Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: I3vrl5sIJooe52aUdPavBlIVrTB+T59kyutuL3cynCQ=
Subject key identifier: FB:76:40:8C:F8:1F:81:47:4C:CF:E5:4A:0C:34:EB:1E:BE:ED:CF:39
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 0196C12676D739143CB990730FD2E5E94131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 12EF
Signing time: Sun 11 May 2025 21:00:45 +0000
Manifest this update: Sun 11 May 2025 21:00:45 +0000
Manifest next update: Mon 12 May 2025 21:00:45 +0000
Files and hashes: 1: ELPDypl8AO7yu9Qb_T04CJHIAmc.roa (hash: uMxQfCf54KpZ6vXVJrK4LBRwbGjKGq0Ym1Kz/m5o7Z0=)
2: h7jotg4RS-yoMxmLNwMHtqMIvTo.roa (hash: 0RvIPvSKfKKYiob3W8lnsFljStCAR/IAjli0EYtRtIQ=)
3: iRTljilS88fdbTnqXefNcD2KdQw.roa (hash: SYC9aJR60HZt276fl/3G18s2lWN51c7daVgQyb0yCnk=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: 1PVOu2BBr2MkFcuquccYLReDV4exvepJ3T4jRtbQnfM=)
5: vEwnUG1RajWkcLEBWJPnIiLLgBM.roa (hash: sSHl9JnRfzO2J5TGzVLlmHvYGgd6KK351LDclJH6UZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c1:26:76:d7:39:14:3c:b9:90:73:0f:d2:e5:e9:41:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: May 11 21:00:45 2025 GMT
Not After : May 12 21:00:45 2025 GMT
Subject: CN=fb76408cf81f81474ccfe54a0c34eb1ebeedcf39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:22:2b:21:15:3a:6c:92:ab:98:6c:3f:a2:7c:
a1:7f:1c:7a:dc:62:6e:37:85:9d:49:b9:38:89:01:
64:1c:30:ea:36:4e:57:e5:78:47:15:dc:ba:af:86:
ad:bf:8a:06:97:56:b6:7d:62:d9:37:0a:5b:d3:77:
02:84:83:47:a3:4b:be:7f:06:97:75:4c:b9:0c:1d:
22:a7:b6:16:95:bb:08:9e:fe:91:31:a4:3c:10:1d:
07:4f:91:f5:27:82:f7:45:67:ec:ed:86:cf:42:49:
21:bd:4a:5f:44:b2:80:56:fc:6b:09:77:aa:97:70:
61:c4:cc:e8:c8:f5:81:16:a2:c3:66:48:d3:2b:a1:
aa:91:97:f0:f2:55:64:4f:2e:a7:cf:16:19:af:a7:
42:bf:2e:60:74:3b:cb:b3:5f:30:58:f9:8c:ec:37:
a4:31:a4:98:94:d9:f4:1c:ef:4f:65:6b:d1:41:10:
ec:c2:be:18:01:87:b1:d5:18:17:7d:57:6d:ac:c3:
f3:9f:50:e8:8b:23:b8:92:54:37:10:35:2e:ee:bf:
56:fe:16:ef:e7:c5:ee:99:0c:95:14:6c:b7:f5:35:
bf:19:19:f2:d2:89:f4:d6:d5:de:7b:13:0a:5c:bb:
4e:d4:d3:73:e9:af:a8:17:d0:bc:6d:1a:31:3e:8f:
73:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:40:8C:F8:1F:81:47:4C:CF:E5:4A:0C:34:EB:1E:BE:ED:CF:39
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:dd:a9:e8:42:51:69:03:67:26:87:ef:14:eb:db:e6:6f:72:
dd:46:62:d9:0a:87:29:7c:1c:ba:e6:f5:b0:a3:31:d8:7a:61:
90:8b:c5:5b:8d:e2:11:37:85:20:e0:5f:3a:3f:b4:2e:8f:f7:
c1:40:71:e4:6a:fc:dd:7d:00:b2:6d:64:25:0b:18:e4:49:6e:
d6:00:e0:c9:30:76:35:58:d7:cb:ae:d0:14:c7:69:a8:bd:7b:
a8:2d:44:15:61:f8:11:db:f1:43:78:0a:62:dd:b6:6b:dc:43:
04:d6:a4:cd:73:ca:ff:59:2b:7a:a6:a8:04:1b:67:e1:d3:e5:
84:1c:26:13:5e:eb:4e:f3:22:b2:2c:58:2b:0b:a0:10:96:17:
34:64:6a:94:ac:bd:3f:58:69:dd:f3:de:91:84:f9:44:60:31:
3d:83:0f:d5:eb:c5:bf:98:7d:30:3d:f8:1f:c3:c3:4c:f9:e6:
c5:a9:ae:e6:45:91:82:47:4c:d6:28:68:16:30:71:15:7a:f2:
7a:5d:99:49:69:b9:cb:5c:16:75:d5:26:40:8b:89:46:14:3a:
03:71:e1:4e:8d:25:21:2e:23:2d:18:0f:be:61:f3:88:0b:36:
1f:4a:72:b0:35:76:6c:49:08:f4:53:8d:86:c2:8c:40:0a:f6:
ba:e2:2d:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbBJnbXORQ8uZBzD9Ll6UExMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz
Y2UxYmMwHhcNMjUwNTExMjEwMDQ1WhcNMjUwNTEyMjEwMDQ1WjAzMTEwLwYDVQQD
EyhmYjc2NDA4Y2Y4MWY4MTQ3NGNjZmU1NGEwYzM0ZWIxZWJlZWRjZjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyIrIRU6bJKrmGw/onyhfxx63GJu
N4WdSbk4iQFkHDDqNk5X5XhHFdy6r4atv4oGl1a2fWLZNwpb03cChINHo0u+fwaX
dUy5DB0ip7YWlbsInv6RMaQ8EB0HT5H1J4L3RWfs7YbPQkkhvUpfRLKAVvxrCXeq
l3BhxMzoyPWBFqLDZkjTK6GqkZfw8lVkTy6nzxYZr6dCvy5gdDvLs18wWPmM7Dek
MaSYlNn0HO9PZWvRQRDswr4YAYex1RgXfVdtrMPzn1DoiyO4klQ3EDUu7r9W/hbv
58XumQyVFGy39TW/GRny0on01tXeexMKXLtO1NNz6a+oF9C8bRoxPo9zlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt2QIz4H4FHTM/lSgw06x6+7c85MB8GA1UdIwQY
MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct
MmFkMTk1MjY0YzcyLzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy
LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu92p6EJR
aQNnJofvFOvb5m9y3UZi2QqHKXwcuub1sKMx2HphkIvFW43iETeFIOBfOj+0Lo/3
wUBx5Gr83X0Asm1kJQsY5Elu1gDgyTB2NVjXy67QFMdpqL17qC1EFWH4EdvxQ3gK
Yt22a9xDBNakzXPK/1kreqaoBBtn4dPlhBwmE17rTvMisixYKwugEJYXNGRqlKy9
P1hp3fPekYT5RGAxPYMP1evFv5h9MD34H8PDTPnmxamu5kWRgkdM1ihoFjBxFXry
el2ZSWm5y1wWddUmQIuJRhQ6A3HhTo0lIS4jLRgPvmHziAs2H0pysDV2bEkI9FON
hsKMQAr2uuItcQ==
-----END CERTIFICATE-----
Generated at Sun May 11 22:59:51 2025 by rpki-client