Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
File: KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft (raw, json)
Hash identifier: YCnUK3r72RoRaW7rsWcIvGzSPha+U5cOJ4gYMwbzHVY=
Subject key identifier: DB:2A:FA:A7:60:9C:E5:02:F4:F0:44:F7:9F:E6:9C:51:89:EB:2D:06
Authority key identifier: 2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
Certificate issuer: /CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Certificate serial: 0196C45E7292055B27AB0EBEAE7A914DD368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
Manifest number: 06C8
Signing time: Mon 12 May 2025 12:00:46 +0000
Manifest this update: Mon 12 May 2025 12:00:46 +0000
Manifest next update: Tue 13 May 2025 12:00:46 +0000
Files and hashes: 1: KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl (hash: KfVNyiQre9ZyZJYHvBp7R9kKOAlzQ+0enIMqrmJB0ts=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:5e:72:92:05:5b:27:ab:0e:be:ae:7a:91:4d:d3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ac378b63bca487c32e8ce812f4f85d7c6ef8766
Validity
Not Before: May 12 12:00:46 2025 GMT
Not After : May 13 12:00:46 2025 GMT
Subject: CN=db2afaa7609ce502f4f044f79fe69c5189eb2d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:58:c1:72:11:99:ab:19:a1:81:c0:49:a3:
6f:4e:f3:6e:2b:e7:94:7f:e7:00:7d:7a:be:36:45:
5e:df:e9:35:97:4d:ba:77:f6:ec:0b:fd:66:05:3e:
c9:74:30:be:98:0f:d7:f1:2f:41:77:e3:cf:7d:17:
d5:ef:56:72:c2:8a:5f:dc:6b:79:50:5b:39:4e:b3:
2d:58:b9:2f:69:e6:26:ed:09:5b:27:ba:80:b9:8f:
4f:c2:be:1e:56:26:01:ce:5d:6c:f9:43:59:3d:84:
e2:23:f5:40:ba:6a:25:32:4c:7b:d3:ec:aa:7d:73:
36:4a:ec:2e:c4:77:39:9d:b9:e3:8f:bb:eb:43:4a:
3d:b3:54:bf:fb:48:70:54:9d:e4:ba:f6:7c:6d:07:
93:f5:20:e1:95:cb:7d:82:68:e1:fb:78:c2:75:b2:
d9:28:e7:c7:c0:36:fe:bf:d4:01:58:4b:b0:44:74:
33:32:96:4c:51:44:3f:4a:4f:21:c6:ca:05:3e:63:
0c:51:d5:d8:ad:92:f1:ce:6e:bc:2c:93:98:97:d3:
6c:77:27:5c:23:99:68:b1:f2:39:e0:21:04:ce:42:
e5:b8:0d:0e:c1:73:79:63:f1:c2:59:0f:8b:6b:94:
04:0a:98:95:5d:ae:d2:cb:e7:7f:9a:30:66:3d:57:
a1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:2A:FA:A7:60:9C:E5:02:F4:F0:44:F7:9F:E6:9C:51:89:EB:2D:06
X509v3 Authority Key Identifier:
keyid:2A:C3:78:B6:3B:CA:48:7C:32:E8:CE:81:2F:4F:85:D7:C6:EF:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsN4tjvKSHwy6M6BL0-F18bvh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b95866-7096-4bad-b509-077d52eab70d/1/KsN4tjvKSHwy6M6BL0-F18bvh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1a:1f:56:79:88:24:64:b6:f2:e1:07:66:03:d0:e3:fa:43:
ea:45:bc:65:30:56:c7:d7:db:37:f5:25:a0:80:69:8a:6d:10:
9b:e7:ff:c0:18:01:29:2b:e5:a4:d3:73:f5:4b:49:6c:0a:b5:
7b:ac:6e:82:53:f7:c9:1d:08:0c:8a:db:b1:af:45:e8:b3:d2:
4e:81:6c:e0:4a:35:99:83:12:1b:4b:a9:ed:ae:71:a0:a7:79:
47:dd:e2:55:82:1e:2e:15:79:47:80:98:fa:7e:c5:df:29:48:
4d:62:77:52:4c:03:75:4e:6d:26:2d:50:07:ef:c2:3d:f8:fc:
fa:12:24:90:d7:30:72:8e:bd:38:6a:05:cb:90:73:25:08:42:
b9:3e:46:0f:6e:48:84:3c:dc:6f:6e:d7:3c:ab:31:77:ab:db:
17:4f:60:3f:bd:c2:65:f9:b6:54:dc:5f:4a:62:59:6a:98:03:
0b:a1:93:64:30:ab:24:e6:a3:ad:4e:98:41:cf:44:fc:3d:ee:
c7:31:5b:63:f5:65:d5:a5:76:8f:21:07:c0:ae:6a:ad:07:2e:
e6:56:f5:22:6f:b3:b1:e3:29:51:c2:96:a2:b1:12:ef:fb:84:
4c:50:5a:5b:39:98:33:c1:a9:7c:15:fd:ae:db:08:49:61:b9:
7c:2a:70:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEXnKSBVsnqw6+rnqRTdNoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhYzM3OGI2M2JjYTQ4N2MzMmU4Y2U4MTJmNGY4NWQ3YzZl
Zjg3NjYwHhcNMjUwNTEyMTIwMDQ2WhcNMjUwNTEzMTIwMDQ2WjAzMTEwLwYDVQQD
EyhkYjJhZmFhNzYwOWNlNTAyZjRmMDQ0Zjc5ZmU2OWM1MTg5ZWIyZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23NYwXIRmasZoYHASaNvTvNuK+eU
f+cAfXq+NkVe3+k1l026d/bsC/1mBT7JdDC+mA/X8S9Bd+PPfRfV71Zywopf3Gt5
UFs5TrMtWLkvaeYm7QlbJ7qAuY9Pwr4eViYBzl1s+UNZPYTiI/VAumolMkx70+yq
fXM2SuwuxHc5nbnjj7vrQ0o9s1S/+0hwVJ3kuvZ8bQeT9SDhlct9gmjh+3jCdbLZ
KOfHwDb+v9QBWEuwRHQzMpZMUUQ/Sk8hxsoFPmMMUdXYrZLxzm68LJOYl9Nsdydc
I5losfI54CEEzkLluA0OwXN5Y/HCWQ+La5QECpiVXa7Sy+d/mjBmPVehcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsq+qdgnOUC9PBE95/mnFGJ6y0GMB8GA1UdIwQY
MBaAFCrDeLY7ykh8MujOgS9PhdfG74dmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3NONHRqdktTSHd5Nk02QkwwLUYxOGJ2aDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9iOTU4NjYtNzA5Ni00YmFkLWI1MDkt
MDc3ZDUyZWFiNzBkLzEvS3NONHRqdktTSHd5Nk02QkwwLUYxOGJ2aDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9iOTU4NjYtNzA5Ni00YmFkLWI1MDktMDc3ZDUyZWFiNzBk
LzEvS3NONHRqdktTSHd5Nk02QkwwLUYxOGJ2aDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRofVnmI
JGS28uEHZgPQ4/pD6kW8ZTBWx9fbN/UloIBpim0Qm+f/wBgBKSvlpNNz9UtJbAq1
e6xuglP3yR0IDIrbsa9F6LPSToFs4Eo1mYMSG0up7a5xoKd5R93iVYIeLhV5R4CY
+n7F3ylITWJ3UkwDdU5tJi1QB+/CPfj8+hIkkNcwco69OGoFy5BzJQhCuT5GD25I
hDzcb27XPKsxd6vbF09gP73CZfm2VNxfSmJZapgDC6GTZDCrJOajrU6YQc9E/D3u
xzFbY/Vl1aV2jyEHwK5qrQcu5lb1Im+zseMpUcKWorES7/uETFBaWzmYM8GpfBX9
rtsISWG5fCpwZQ==
-----END CERTIFICATE-----
Generated at Mon May 12 19:55:44 2025 by rpki-client