Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
File: KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft (raw, json)
Hash identifier: pttyhg827jjZqlIarYhc/J6QVr6Dvp5SOz2qJnNiDdc=
Subject key identifier: 8E:D0:C2:EC:46:1D:79:F7:58:DA:0F:0E:BE:33:90:8E:2A:19:E9:D9
Authority key identifier: 29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
Certificate issuer: /CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Certificate serial: 0196BCDB71B166904022763215F57A7E69E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
Manifest number: 1269
Signing time: Sun 11 May 2025 01:00:20 +0000
Manifest this update: Sun 11 May 2025 01:00:20 +0000
Manifest next update: Mon 12 May 2025 01:00:20 +0000
Files and hashes: 1: KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl (hash: zqa5+NReT85PM/0JWkhWHOgoEQLR4b6I7WzPfCaII7M=)
2: Lc2MOeHrhJYACH3DTtJSFK-up5U.roa (hash: jsqmE6guApHIEUr5xOYbDvIqn7++Rg1hChyQTZ/F2xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bc:db:71:b1:66:90:40:22:76:32:15:f5:7a:7e:69:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293f2ec74b4066ac67a8768d8e38606efcd64013
Validity
Not Before: May 11 01:00:20 2025 GMT
Not After : May 12 01:00:20 2025 GMT
Subject: CN=8ed0c2ec461d79f758da0f0ebe33908e2a19e9d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:32:ce:72:05:c9:8f:e5:7d:fb:69:4d:87:
34:da:4e:7e:5a:dc:11:79:36:62:f0:f6:ba:8b:26:
65:44:db:80:a4:20:17:00:01:ec:f0:c1:4a:c0:6d:
57:59:d7:c8:fc:63:28:9e:c9:03:f5:46:a4:28:3e:
a8:cf:fb:a1:f3:5c:bc:4f:46:ac:c5:5a:b2:87:12:
e0:9a:7b:f5:43:20:44:0b:e8:59:4c:97:b9:f9:bb:
b0:4b:ee:fb:e5:99:69:e6:d6:57:64:f2:9d:52:3f:
7b:df:08:d4:18:0d:60:91:90:ca:53:4b:cd:ba:98:
7e:51:d5:78:24:f7:09:9c:79:76:d0:5c:79:3b:a6:
d9:6e:61:d0:15:e7:cf:0c:18:7b:5b:21:79:08:76:
b6:f4:be:a3:e3:e7:be:86:84:66:7b:37:5e:b2:2b:
5c:c3:fd:5d:1b:e2:e6:97:a3:2d:9e:44:ab:08:96:
dd:79:6e:1f:6a:7a:63:49:4a:ab:95:e0:2d:15:4e:
5b:e6:bf:e9:b0:8e:06:05:43:7c:17:65:68:f2:43:
b9:ab:89:c4:17:e7:65:e5:82:88:6a:46:ea:be:76:
0c:5c:d0:6f:77:5a:45:bd:32:93:24:68:e2:67:57:
e1:43:08:2e:77:fd:a5:21:35:a6:12:3b:c7:69:4b:
af:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D0:C2:EC:46:1D:79:F7:58:DA:0F:0E:BE:33:90:8E:2A:19:E9:D9
X509v3 Authority Key Identifier:
keyid:29:3F:2E:C7:4B:40:66:AC:67:A8:76:8D:8E:38:60:6E:FC:D6:40:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT8ux0tAZqxnqHaNjjhgbvzWQBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69045a-a5b1-4e59-9717-23f2263b9bd2/1/KT8ux0tAZqxnqHaNjjhgbvzWQBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:2e:64:47:49:0b:c1:69:92:cb:3f:47:01:6e:6e:a3:16:7b:
3c:19:a5:40:be:3b:a0:9f:c2:0c:e0:65:37:de:5a:8a:15:7e:
55:93:d7:f2:79:e0:f7:de:f0:6c:93:72:85:d3:42:b2:bb:a9:
79:31:f8:c8:06:eb:8c:90:9a:36:a7:63:a5:59:4c:d4:4b:f2:
a4:4e:79:7b:42:88:36:b7:c6:f0:11:04:42:63:bb:93:ec:6d:
6b:95:fe:ed:22:66:53:12:d7:bc:cc:27:20:bf:b5:9f:09:31:
df:c4:03:5d:ef:16:b4:00:aa:5e:6c:ce:c5:d2:78:ac:bb:82:
48:58:46:b5:fc:50:16:39:55:09:cf:7b:fc:86:2d:bd:5b:0c:
e6:34:2c:49:76:53:74:86:2a:13:15:bf:34:34:c8:f3:12:4b:
42:2c:39:99:8e:04:2b:bf:ee:1b:54:61:79:ad:34:52:d6:81:
50:8d:5c:47:33:24:fc:90:a3:3d:a0:64:b0:7f:17:8b:b8:ea:
bb:54:b8:83:7b:f5:27:de:f0:4b:c2:3f:f3:7c:4f:7c:d6:18:
a3:6e:c5:66:8c:fd:88:dc:e3:9e:72:ec:c6:48:c9:f2:67:44:
9d:2c:f8:30:d9:43:f5:70:2a:64:b7:50:ad:63:3b:65:ef:0f:
8b:fe:69:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa823GxZpBAInYyFfV6fmngMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5M2YyZWM3NGI0MDY2YWM2N2E4NzY4ZDhlMzg2MDZlZmNk
NjQwMTMwHhcNMjUwNTExMDEwMDIwWhcNMjUwNTEyMDEwMDIwWjAzMTEwLwYDVQQD
Eyg4ZWQwYzJlYzQ2MWQ3OWY3NThkYTBmMGViZTMzOTA4ZTJhMTllOWQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSkyznIFyY/lfftpTYc02k5+WtwR
eTZi8Pa6iyZlRNuApCAXAAHs8MFKwG1XWdfI/GMonskD9UakKD6oz/uh81y8T0as
xVqyhxLgmnv1QyBEC+hZTJe5+buwS+775Zlp5tZXZPKdUj973wjUGA1gkZDKU0vN
uph+UdV4JPcJnHl20Fx5O6bZbmHQFefPDBh7WyF5CHa29L6j4+e+hoRmezdesitc
w/1dG+Lml6MtnkSrCJbdeW4fanpjSUqrleAtFU5b5r/psI4GBUN8F2Vo8kO5q4nE
F+dl5YKIakbqvnYMXNBvd1pFvTKTJGjiZ1fhQwgud/2lITWmEjvHaUuvJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7QwuxGHXn3WNoPDr4zkI4qGenZMB8GA1UdIwQY
MBaAFCk/LsdLQGasZ6h2jY44YG781kATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTct
MjNmMjI2M2I5YmQyLzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OTA0NWEtYTViMS00ZTU5LTk3MTctMjNmMjI2M2I5YmQy
LzEvS1Q4dXgwdEFacXhucUhhTmpqaGdidnpXUUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni5kR0kL
wWmSyz9HAW5uoxZ7PBmlQL47oJ/CDOBlN95aihV+VZPX8nng997wbJNyhdNCsrup
eTH4yAbrjJCaNqdjpVlM1EvypE55e0KINrfG8BEEQmO7k+xta5X+7SJmUxLXvMwn
IL+1nwkx38QDXe8WtACqXmzOxdJ4rLuCSFhGtfxQFjlVCc97/IYtvVsM5jQsSXZT
dIYqExW/NDTI8xJLQiw5mY4EK7/uG1Rhea00UtaBUI1cRzMk/JCjPaBksH8Xi7jq
u1S4g3v1J97wS8I/83xPfNYYo27FZoz9iNzjnnLsxkjJ8mdEnSz4MNlD9XAqZLdQ
rWM7Ze8Pi/5p0A==
-----END CERTIFICATE-----
Generated at Sun May 11 03:47:22 2025 by rpki-client