
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
File: kHpcTqRTtGyByxNtkrkwmxRsPkU.mft (raw, json)
Hash identifier: JgXN16CluX4264C7rY4yuuH17TusD38/KyLUJ6HEcbw=
Subject key identifier: FF:76:34:4C:5C:5F:63:23:D4:A2:3D:2C:B4:6C:81:CC:D4:21:66:1F
Authority key identifier: 90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
Certificate issuer: /CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Certificate serial: 0196BB9225DA4E1A44A3948ABD9756FF703C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
Manifest number: 083E
Signing time: Sat 10 May 2025 19:00:39 +0000
Manifest this update: Sat 10 May 2025 19:00:39 +0000
Manifest next update: Sun 11 May 2025 19:00:39 +0000
Files and hashes: 1: kHpcTqRTtGyByxNtkrkwmxRsPkU.crl (hash: qF3tKM5iVMwNIQwhrl4ZYqieQIt6wVjjzuHTNhQn+7A=)
2: y00kCOm4x0sTFaBDOqD5L5fES6Y.roa (hash: G4M+BrvsrjKhmQGsYy0izNdpM9hsyiGzIDC7Si8ke98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 19:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:92:25:da:4e:1a:44:a3:94:8a:bd:97:56:ff:70:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=907a5c4ea453b46c81cb136d92b9309b146c3e45
Validity
Not Before: May 10 19:00:39 2025 GMT
Not After : May 11 19:00:39 2025 GMT
Subject: CN=ff76344c5c5f6323d4a23d2cb46c81ccd421661f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:05:21:18:c9:57:84:68:cd:53:47:9e:39:38:
ca:cc:8b:d6:66:52:3d:b5:dc:b1:f3:00:03:cb:13:
e6:c2:15:52:dc:1b:9c:8b:24:bb:93:4d:db:f7:67:
cb:d5:15:03:ed:50:3f:4e:e4:4e:3a:81:d9:06:03:
65:a4:67:dc:00:e8:94:26:d4:67:dd:fb:42:9e:68:
1b:62:39:cf:9c:ce:9e:f9:45:a6:f7:cf:ea:2c:98:
12:4f:35:d6:a0:b8:24:87:db:da:80:d6:fd:18:e8:
42:e8:9a:21:f6:be:d1:a7:e8:db:ff:65:b4:30:5d:
54:cb:cd:62:f0:8f:91:02:49:25:5e:26:91:41:f3:
57:94:b1:d2:21:8e:a0:66:aa:e7:15:45:e6:6a:1f:
25:a3:0d:94:3a:82:0a:19:85:a7:f4:83:a1:97:ea:
46:7b:b8:ce:d0:49:21:0a:d2:bf:0e:a4:7f:9e:14:
72:8c:2a:19:5b:ba:82:11:68:f2:fc:28:3d:63:a9:
8d:fd:1a:a2:42:b0:b2:4a:c0:a3:aa:ec:39:64:07:
1c:f4:0d:fd:41:4f:9e:19:f9:44:a6:d9:39:3e:24:
6a:9e:d8:33:d3:43:8b:7d:dd:b6:b5:44:bb:dc:a4:
05:45:7d:4d:fe:05:cf:36:f7:43:5a:9c:b2:34:30:
14:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:76:34:4C:5C:5F:63:23:D4:A2:3D:2C:B4:6C:81:CC:D4:21:66:1F
X509v3 Authority Key Identifier:
keyid:90:7A:5C:4E:A4:53:B4:6C:81:CB:13:6D:92:B9:30:9B:14:6C:3E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kHpcTqRTtGyByxNtkrkwmxRsPkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/869f62-7a2e-4175-9202-b2a2b8b847b9/1/kHpcTqRTtGyByxNtkrkwmxRsPkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cd:cb:d4:96:aa:d4:ae:06:a8:ea:99:74:5b:ed:dd:4c:c8:
7a:0b:63:6f:b3:a4:d9:fd:d8:e4:0d:37:3e:7f:c5:0c:4d:e3:
b6:0c:b3:a1:43:a1:88:50:63:82:fb:4d:c1:45:6e:bf:e7:4f:
7e:c1:2e:ea:8b:bd:0c:e5:2f:39:8c:61:9b:6a:2e:69:ec:d9:
ec:b7:9f:1b:bb:75:4a:29:f0:ea:bd:e9:83:ad:ca:3e:e0:d7:
14:98:a8:38:96:31:ba:39:2b:f3:c4:ed:6c:13:e7:32:bf:c8:
12:14:21:c5:90:d9:b7:a0:7b:9c:f2:b6:22:d1:bb:52:b5:2f:
57:31:ea:5f:0d:d9:a8:26:f8:ee:9a:c9:06:33:a3:d5:8e:a2:
e8:17:9c:23:13:fe:de:a8:85:63:d8:9c:64:f5:d0:37:f9:5e:
71:4f:ca:cd:d3:fa:0b:b6:11:29:25:6c:41:af:81:31:cc:0d:
90:7d:53:f4:89:66:ec:af:0f:54:39:a4:33:4e:90:11:ed:e5:
68:79:8d:d4:95:93:bd:38:e7:e0:0c:93:30:23:50:cd:85:0d:
56:cd:de:cc:d8:b1:01:81:9e:b0:fe:b6:5f:f0:20:df:a3:71:
10:91:2e:85:8d:02:d6:35:43:11:a8:d1:68:19:4a:11:93:9f:
d6:42:43:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7kiXaThpEo5SKvZdW/3A8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwN2E1YzRlYTQ1M2I0NmM4MWNiMTM2ZDkyYjkzMDliMTQ2
YzNlNDUwHhcNMjUwNTEwMTkwMDM5WhcNMjUwNTExMTkwMDM5WjAzMTEwLwYDVQQD
EyhmZjc2MzQ0YzVjNWY2MzIzZDRhMjNkMmNiNDZjODFjY2Q0MjE2NjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswUhGMlXhGjNU0eeOTjKzIvWZlI9
tdyx8wADyxPmwhVS3BuciyS7k03b92fL1RUD7VA/TuROOoHZBgNlpGfcAOiUJtRn
3ftCnmgbYjnPnM6e+UWm98/qLJgSTzXWoLgkh9vagNb9GOhC6Joh9r7Rp+jb/2W0
MF1Uy81i8I+RAkklXiaRQfNXlLHSIY6gZqrnFUXmah8low2UOoIKGYWn9IOhl+pG
e7jO0EkhCtK/DqR/nhRyjCoZW7qCEWjy/Cg9Y6mN/RqiQrCySsCjquw5ZAcc9A39
QU+eGflEptk5PiRqntgz00OLfd22tUS73KQFRX1N/gXPNvdDWpyyNDAUNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP92NExcX2Mj1KI9LLRsgczUIWYfMB8GA1UdIwQY
MBaAFJB6XE6kU7RsgcsTbZK5MJsUbD5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDIt
YjJhMmI4Yjg0N2I5LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS84NjlmNjItN2EyZS00MTc1LTkyMDItYjJhMmI4Yjg0N2I5
LzEva0hwY1RxUlR0R3lCeXhOdGtya3dteFJzUGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGc3L1Jaq
1K4GqOqZdFvt3UzIegtjb7Ok2f3Y5A03Pn/FDE3jtgyzoUOhiFBjgvtNwUVuv+dP
fsEu6ou9DOUvOYxhm2ouaezZ7LefG7t1Sinw6r3pg63KPuDXFJioOJYxujkr88Tt
bBPnMr/IEhQhxZDZt6B7nPK2ItG7UrUvVzHqXw3ZqCb47prJBjOj1Y6i6BecIxP+
3qiFY9icZPXQN/lecU/KzdP6C7YRKSVsQa+BMcwNkH1T9Ilm7K8PVDmkM06QEe3l
aHmN1JWTvTjn4AyTMCNQzYUNVs3ezNixAYGesP62X/Ag36NxEJEuhY0C1jVDEajR
aBlKEZOf1kJD7g==
-----END CERTIFICATE-----
Generated at Sun May 11 01:44:44 2025 by rpki-client