Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
File: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft (raw, json)
Hash identifier: iaa9v/ejBYf9Ce80OlA19jX0dgDoeui/Vou6IPNOTw0=
Subject key identifier: 76:09:54:BA:C7:DD:52:1C:37:4A:9D:B7:9B:BD:7B:BC:85:86:88:21
Authority key identifier: 93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
Certificate issuer: /CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Certificate serial: 01969CACA9AFC766C45BA5ACC36104760EBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
Manifest number: 1520
Signing time: Sun 04 May 2025 19:01:23 +0000
Manifest this update: Sun 04 May 2025 19:01:23 +0000
Manifest next update: Mon 05 May 2025 19:01:23 +0000
Files and hashes: 1: k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl (hash: nweDMsiD+rJMbqgTcz1rN3aAtGYK6YNTO/gqzgeSQpo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 19:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9c:ac:a9:af:c7:66:c4:5b:a5:ac:c3:61:04:76:0e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93fa7e008ec6b002103a1bd1ed696b176f87b352
Validity
Not Before: May 4 19:01:23 2025 GMT
Not After : May 5 19:01:23 2025 GMT
Subject: CN=760954bac7dd521c374a9db79bbd7bbc85868821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:fe:68:3e:c8:84:0c:6a:ee:0c:de:97:5d:
8a:98:a9:50:e5:d0:4b:34:f6:12:67:64:c3:fc:61:
4c:0d:fc:60:2b:5b:2a:94:d2:a3:41:cf:0f:e6:fe:
74:30:aa:65:3c:c1:8c:7e:b9:52:58:ee:0b:7c:19:
42:87:14:14:f3:39:39:bd:8e:7d:f1:98:b7:2d:ea:
eb:6a:f3:2f:26:df:c0:a4:6b:0f:63:99:4f:0c:a5:
18:1e:73:8d:f7:93:96:a3:e2:68:70:9c:b6:18:fe:
07:40:04:5c:74:f8:6d:57:9d:1a:85:f3:fc:f6:ad:
3b:9a:63:f4:02:45:c1:cd:34:fe:dd:2f:d8:e9:f3:
f0:18:96:3d:04:b4:b2:59:4a:41:eb:98:0b:51:28:
0d:0a:e1:49:2e:b9:41:60:d5:40:cc:b5:e5:5b:31:
87:00:f0:62:b6:04:8f:55:5c:83:dd:4e:10:92:53:
90:7a:81:f3:60:2d:a0:0c:ce:fe:d8:6c:3c:cd:c0:
55:62:d8:f4:63:dd:b8:e8:cf:62:a5:d4:ef:81:1a:
e3:80:eb:8c:54:05:4a:cb:14:35:0c:f7:0b:ec:2b:
7f:ce:4e:2e:82:79:b5:22:07:e2:ad:f3:66:c8:d8:
de:ae:5b:be:ac:ed:29:88:06:b7:cb:c6:bf:0c:6f:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:09:54:BA:C7:DD:52:1C:37:4A:9D:B7:9B:BD:7B:BC:85:86:88:21
X509v3 Authority Key Identifier:
keyid:93:FA:7E:00:8E:C6:B0:02:10:3A:1B:D1:ED:69:6B:17:6F:87:B3:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/df6597-6e99-480d-8ea1-f7e91ac0fad9/1/k_p-AI7GsAIQOhvR7WlrF2-Hs1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ce:2d:91:07:46:97:48:27:93:d4:71:66:b9:3d:1c:ba:78:
7a:1c:4e:69:79:d5:4d:b9:56:92:b3:0b:3a:93:2d:7c:fb:9a:
0a:c1:67:c2:7f:30:5d:cb:0a:4e:01:88:6d:08:94:9f:e2:d1:
8f:eb:03:72:d2:52:e3:fd:1e:66:f4:f8:3d:73:68:66:0d:a5:
b2:36:7e:b0:23:1c:7b:fb:3d:d4:f4:24:57:09:42:18:52:2e:
dc:c2:7d:65:bd:90:2b:9c:6b:10:f9:8b:9a:45:50:99:ed:51:
1a:84:4a:06:56:07:50:03:c4:a9:0d:59:0e:b2:f2:54:11:b0:
e2:56:61:98:30:92:60:5d:dc:7c:51:2e:84:f1:38:87:b5:88:
f6:a6:0e:18:29:f0:05:ad:c5:12:db:cc:d7:85:e3:2e:e6:65:
49:af:75:21:6a:17:97:a1:4d:b4:5a:f1:66:b0:e5:c4:cf:76:
a7:6b:d8:68:11:1c:af:10:ab:34:f0:b5:b8:db:22:1e:61:51:
d9:f5:6e:0a:74:19:46:af:1b:f6:43:df:b6:ce:56:f5:56:ae:
90:3f:c9:a8:ae:c2:1a:9b:2d:5a:fe:35:72:22:fc:b3:a3:bc:
64:8b:45:e5:db:bd:03:05:61:f9:24:28:ff:94:cf:7b:8d:82:
34:c1:64:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZacrKmvx2bEW6Wsw2EEdg66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZmE3ZTAwOGVjNmIwMDIxMDNhMWJkMWVkNjk2YjE3NmY4
N2IzNTIwHhcNMjUwNTA0MTkwMTIzWhcNMjUwNTA1MTkwMTIzWjAzMTEwLwYDVQQD
Eyg3NjA5NTRiYWM3ZGQ1MjFjMzc0YTlkYjc5YmJkN2JiYzg1ODY4ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzb+aD7IhAxq7gzel12KmKlQ5dBL
NPYSZ2TD/GFMDfxgK1sqlNKjQc8P5v50MKplPMGMfrlSWO4LfBlChxQU8zk5vY59
8Zi3LerravMvJt/ApGsPY5lPDKUYHnON95OWo+JocJy2GP4HQARcdPhtV50ahfP8
9q07mmP0AkXBzTT+3S/Y6fPwGJY9BLSyWUpB65gLUSgNCuFJLrlBYNVAzLXlWzGH
APBitgSPVVyD3U4QklOQeoHzYC2gDM7+2Gw8zcBVYtj0Y9246M9ipdTvgRrjgOuM
VAVKyxQ1DPcL7Ct/zk4ugnm1IgfirfNmyNjerlu+rO0piAa3y8a/DG8GFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYJVLrH3VIcN0qdt5u9e7yFhoghMB8GA1UdIwQY
MBaAFJP6fgCOxrACEDob0e1paxdvh7NSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEt
ZjdlOTFhYzBmYWQ5LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZjY1OTctNmU5OS00ODBkLThlYTEtZjdlOTFhYzBmYWQ5
LzEva19wLUFJN0dzQUlRT2h2UjdXbHJGMi1IczFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALs4tkQdG
l0gnk9RxZrk9HLp4ehxOaXnVTblWkrMLOpMtfPuaCsFnwn8wXcsKTgGIbQiUn+LR
j+sDctJS4/0eZvT4PXNoZg2lsjZ+sCMce/s91PQkVwlCGFIu3MJ9Zb2QK5xrEPmL
mkVQme1RGoRKBlYHUAPEqQ1ZDrLyVBGw4lZhmDCSYF3cfFEuhPE4h7WI9qYOGCnw
Ba3FEtvM14XjLuZlSa91IWoXl6FNtFrxZrDlxM92p2vYaBEcrxCrNPC1uNsiHmFR
2fVuCnQZRq8b9kPfts5W9VaukD/JqK7CGpstWv41ciL8s6O8ZItF5du9AwVh+SQo
/5TPe42CNMFk7A==
-----END CERTIFICATE-----
Generated at Mon May 5 05:38:21 2025 by rpki-client