Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
File: KjbWeMS7ysJK5r6pokyZXEjVk_A.mft (raw, json)
Hash identifier: +kY1jx4StXz75ku/m4VqGvncabjd7F+/0HG6e34ISWg=
Subject key identifier: 41:6A:7D:F0:09:D3:3A:DD:69:0B:9D:92:96:44:FD:76:29:A6:AD:48
Authority key identifier: 2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
Certificate issuer: /CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Certificate serial: 01969E2CA4567D97C5375B5FEE8BE7B42606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
Manifest number: 1526
Signing time: Mon 05 May 2025 02:00:47 +0000
Manifest this update: Mon 05 May 2025 02:00:47 +0000
Manifest next update: Tue 06 May 2025 02:00:47 +0000
Files and hashes: 1: KjbWeMS7ysJK5r6pokyZXEjVk_A.crl (hash: YDfeyB1MKRWMbeWQXJnfM0zHxCDV7ZwP+9OMtjKFdAM=)
2: zK1LIZGeSSnaNXNW0qcn6w1MLCU.roa (hash: e8RwpvlrpxWqEOoeavX1Cyz9aTwhsZ8GdJGcHGa5+Eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:a4:56:7d:97:c5:37:5b:5f:ee:8b:e7:b4:26:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a36d678c4bbcac24ae6bea9a24c995c48d593f0
Validity
Not Before: May 5 02:00:47 2025 GMT
Not After : May 6 02:00:47 2025 GMT
Subject: CN=416a7df009d33add690b9d929644fd7629a6ad48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:02:75:dd:c9:09:d0:ea:ae:12:3a:e7:24:11:
e7:21:34:03:1b:97:d0:33:c7:3c:ff:2c:0d:1e:76:
63:69:c8:1c:7c:80:53:28:fe:43:49:1b:61:70:98:
6a:0c:3f:ee:7e:fe:49:6e:79:5b:43:91:a4:d0:30:
ab:1f:37:92:99:6f:a1:1a:ea:cb:11:76:9d:23:28:
19:8e:7d:dc:c1:ea:7c:53:4e:1b:81:ce:ba:71:48:
4d:df:56:4b:d2:ac:47:08:78:8c:2e:3c:02:b4:12:
72:ac:04:f9:31:11:77:d5:7a:db:91:f2:a3:d3:0f:
cd:c4:7e:73:94:5b:18:76:ad:38:14:56:65:c8:c6:
f0:d3:16:f3:31:d4:c9:70:57:b6:ba:ac:4c:b3:8a:
21:e6:4b:21:94:8f:33:bb:03:53:9b:91:b0:31:52:
4b:19:8c:0d:1c:eb:da:8b:cb:98:1a:44:50:f1:20:
23:fe:15:26:33:f4:c3:72:72:3c:75:58:a5:fa:16:
5b:f5:50:e6:a7:03:28:d3:14:33:2e:ab:79:15:23:
5f:69:3e:08:be:89:5c:92:b9:7d:58:5d:08:55:bb:
01:23:cb:5d:6e:f4:37:58:ef:93:bf:7a:85:f6:75:
d9:2d:e2:9c:3d:17:ca:67:a1:05:c2:7e:a0:77:35:
32:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:7D:F0:09:D3:3A:DD:69:0B:9D:92:96:44:FD:76:29:A6:AD:48
X509v3 Authority Key Identifier:
keyid:2A:36:D6:78:C4:BB:CA:C2:4A:E6:BE:A9:A2:4C:99:5C:48:D5:93:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KjbWeMS7ysJK5r6pokyZXEjVk_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/a01fd3-a867-42c6-9a0e-df651b966b2b/1/KjbWeMS7ysJK5r6pokyZXEjVk_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:23:80:1b:a4:d0:7b:80:18:47:41:34:6b:65:07:c9:4b:15:
c1:a5:b8:a3:94:7a:2a:64:b9:3a:a4:16:86:27:fb:89:9b:c5:
48:73:2d:3f:6d:e3:b8:b8:20:0e:19:27:af:46:6c:07:e7:9e:
38:6e:46:09:de:65:9f:29:af:f5:c0:56:d1:ad:28:58:2d:f6:
5d:e2:0b:ee:06:25:30:96:94:89:07:71:70:bd:3a:46:76:85:
82:2b:65:8d:33:c7:04:98:4a:59:2b:40:16:b5:3c:9a:9f:73:
3c:0b:1e:17:21:c6:5b:6d:6a:be:d8:26:98:2a:82:c8:5b:33:
fa:dd:52:f3:dd:44:cc:21:1c:0b:76:ff:32:71:8b:32:d4:a4:
19:9c:13:ed:bf:3e:83:f7:57:fe:79:60:8b:f1:73:02:c4:7c:
2f:4b:bd:81:6c:89:a2:9c:7c:b5:ea:8f:28:3d:b9:de:4e:d3:
13:67:2f:65:40:c7:4d:f3:a8:3d:d4:8b:eb:1a:1a:35:7a:45:
b3:07:a4:92:55:74:fa:e0:b0:46:a7:96:34:e8:dd:c6:f5:46:
fe:e9:41:91:dd:27:03:e7:90:ef:12:fa:e3:0b:c7:cf:00:92:
c0:4d:c9:07:d5:26:79:e8:ac:d0:f1:52:ee:87:c3:c5:39:12:
d9:34:d0:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaeLKRWfZfFN1tf7ovntCYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhMzZkNjc4YzRiYmNhYzI0YWU2YmVhOWEyNGM5OTVjNDhk
NTkzZjAwHhcNMjUwNTA1MDIwMDQ3WhcNMjUwNTA2MDIwMDQ3WjAzMTEwLwYDVQQD
Eyg0MTZhN2RmMDA5ZDMzYWRkNjkwYjlkOTI5NjQ0ZmQ3NjI5YTZhZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwJ13ckJ0OquEjrnJBHnITQDG5fQ
M8c8/ywNHnZjacgcfIBTKP5DSRthcJhqDD/ufv5JbnlbQ5Gk0DCrHzeSmW+hGurL
EXadIygZjn3cwep8U04bgc66cUhN31ZL0qxHCHiMLjwCtBJyrAT5MRF31XrbkfKj
0w/NxH5zlFsYdq04FFZlyMbw0xbzMdTJcFe2uqxMs4oh5kshlI8zuwNTm5GwMVJL
GYwNHOvai8uYGkRQ8SAj/hUmM/TDcnI8dVil+hZb9VDmpwMo0xQzLqt5FSNfaT4I
volckrl9WF0IVbsBI8tdbvQ3WO+Tv3qF9nXZLeKcPRfKZ6EFwn6gdzUyVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFqffAJ0zrdaQudkpZE/XYppq1IMB8GA1UdIwQY
MBaAFCo21njEu8rCSua+qaJMmVxI1ZPwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUt
ZGY2NTFiOTY2YjJiLzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9hMDFmZDMtYTg2Ny00MmM2LTlhMGUtZGY2NTFiOTY2YjJi
LzEvS2piV2VNUzd5c0pLNXI2cG9reVpYRWpWa19BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgyOAG6TQ
e4AYR0E0a2UHyUsVwaW4o5R6KmS5OqQWhif7iZvFSHMtP23juLggDhknr0ZsB+ee
OG5GCd5lnymv9cBW0a0oWC32XeIL7gYlMJaUiQdxcL06RnaFgitljTPHBJhKWStA
FrU8mp9zPAseFyHGW21qvtgmmCqCyFsz+t1S891EzCEcC3b/MnGLMtSkGZwT7b8+
g/dX/nlgi/FzAsR8L0u9gWyJopx8teqPKD253k7TE2cvZUDHTfOoPdSL6xoaNXpF
swekklV0+uCwRqeWNOjdxvVG/ulBkd0nA+eQ7xL64wvHzwCSwE3JB9Umeeis0PFS
7ofDxTkS2TTQxQ==
-----END CERTIFICATE-----
Generated at Mon May 5 08:23:28 2025 by rpki-client