Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
File: kfWJGibPpDaiPn4f-XZki-5573c.mft (raw, json)
Hash identifier: reIS/lKtQ/skpiZasNuGhdHy453NT4YL8lGFVWgy5TM=
Subject key identifier: 4B:40:14:05:ED:D3:A7:6C:5A:DF:7E:02:01:0B:FB:25:9B:3F:DF:FB
Authority key identifier: 91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
Certificate issuer: /CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Certificate serial: 01969E9A77A78C309F8FD0745673697D4C65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
Manifest number: 1393
Signing time: Mon 05 May 2025 04:00:45 +0000
Manifest this update: Mon 05 May 2025 04:00:45 +0000
Manifest next update: Tue 06 May 2025 04:00:45 +0000
Files and hashes: 1: AwtKEHfYyxnQ1th-VlZxSnr7g6Q.roa (hash: kaMvuNz15dIgQL2M/Qvml14U3ZSUX9PuIaFhO+5H45U=)
2: DIxBuJDWRajN2G8Xp5FV5TyPSvA.roa (hash: OfQWp1njClDrdouukOkCvfJ95D6ij98TPOIuqpcwAzY=)
3: kfWJGibPpDaiPn4f-XZki-5573c.crl (hash: MpU+JmJl2y0cSlR1htSLFx+7GPbAqSERQOqJLbEZDdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:9a:77:a7:8c:30:9f:8f:d0:74:56:73:69:7d:4c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91f5891a26cfa436a23e7e1ff976648bee79ef77
Validity
Not Before: May 5 04:00:45 2025 GMT
Not After : May 6 04:00:45 2025 GMT
Subject: CN=4b401405edd3a76c5adf7e02010bfb259b3fdffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b5:1a:45:25:cc:d3:ae:6f:13:36:0c:5a:54:
c4:77:c3:48:6b:06:90:0d:d8:e0:b8:d8:62:0e:2b:
05:1d:2e:9e:19:f2:16:c1:6b:ff:72:5d:85:8b:63:
ae:9c:cd:0a:26:d8:42:b6:04:1f:4b:8d:67:6e:cf:
75:0b:95:fb:0c:63:90:f3:3e:52:9f:04:a9:35:c2:
ac:69:8b:9d:9f:a2:01:a1:0b:b8:3b:d8:5a:72:f9:
eb:d1:2b:88:2f:11:88:fe:52:8b:af:b7:11:27:da:
e4:59:68:af:0a:3c:5a:79:7c:0f:ed:aa:45:62:60:
4b:64:2e:67:8c:1e:61:ff:7a:7c:b7:cd:76:68:1d:
52:b1:bf:bd:0e:51:a4:49:27:89:52:a7:7f:86:c2:
36:04:d8:d2:0d:89:e3:78:f6:26:04:4f:80:5d:31:
c7:87:a2:29:1a:22:15:f8:17:52:72:0b:f0:b5:8a:
de:dc:7a:2b:f3:19:ff:c6:d1:52:67:0f:9f:ce:2e:
3b:24:3e:2d:e0:1e:d2:89:04:b0:38:11:9e:3e:6a:
81:74:df:fb:a3:82:73:71:0d:89:ed:a9:b6:b7:85:
f9:fb:dd:27:ba:2e:3e:b9:52:92:f9:49:2e:bf:4c:
ff:56:5f:fc:27:11:cd:53:d6:1a:38:77:43:18:ef:
39:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:40:14:05:ED:D3:A7:6C:5A:DF:7E:02:01:0B:FB:25:9B:3F:DF:FB
X509v3 Authority Key Identifier:
keyid:91:F5:89:1A:26:CF:A4:36:A2:3E:7E:1F:F9:76:64:8B:EE:79:EF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfWJGibPpDaiPn4f-XZki-5573c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7f1b74-c8d7-4a0d-8a39-daa7390b5ba7/1/kfWJGibPpDaiPn4f-XZki-5573c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:14:6b:00:ac:04:a7:63:19:00:a5:be:bf:03:f6:f1:c6:73:
46:13:8a:65:6d:7d:b3:a6:f0:8d:43:c7:5c:8b:2d:33:57:9e:
6a:82:ef:f3:cb:61:d8:4f:9c:7d:1e:99:95:9a:78:3a:d9:92:
34:26:94:18:56:bb:6e:69:e2:27:30:60:04:f3:07:af:01:5f:
42:e9:30:29:03:eb:e4:c2:48:da:89:24:52:9c:fd:10:46:01:
9b:db:bb:ea:27:73:2b:78:01:b1:df:fb:43:d1:f7:b4:cf:35:
50:02:e2:3f:18:ca:35:ab:e6:b7:dd:51:de:bb:ad:55:85:93:
dc:4a:f3:2f:3a:4f:61:29:3c:87:92:c2:4f:44:b3:e3:28:9e:
53:93:de:f3:51:dc:34:2b:dc:4f:dd:1a:e0:1e:b5:a4:18:bd:
32:c0:d4:7b:04:62:db:a9:5d:6a:40:4f:db:95:bf:2f:c4:6d:
b9:75:28:4e:b4:f7:24:84:ab:c3:7b:de:b7:c2:dd:df:c7:0e:
8f:89:36:bc:36:5e:ad:85:a1:03:90:f1:ac:ac:a2:06:2d:6b:
e3:a6:26:e9:ad:68:a7:e0:e9:4b:ae:57:e9:ce:13:bd:7a:ca:
a2:10:4e:9b:75:47:b5:a0:ce:f7:77:f6:81:ef:1a:09:53:65:
7d:fd:d3:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaemnenjDCfj9B0VnNpfUxlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZjU4OTFhMjZjZmE0MzZhMjNlN2UxZmY5NzY2NDhiZWU3
OWVmNzcwHhcNMjUwNTA1MDQwMDQ1WhcNMjUwNTA2MDQwMDQ1WjAzMTEwLwYDVQQD
Eyg0YjQwMTQwNWVkZDNhNzZjNWFkZjdlMDIwMTBiZmIyNTliM2ZkZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLUaRSXM065vEzYMWlTEd8NIawaQ
DdjguNhiDisFHS6eGfIWwWv/cl2Fi2OunM0KJthCtgQfS41nbs91C5X7DGOQ8z5S
nwSpNcKsaYudn6IBoQu4O9hacvnr0SuILxGI/lKLr7cRJ9rkWWivCjxaeXwP7apF
YmBLZC5njB5h/3p8t812aB1Ssb+9DlGkSSeJUqd/hsI2BNjSDYnjePYmBE+AXTHH
h6IpGiIV+BdScgvwtYre3Hor8xn/xtFSZw+fzi47JD4t4B7SiQSwOBGePmqBdN/7
o4JzcQ2J7am2t4X5+90nui4+uVKS+Ukuv0z/Vl/8JxHNU9YaOHdDGO85nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEtAFAXt06dsWt9+AgEL+yWbP9/7MB8GA1UdIwQY
MBaAFJH1iRomz6Q2oj5+H/l2ZIvuee93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzkt
ZGFhNzM5MGI1YmE3LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83ZjFiNzQtYzhkNy00YTBkLThhMzktZGFhNzM5MGI1YmE3
LzEva2ZXSkdpYlBwRGFpUG40Zi1YWmtpLTU1NzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRRrAKwE
p2MZAKW+vwP28cZzRhOKZW19s6bwjUPHXIstM1eeaoLv88th2E+cfR6ZlZp4OtmS
NCaUGFa7bmniJzBgBPMHrwFfQukwKQPr5MJI2okkUpz9EEYBm9u76idzK3gBsd/7
Q9H3tM81UALiPxjKNavmt91R3rutVYWT3ErzLzpPYSk8h5LCT0Sz4yieU5Pe81Hc
NCvcT90a4B61pBi9MsDUewRi26ldakBP25W/L8RtuXUoTrT3JISrw3vet8Ld38cO
j4k2vDZerYWhA5DxrKyiBi1r46Ym6a1op+DpS65X6c4TvXrKohBOm3VHtaDO93f2
ge8aCVNlff3Txg==
-----END CERTIFICATE-----
Generated at Mon May 5 10:55:07 2025 by rpki-client