Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
File: kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft (raw, json)
Hash identifier: OeSGQzMHXZjYlQpq+sRkmyEr+E1nD2BQbilmBH8LMZ0=
Subject key identifier: 6C:E9:FA:47:E2:90:EE:9E:3A:8C:DE:AD:16:71:77:B5:54:94:4E:46
Authority key identifier: 90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
Certificate issuer: /CN=90a4601bf7f62416fb01e15e65ef451017c97601
Certificate serial: 0196C2394BC9A354E187015ED7B2D12A5869
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
Manifest number: 153A
Signing time: Mon 12 May 2025 02:00:56 +0000
Manifest this update: Mon 12 May 2025 02:00:56 +0000
Manifest next update: Tue 13 May 2025 02:00:56 +0000
Files and hashes: 1: kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl (hash: nmT0RGu1mgdCHGKTg5hJOZKo16TkPGxPWutlraJX3ws=)
2: v64OG16FRTD93CnYY-754YZNyZ4.roa (hash: p7D4RC+KDdym5ItTd1PLmzFnbXnv40mOj51eqApvqXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c2:39:4b:c9:a3:54:e1:87:01:5e:d7:b2:d1:2a:58:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90a4601bf7f62416fb01e15e65ef451017c97601
Validity
Not Before: May 12 02:00:56 2025 GMT
Not After : May 13 02:00:56 2025 GMT
Subject: CN=6ce9fa47e290ee9e3a8cdead167177b554944e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:da:e1:25:24:25:7c:06:01:a1:0b:64:22:ed:
c8:84:31:a4:4f:71:e5:f9:6b:10:6d:c6:33:f8:6a:
19:0b:e7:01:ec:42:1f:b9:74:44:ae:5c:bf:fb:fd:
b2:bd:a2:e2:03:70:43:51:01:50:c8:9d:da:81:a8:
4d:4d:25:eb:84:58:f1:a1:e5:38:e7:bc:4d:a7:c9:
01:61:99:6d:83:b3:a4:8e:1a:70:22:a8:a0:8e:a3:
59:b8:c9:60:68:3d:d5:94:5a:41:b8:f9:fd:86:27:
03:ca:20:b3:38:13:26:3e:1f:96:a8:5a:29:ea:af:
f5:61:35:04:e9:e4:6e:87:a4:41:db:0c:90:a4:0c:
da:16:ff:77:55:43:21:b9:86:a5:73:8b:1b:a7:b6:
24:6e:08:23:08:8f:b5:c8:13:35:da:22:1f:93:41:
2f:09:f6:bb:16:cd:c8:ee:64:82:9e:a1:5f:ce:e0:
b7:3a:4c:cc:74:db:92:24:4d:18:4d:f7:ac:2a:05:
f7:a4:37:e6:49:32:56:bf:b8:c9:76:6d:15:dc:95:
a6:78:3c:0b:eb:c7:21:68:e2:0b:ef:be:24:9d:a2:
3a:46:b8:e5:bb:65:0e:e7:a9:5a:14:78:21:cd:e3:
17:48:88:9e:8b:58:10:37:63:ac:97:62:49:ea:ca:
18:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E9:FA:47:E2:90:EE:9E:3A:8C:DE:AD:16:71:77:B5:54:94:4E:46
X509v3 Authority Key Identifier:
keyid:90:A4:60:1B:F7:F6:24:16:FB:01:E1:5E:65:EF:45:10:17:C9:76:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kKRgG_f2JBb7AeFeZe9FEBfJdgE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/18a7ba-673d-4f2f-b7bc-163273d3d131/1/kKRgG_f2JBb7AeFeZe9FEBfJdgE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2e:0b:f4:3b:af:cc:c3:33:89:7a:33:b7:a5:dd:9a:f2:ef:
17:c6:2f:1f:d1:aa:5d:52:40:4c:64:1e:19:73:9e:7f:96:a6:
46:5d:0f:04:1f:e6:d0:33:4d:1d:e3:4b:e9:55:db:a5:a6:31:
e4:cb:e8:e9:e4:19:54:99:1e:93:f4:a2:82:42:ba:10:02:be:
d2:07:cf:64:a0:bb:b4:26:98:ce:7e:7d:2d:3e:86:a8:67:8a:
d6:c8:37:1a:51:3f:78:b8:7f:88:32:5f:52:41:ad:74:7f:be:
62:61:1a:27:1a:38:ad:f8:f2:78:61:80:a9:fb:65:3b:2f:62:
bd:7e:4a:a8:70:56:fa:91:9c:f5:68:07:26:8c:e2:1e:5d:08:
1a:fa:f5:0f:e1:a1:42:fb:c1:cc:30:34:8e:0d:63:a4:6f:6e:
03:ec:60:d4:4e:b7:dd:7a:8c:40:bb:79:55:88:4b:74:aa:17:
23:bf:09:6a:a8:bb:ed:03:59:42:d0:62:5c:10:af:ca:93:57:
ca:10:bb:11:cd:e4:0a:3e:9d:34:48:11:2e:22:87:c7:5c:8f:
5b:aa:86:24:bf:1e:79:dd:b5:31:85:1d:29:07:ac:42:ca:73:
50:53:cc:5a:10:de:ee:14:94:b1:b6:2b:30:0d:00:93:21:25:
2f:fa:75:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbCOUvJo1ThhwFe17LRKlhpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYTQ2MDFiZjdmNjI0MTZmYjAxZTE1ZTY1ZWY0NTEwMTdj
OTc2MDEwHhcNMjUwNTEyMDIwMDU2WhcNMjUwNTEzMDIwMDU2WjAzMTEwLwYDVQQD
Eyg2Y2U5ZmE0N2UyOTBlZTllM2E4Y2RlYWQxNjcxNzdiNTU0OTQ0ZTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1trhJSQlfAYBoQtkIu3IhDGkT3Hl
+WsQbcYz+GoZC+cB7EIfuXRErly/+/2yvaLiA3BDUQFQyJ3agahNTSXrhFjxoeU4
57xNp8kBYZltg7OkjhpwIqigjqNZuMlgaD3VlFpBuPn9hicDyiCzOBMmPh+WqFop
6q/1YTUE6eRuh6RB2wyQpAzaFv93VUMhuYalc4sbp7YkbggjCI+1yBM12iIfk0Ev
Cfa7Fs3I7mSCnqFfzuC3OkzMdNuSJE0YTfesKgX3pDfmSTJWv7jJdm0V3JWmeDwL
68chaOIL774knaI6Rrjlu2UO56laFHghzeMXSIiei1gQN2Osl2JJ6soYGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGzp+kfikO6eOozerRZxd7VUlE5GMB8GA1UdIwQY
MBaAFJCkYBv39iQW+wHhXmXvRRAXyXYBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMt
MTYzMjczZDNkMTMxLzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xOGE3YmEtNjczZC00ZjJmLWI3YmMtMTYzMjczZDNkMTMx
LzEva0tSZ0dfZjJKQmI3QWVGZVplOUZFQmZKZGdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAei4L9Duv
zMMziXozt6XdmvLvF8YvH9GqXVJATGQeGXOef5amRl0PBB/m0DNNHeNL6VXbpaYx
5Mvo6eQZVJkek/SigkK6EAK+0gfPZKC7tCaYzn59LT6GqGeK1sg3GlE/eLh/iDJf
UkGtdH++YmEaJxo4rfjyeGGAqftlOy9ivX5KqHBW+pGc9WgHJoziHl0IGvr1D+Gh
QvvBzDA0jg1jpG9uA+xg1E633XqMQLt5VYhLdKoXI78Jaqi77QNZQtBiXBCvypNX
yhC7Ec3kCj6dNEgRLiKHx1yPW6qGJL8eed21MYUdKQesQspzUFPMWhDe7hSUsbYr
MA0AkyElL/p1Pg==
-----END CERTIFICATE-----
Generated at Mon May 12 04:10:08 2025 by rpki-client