GMT
Subject: CN=3eb78b85e4bf4d3dd1d82b26f86a6b287144b59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:ab:1e:78:d9:05:f8:f1:03:59:e9:05:98:e7:
c6:53:d3:9d:11:8d:2e:45:66:df:1e:01:91:ea:a2:
02:88:35:e1:ea:d1:f1:60:43:4f:e6:f4:42:e7:91:
98:04:c9:7d:1b:ab:13:da:e3:21:bb:90:fc:85:a0:
dc:e8:ba:77:4e:91:7d:4d:95:69:11:4d:e3:62:e8:
47:e6:6c:4e:59:60:c0:1c:f3:b9:da:eb:f3:9f:9b:
00:68:bb:86:e8:0f:e0:cf:56:ee:8c:7f:b7:fd:30:
12:3d:88:96:f8:d8:c8:c0:28:7d:2f:3c:09:7d:99:
df:8e:4d:cd:f0:b2:cc:de:5b:b1:a6:37:8b:50:21:
02:7d:2a:32:3d:15:4a:b5:23:b8:f5:71:d7:a4:6e:
5f:6c:f1:85:e3:b6:d8:8e:1e:04:fc:83:49:34:c1:
f6:56:71:94:51:2c:1f:38:dc:45:0d:19:35:c2:bd:
bc:d9:65:6d:e3:1f:f1:30:5b:a6:82:18:0c:9d:4f:
eb:1e:54:40:5e:6b:06:5b:f5:92:f3:06:e5:7d:f7:
1a:8e:2d:15:1b:87:e9:47:cf:5a:cb:3b:b5:11:72:
49:6b:2e:a1:4b:d5:0d:d6:0a:f5:b5:d1:87:11:5c:
5c:43:ee:90:96:bb:d0:e5:be:cd:ab:56:ee:9d:6e:
fd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B7:8B:85:E4:BF:4D:3D:D1:D8:2B:26:F8:6A:6B:28:71:44:B5:9A
X509v3 Authority Key Identifier:
keyid:29:E4:6E:75:86:5E:8D:4A:08:1E:4B:5D:DA:46:D3:C9:40:03:67:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KeRudYZejUoIHktd2kbTyUADZ5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d2354a-f3c2-41d5-b292-a9d267acf664/1/KeRudYZejUoIHktd2kbTyUADZ5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ca:5e:9b:97:20:75:45:8c:48:a9:36:0a:b7:b1:0a:4b:56:
31:fd:b8:f0:28:5d:59:b8:81:15:8a:a6:fc:a8:1c:0c:fe:67:
91:32:a4:a1:64:7d:eb:5d:b1:0e:05:84:7f:74:e1:b7:5f:96:
14:63:6a:56:34:44:9c:99:ed:ff:62:c5:9a:a3:02:5d:d2:2a:
a9:22:93:d0:df:32:0b:e4:7c:fb:22:3e:56:61:2a:73:04:01:
5a:95:a0:4e:23:7b:c1:2a:e6:64:67:14:2c:d5:60:de:72:9e:
11:68:f2:85:a2:69:5f:2e:6a:c9:07:14:17:7e:6e:b6:1a:6d:
3c:b6:55:ab:d1:17:5c:19:3c:e2:d4:8b:68:f3:c6:d7:bc:e6:
30:a6:6b:b8:dd:81:33:69:1c:c2:e6:a4:98:26:78:8d:84:57:
46:8a:55:85:c1:2a:5f:c3:4c:f7:e8:53:ae:b5:9d:12:5d:77:
1e:16:b5:41:b0:21:14:01:70:66:ae:4e:ed:8f:86:6a:01:38:
37:f0:4b:df:18:7f:ce:a9:f2:92:01:cf:a7:2f:a7:d4:ec:91:
0e:f6:e4:43:fa:4f:01:26:1f:0f:26:9d:45:a5:ce:96:5c:97:
46:15:09:48:52:26:4d:31:94:5f:0c:7e:61:6d:b1:62:dd:e2:
3a:2e:ef:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa8bevJTmSdILJrSsQDzZvFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZTQ2ZTc1ODY1ZThkNGEwODFlNGI1ZGRhNDZkM2M5NDAw
MzY3OWIwHhcNMjUwNTEwMjMwMDQyWhcNMjUwNTExMjMwMDQyWjAzMTEwLwYDVQQD
EygzZWI3OGI4NWU0YmY0ZDNkZDFkODJiMjZmODZhNmIyODcxNDRiNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36seeNkF+PEDWekFmOfGU9OdEY0u
RWbfHgGR6qICiDXh6tHxYENP5vRC55GYBMl9G6sT2uMhu5D8haDc6Lp3TpF9TZVp
EU3jYuhH5mxOWWDAHPO52uvzn5sAaLuG6A/gz1bujH+3/TASPYiW+NjIwCh9LzwJ
fZnfjk3N8LLM3luxpjeLUCECfSoyPRVKtSO49XHXpG5fbPGF47bYjh4E/INJNMH2
VnGUUSwfONxFDRk1wr282WVt4x/xMFumghgMnU/rHlRAXmsGW/WS8wblffcaji0V
G4fpR89ayzu1EXJJay6hS9UN1gr1tdGHEVxcQ+6QlrvQ5b7Nq1bunW79dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD63i4Xkv0090dgrJvhqayhxRLWaMB8GA1UdIwQY
MBaAFCnkbnWGXo1KCB5LXdpG08lAA2ebMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTIt
YTlkMjY3YWNmNjY0LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9kMjM1NGEtZjNjMi00MWQ1LWIyOTItYTlkMjY3YWNmNjY0
LzEvS2VSdWRZWmVqVW9JSGt0ZDJrYlR5VUFEWjVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHspem5cg
dUWMSKk2CrexCktWMf248ChdWbiBFYqm/KgcDP5nkTKkoWR9612xDgWEf3Tht1+W
FGNqVjREnJnt/2LFmqMCXdIqqSKT0N8yC+R8+yI+VmEqcwQBWpWgTiN7wSrmZGcU
LNVg3nKeEWjyhaJpXy5qyQcUF35uthptPLZVq9EXXBk84tSLaPPG17zmMKZruN2B
M2kcwuakmCZ4jYRXRopVhcEqX8NM9+hTrrWdEl13Hha1QbAhFAFwZq5O7Y+GagE4
N/BL3xh/zqnykgHPpy+n1OyRDvbkQ/pPASYfDyadRaXOllyXRhUJSFImTTGUXwx+
YW2xYt3iOi7vYA==
-----END CERTIFICATE-----
Generated at Sun May 11 01:50:07 2025 by rpki-client