Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
File: KKye3SQL_EUgzgvJskWWPSTiv-I.mft (raw, json)
Hash identifier: nAwG+nJtykgOTu2H4vSVjMqRKMVlN+Vd3EVlmU7MA40=
Subject key identifier: DE:DA:18:DD:A3:7D:36:92:80:C0:07:35:AD:47:4F:DB:31:41:49:E2
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 0196B0D7D4C0FEECBB56FB18E75D31E1EBEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
Manifest number: 1280
Signing time: Thu 08 May 2025 17:00:56 +0000
Manifest this update: Thu 08 May 2025 17:00:56 +0000
Manifest next update: Fri 09 May 2025 17:00:56 +0000
Files and hashes: 1: 7heC61NtQoMcpuhj_ZjE2RH5xUk.roa (hash: 9n2osY0Zh0YOvne11Off7803igcpZJUc8/cMI8UdihQ=)
2: KKye3SQL_EUgzgvJskWWPSTiv-I.crl (hash: 7X9lylWyh3SZaYmwDzDYqiD7kNAX+Z9ZFjbQ2S8Y0tQ=)
3: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (hash: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 15:42:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b0:d7:d4:c0:fe:ec:bb:56:fb:18:e7:5d:31:e1:eb:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: May 8 17:00:56 2025 GMT
Not After : May 9 17:00:56 2025 GMT
Subject: CN=deda18dda37d369280c00735ad474fdb314149e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:95:11:ab:ff:7b:be:03:46:0c:be:0d:6b:bf:
ce:49:1e:d3:36:3e:b0:5f:eb:cb:c4:3b:06:3b:84:
11:09:d7:ff:d3:69:9b:48:e5:32:30:b1:78:40:f4:
4a:81:16:a7:81:99:26:a2:40:91:58:c3:34:bb:39:
61:9a:2b:e7:3f:18:39:49:6b:16:c9:5d:9b:3e:98:
94:ec:f9:2c:ab:8b:35:c3:df:24:7b:cf:57:63:bf:
93:fa:26:b7:e5:b5:0e:c0:59:cd:23:8a:51:17:cc:
9d:2b:e5:90:b1:69:5e:01:4f:1c:0b:38:71:10:90:
de:77:47:9e:d3:d6:4f:6e:f6:17:47:cb:54:1c:bb:
61:e4:69:f9:cc:fc:de:ca:44:70:78:c3:26:e4:67:
a9:ec:e7:3d:b9:42:a8:42:fc:51:43:83:32:71:ac:
8d:76:9a:aa:88:e7:4c:78:0a:e6:04:7d:68:46:b3:
32:2d:38:3c:c5:b5:7f:db:2d:a8:0d:8f:ba:f0:95:
6b:15:0e:71:62:43:bd:f6:ef:cf:7f:d6:56:a4:92:
e1:6c:2b:85:ab:42:33:33:8d:d1:36:02:f1:2c:34:
0c:f5:99:14:f4:f1:cd:f2:40:6d:3e:04:c7:10:59:
eb:80:a3:7a:ec:31:01:a8:db:02:1c:da:97:8c:9d:
63:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:18:DD:A3:7D:36:92:80:C0:07:35:AD:47:4F:DB:31:41:49:E2
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:33:c1:9b:1f:3e:24:33:a3:00:19:6c:6c:66:4d:fd:18:c2:
99:6f:be:a8:c4:26:f7:92:b1:82:32:9b:e4:0b:28:f3:a2:ea:
08:ee:4c:71:45:88:cf:a3:37:d7:c3:eb:87:1e:ec:84:d0:c2:
80:b6:b6:e5:43:2e:27:cb:e6:da:18:41:8a:2d:cd:26:9a:c1:
f1:0b:d6:f2:c1:c0:54:f3:31:61:da:2a:cd:47:76:70:ee:8e:
35:00:3a:78:c4:c5:7b:e1:63:1f:51:f3:30:f1:de:92:25:db:
df:6d:4f:a4:1b:7c:45:e6:58:a3:ff:71:b4:17:34:83:7c:82:
64:32:39:2d:97:3d:d1:7d:55:f6:a2:fe:6c:a0:cc:f8:09:b4:
3f:c4:21:78:d8:c1:48:32:7c:6a:ca:69:ef:73:a2:b8:66:3b:
f8:34:84:87:77:aa:5d:a4:75:78:14:2f:e8:2f:e1:66:1c:ce:
e6:2e:77:41:4d:79:3e:c7:42:49:5e:f3:ca:40:94:7b:59:e3:
05:5f:e5:94:4f:0f:e8:3a:c2:fa:39:80:ee:26:c1:fe:7c:93:
0c:91:b4:1d:fd:8d:58:00:e4:a1:55:c3:c2:fb:0d:1d:95:e7:
b3:8a:b2:0d:f5:e5:aa:a4:99:0a:5e:8f:d3:47:e0:fe:e2:ca:
60:c5:2e:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaw19TA/uy7VvsY510x4evrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl
MmJmZTIwHhcNMjUwNTA4MTcwMDU2WhcNMjUwNTA5MTcwMDU2WjAzMTEwLwYDVQQD
EyhkZWRhMThkZGEzN2QzNjkyODBjMDA3MzVhZDQ3NGZkYjMxNDE0OWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5URq/97vgNGDL4Na7/OSR7TNj6w
X+vLxDsGO4QRCdf/02mbSOUyMLF4QPRKgRangZkmokCRWMM0uzlhmivnPxg5SWsW
yV2bPpiU7Pksq4s1w98ke89XY7+T+ia35bUOwFnNI4pRF8ydK+WQsWleAU8cCzhx
EJDed0ee09ZPbvYXR8tUHLth5Gn5zPzeykRweMMm5Gep7Oc9uUKoQvxRQ4MycayN
dpqqiOdMeArmBH1oRrMyLTg8xbV/2y2oDY+68JVrFQ5xYkO99u/Pf9ZWpJLhbCuF
q0IzM43RNgLxLDQM9ZkU9PHN8kBtPgTHEFnrgKN67DEBqNsCHNqXjJ1jVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7aGN2jfTaSgMAHNa1HT9sxQUniMB8GA1UdIwQY
MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt
ODVhNTM0ZjE4MGZkLzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk
LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYTPBmx8+
JDOjABlsbGZN/RjCmW++qMQm95KxgjKb5Aso86LqCO5McUWIz6M318Prhx7shNDC
gLa25UMuJ8vm2hhBii3NJprB8QvW8sHAVPMxYdoqzUd2cO6ONQA6eMTFe+FjH1Hz
MPHekiXb321PpBt8ReZYo/9xtBc0g3yCZDI5LZc90X1V9qL+bKDM+Am0P8QheNjB
SDJ8aspp73OiuGY7+DSEh3eqXaR1eBQv6C/hZhzO5i53QU15PsdCSV7zykCUe1nj
BV/llE8P6DrC+jmA7ibB/nyTDJG0Hf2NWADkoVXDwvsNHZXns4qyDfXlqqSZCl6P
00fg/uLKYMUuFQ==
-----END CERTIFICATE-----
Generated at Thu May 8 22:24:53 2025 by rpki-client