Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
File: KsPteUra-5HLgalp64qbKQX-4uw.mft (raw, json)
Hash identifier: XmrUhR3W8S2MyM1LxbPySYekQD+pa4iLv3Nv8qUITTE=
Subject key identifier: F0:F0:3A:45:E0:BF:43:3C:77:34:14:E6:CD:D2:91:00:A4:B0:59:73
Authority key identifier: 2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
Certificate issuer: /CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Certificate serial: 0196B9DAB655F0D657CC797FFFB3AD326AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
Manifest number: 1534
Signing time: Sat 10 May 2025 11:00:40 +0000
Manifest this update: Sat 10 May 2025 11:00:40 +0000
Manifest next update: Sun 11 May 2025 11:00:40 +0000
Files and hashes: 1: KsPteUra-5HLgalp64qbKQX-4uw.crl (hash: OuOUQfk6VaQBrb6tR0QWBeqfyro/buG1sqvBEXcC/a0=)
2: PKyx0DcFoAagRLDeVRH7IggDBvs.roa (hash: pNDjxNhK4qz1Wc21dlphpRgyPK79NSu66uAh/Cd4/LQ=)
3: zxynKoaXLk9CSCbEuR1SMnhOszM.roa (hash: 0C0maO3P6rLabRCNi4Fq6yr5sjK9+mFynQgMmbGpRUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:da:b6:55:f0:d6:57:cc:79:7f:ff:b3:ad:32:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac3ed794adafb91cb81a969eb8a9b2905fee2ec
Validity
Not Before: May 10 11:00:40 2025 GMT
Not After : May 11 11:00:40 2025 GMT
Subject: CN=f0f03a45e0bf433c773414e6cdd29100a4b05973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2d:62:df:4e:10:13:87:c8:ba:73:59:b6:13:
5d:72:32:9c:6b:12:b7:49:fe:b6:c8:50:12:4e:09:
35:a0:ba:48:d2:ef:24:27:6d:66:4b:fd:5d:ba:a3:
28:e0:76:a7:fb:e7:d1:26:a5:65:b5:32:f7:84:ac:
a1:d7:5c:ad:bc:ab:f4:08:38:4e:c7:1b:9f:c1:d1:
16:9d:36:07:05:21:b6:9a:a7:40:36:44:b9:a1:38:
d1:31:23:55:76:24:02:ef:0e:f1:46:c5:71:c8:ac:
96:5f:4b:21:40:35:02:1e:14:ad:0f:a7:6e:49:97:
13:c5:7a:92:d5:a1:73:2b:31:89:f1:e0:62:7b:87:
ab:2e:8c:8a:36:d3:38:12:8c:25:56:1c:eb:d2:ee:
4f:db:bb:e1:f5:7d:40:cd:6c:66:97:2c:f8:1a:12:
7e:cb:ab:90:4f:bb:c1:88:b4:56:cb:a4:c0:27:6f:
f8:52:e2:c9:fe:b1:d1:50:89:2e:75:d1:a2:57:5f:
f8:c9:aa:1d:ca:f9:d0:85:15:4c:c2:77:b3:34:ec:
39:47:58:13:59:58:47:30:be:8f:7b:49:29:47:c1:
58:3d:1c:b8:fc:7b:56:e4:45:92:07:9d:db:a2:ef:
45:3b:57:ca:48:89:0f:c8:64:d4:be:8d:6d:c3:4e:
38:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F0:3A:45:E0:BF:43:3C:77:34:14:E6:CD:D2:91:00:A4:B0:59:73
X509v3 Authority Key Identifier:
keyid:2A:C3:ED:79:4A:DA:FB:91:CB:81:A9:69:EB:8A:9B:29:05:FE:E2:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPteUra-5HLgalp64qbKQX-4uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7b127b-44ce-4cad-ad8f-089c1c3d4357/1/KsPteUra-5HLgalp64qbKQX-4uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:5a:dd:da:21:39:ba:2c:97:b7:85:25:c5:a2:a1:ca:29:3f:
4e:10:19:ea:f2:4a:55:26:67:1d:20:0d:5c:2a:e7:e0:0c:84:
6d:19:de:a6:4b:72:d6:95:9f:18:98:78:7a:4b:fd:4b:f6:58:
71:59:0a:45:98:c8:3d:93:e5:2b:28:cc:d9:12:9d:8a:06:6d:
64:69:00:9a:8c:7d:e6:19:ab:1f:fc:b4:8b:f2:98:a2:d5:67:
d8:b2:21:8c:aa:17:e1:4c:3a:c3:de:2d:74:6b:f3:70:c1:0e:
38:bc:50:39:85:74:71:93:72:df:c5:fc:2b:a5:97:43:f5:6d:
a4:d1:c4:bd:81:49:93:98:09:bf:9d:8f:6b:25:fd:47:75:8b:
31:6d:7f:85:d2:0c:50:a6:a9:56:86:7c:44:13:c5:66:d9:9b:
79:be:ad:8e:ec:45:59:df:cc:41:5a:1c:01:a7:4e:16:8a:d3:
9a:60:c5:2f:ad:1b:e2:e9:e1:65:29:0a:c1:e6:d6:f0:19:b5:
87:98:16:ac:be:82:69:5c:e5:63:9b:01:bb:59:e5:29:c6:f3:
8b:95:df:80:b1:17:e5:d9:9a:b9:c8:04:db:1b:14:60:94:b3:
51:69:fc:51:bd:4c:e7:c5:d7:40:1d:19:c0:de:65:92:67:2b:
a0:1a:40:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa52rZV8NZXzHl//7OtMmrwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzNlZDc5NGFkYWZiOTFjYjgxYTk2OWViOGE5YjI5MDVm
ZWUyZWMwHhcNMjUwNTEwMTEwMDQwWhcNMjUwNTExMTEwMDQwWjAzMTEwLwYDVQQD
EyhmMGYwM2E0NWUwYmY0MzNjNzczNDE0ZTZjZGQyOTEwMGE0YjA1OTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC1i304QE4fIunNZthNdcjKcaxK3
Sf62yFASTgk1oLpI0u8kJ21mS/1duqMo4Han++fRJqVltTL3hKyh11ytvKv0CDhO
xxufwdEWnTYHBSG2mqdANkS5oTjRMSNVdiQC7w7xRsVxyKyWX0shQDUCHhStD6du
SZcTxXqS1aFzKzGJ8eBie4erLoyKNtM4EowlVhzr0u5P27vh9X1AzWxmlyz4GhJ+
y6uQT7vBiLRWy6TAJ2/4UuLJ/rHRUIkuddGiV1/4yaodyvnQhRVMwnezNOw5R1gT
WVhHML6Pe0kpR8FYPRy4/HtW5EWSB53bou9FO1fKSIkPyGTUvo1tw044vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPDwOkXgv0M8dzQU5s3SkQCksFlzMB8GA1UdIwQY
MBaAFCrD7XlK2vuRy4GpaeuKmykF/uLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYt
MDg5YzFjM2Q0MzU3LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YjEyN2ItNDRjZS00Y2FkLWFkOGYtMDg5YzFjM2Q0MzU3
LzEvS3NQdGVVcmEtNUhMZ2FscDY0cWJLUVgtNHV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVrd2iE5
uiyXt4UlxaKhyik/ThAZ6vJKVSZnHSANXCrn4AyEbRnepkty1pWfGJh4ekv9S/ZY
cVkKRZjIPZPlKyjM2RKdigZtZGkAmox95hmrH/y0i/KYotVn2LIhjKoX4Uw6w94t
dGvzcMEOOLxQOYV0cZNy38X8K6WXQ/VtpNHEvYFJk5gJv52PayX9R3WLMW1/hdIM
UKapVoZ8RBPFZtmbeb6tjuxFWd/MQVocAadOForTmmDFL60b4unhZSkKwebW8Bm1
h5gWrL6CaVzlY5sBu1nlKcbzi5XfgLEX5dmaucgE2xsUYJSzUWn8Ub1M58XXQB0Z
wN5lkmcroBpANw==
-----END CERTIFICATE-----
Generated at Sat May 10 19:00:51 2025 by rpki-client