Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
File: KR2Dw_S4d899CEy1MMSp42_PetA.mft (raw, json)
Hash identifier: pqWe4Ets0mmRGhDeubSCl1L9XPeFCWOrHAfVzbw2YTg=
Subject key identifier: BE:61:73:15:AA:A1:44:7A:AA:61:8F:4B:C3:49:0C:DE:0B:BC:A7:C9
Authority key identifier: 29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
Certificate issuer: /CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Certificate serial: 0196C1CB2152404DDD414ADF2C3692DA77C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
Manifest number: 1244
Signing time: Mon 12 May 2025 00:00:36 +0000
Manifest this update: Mon 12 May 2025 00:00:36 +0000
Manifest next update: Tue 13 May 2025 00:00:36 +0000
Files and hashes: 1: KR2Dw_S4d899CEy1MMSp42_PetA.crl (hash: OFjebkFyr9m+V1lUb/7ZQhZd3zdk2IkCjE8ahjA96jc=)
2: UtENKEhEm8aI0Ou7bKpM_GJZgfw.roa (hash: uJUKEvtya4FeDlxGJPwjMFWIfPRKUsKW7PNJHjdDHAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 00:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:cb:21:52:40:4d:dd:41:4a:df:2c:36:92:da:77:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291d83c3f4b877cf7d084cb530c4a9e36fcf7ad0
Validity
Not Before: May 12 00:00:36 2025 GMT
Not After : May 13 00:00:36 2025 GMT
Subject: CN=be617315aaa1447aaa618f4bc3490cde0bbca7c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7d:af:17:3f:42:ff:d4:47:96:d3:e4:68:9b:
3a:d8:1f:8b:87:e8:78:2e:67:3a:68:74:17:97:5b:
fb:c0:f4:a4:50:31:21:46:06:6e:77:ab:7e:95:ac:
b3:65:df:35:e1:b6:4d:3c:12:9c:c7:fb:43:9b:68:
bf:da:aa:ca:f5:3b:59:c4:2b:37:10:68:4a:a9:b9:
3c:4f:7b:2c:02:46:0f:0a:4e:79:d5:92:be:5e:4a:
bc:14:58:50:94:a7:7d:20:46:b8:44:56:17:68:72:
40:72:5d:6c:6f:b8:21:3f:76:47:73:6a:d5:7b:5b:
e5:53:78:dc:5e:53:bc:be:4a:0d:be:b8:a9:c6:9a:
d3:49:76:e4:a2:a5:7b:d7:e9:ba:41:ca:aa:28:5b:
21:02:20:99:66:b7:80:e7:87:8c:a4:ad:e2:9f:9c:
af:b6:1f:69:0c:c5:4c:58:98:22:e1:61:81:ba:1e:
e4:37:ef:b3:64:d8:01:24:ef:9b:21:01:8b:29:c9:
ed:2e:34:33:bd:b0:bb:bc:0f:9e:60:84:ad:c6:43:
e9:67:d4:f7:28:44:32:09:cc:c6:26:79:11:ba:bd:
1c:c3:ad:3d:fb:0b:82:99:d7:89:81:81:ba:cc:09:
95:06:63:89:0b:94:b5:ca:6b:71:21:65:a8:68:29:
12:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:61:73:15:AA:A1:44:7A:AA:61:8F:4B:C3:49:0C:DE:0B:BC:A7:C9
X509v3 Authority Key Identifier:
keyid:29:1D:83:C3:F4:B8:77:CF:7D:08:4C:B5:30:C4:A9:E3:6F:CF:7A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR2Dw_S4d899CEy1MMSp42_PetA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/594569-6f18-460a-a196-ffcd477349fc/1/KR2Dw_S4d899CEy1MMSp42_PetA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:7a:11:52:84:4e:32:28:1d:a6:0b:ad:6c:47:91:1f:28:a4:
dd:bb:5b:cb:e7:dc:57:3a:30:af:90:da:ef:2a:f1:ce:42:1e:
1d:2f:70:b1:4c:e5:9e:bd:b0:ad:b7:78:c3:9b:53:28:7f:a2:
11:98:81:4f:3f:9a:2b:29:9c:b4:ca:11:36:d1:e8:ac:40:2a:
ad:ce:36:6f:17:f0:7f:5f:fc:18:29:d8:29:77:92:b8:09:a8:
76:be:1a:c4:d0:d9:61:d1:d0:a9:50:13:2f:28:80:9e:1e:1d:
3d:a3:12:71:9d:48:ce:c0:64:fb:36:33:45:01:d2:36:b8:1c:
01:5e:a8:3a:ae:6a:d5:1c:97:42:8b:87:27:49:82:a2:be:56:
a4:db:2c:d3:66:c8:33:d4:b0:13:cf:5e:9a:4c:4e:e5:7f:a4:
c9:ab:3d:48:f1:44:36:53:5f:d4:86:67:8d:d2:22:19:27:85:
73:1d:1d:e1:ca:4f:27:ad:3c:af:9d:7d:f4:52:aa:fa:c7:78:
9e:b4:cf:09:39:50:10:ba:1d:ab:d1:75:0a:b5:33:e6:8c:06:
77:6a:44:06:c7:1c:67:67:e9:a6:cb:c7:0a:ab:07:0e:ac:76:
5d:1b:8c:06:f5:1a:5c:1d:96:38:25:da:a7:7c:ed:b8:b6:11:
95:86:05:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbByyFSQE3dQUrfLDaS2nfFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWQ4M2MzZjRiODc3Y2Y3ZDA4NGNiNTMwYzRhOWUzNmZj
ZjdhZDAwHhcNMjUwNTEyMDAwMDM2WhcNMjUwNTEzMDAwMDM2WjAzMTEwLwYDVQQD
EyhiZTYxNzMxNWFhYTE0NDdhYWE2MThmNGJjMzQ5MGNkZTBiYmNhN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq32vFz9C/9RHltPkaJs62B+Lh+h4
Lmc6aHQXl1v7wPSkUDEhRgZud6t+layzZd814bZNPBKcx/tDm2i/2qrK9TtZxCs3
EGhKqbk8T3ssAkYPCk551ZK+Xkq8FFhQlKd9IEa4RFYXaHJAcl1sb7ghP3ZHc2rV
e1vlU3jcXlO8vkoNvripxprTSXbkoqV71+m6QcqqKFshAiCZZreA54eMpK3in5yv
th9pDMVMWJgi4WGBuh7kN++zZNgBJO+bIQGLKcntLjQzvbC7vA+eYIStxkPpZ9T3
KEQyCczGJnkRur0cw609+wuCmdeJgYG6zAmVBmOJC5S1ymtxIWWoaCkSIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5hcxWqoUR6qmGPS8NJDN4LvKfJMB8GA1UdIwQY
MBaAFCkdg8P0uHfPfQhMtTDEqeNvz3rQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYt
ZmZjZDQ3NzM0OWZjLzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81OTQ1NjktNmYxOC00NjBhLWExOTYtZmZjZDQ3NzM0OWZj
LzEvS1IyRHdfUzRkODk5Q0V5MU1NU3A0Ml9QZXRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs3oRUoRO
MigdpgutbEeRHyik3btby+fcVzowr5Da7yrxzkIeHS9wsUzlnr2wrbd4w5tTKH+i
EZiBTz+aKymctMoRNtHorEAqrc42bxfwf1/8GCnYKXeSuAmodr4axNDZYdHQqVAT
LyiAnh4dPaMScZ1IzsBk+zYzRQHSNrgcAV6oOq5q1RyXQouHJ0mCor5WpNss02bI
M9SwE89emkxO5X+kyas9SPFENlNf1IZnjdIiGSeFcx0d4cpPJ608r5199FKq+sd4
nrTPCTlQELodq9F1CrUz5owGd2pEBsccZ2fppsvHCqsHDqx2XRuMBvUaXB2WOCXa
p3ztuLYRlYYFOQ==
-----END CERTIFICATE-----
Generated at Mon May 12 04:29:34 2025 by rpki-client