Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
File: kkGtDn_CK_urVnvon2PZgF5euao.mft (raw, json)
Hash identifier: BB9TpFYqLFZ3NHny0fNU/J0mDpeF6rWE+3+3THZ6uPU=
Subject key identifier: 76:34:F0:7B:3E:EA:D0:A2:1F:8E:5B:C1:75:F4:AF:E1:4B:39:0B:DA
Authority key identifier: 92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
Certificate issuer: /CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Certificate serial: 0196C0815BD29562B5495A72E24BF2107040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
Manifest number: 1539
Signing time: Sun 11 May 2025 18:00:25 +0000
Manifest this update: Sun 11 May 2025 18:00:25 +0000
Manifest next update: Mon 12 May 2025 18:00:25 +0000
Files and hashes: 1: Fu58RJgsZ5Us0AAevq0rVOWRRzg.roa (hash: ng5uPev1pyRZi4kTfCBU+j8vTTj6PtE4Pb5wITUaj0Y=)
2: kkGtDn_CK_urVnvon2PZgF5euao.crl (hash: vC4wu3x3JiuDJe6q0jzcIjMEewDg5b4f7z2hPsjDPPU=)
3: qthrebr-v1IWeqSrT9AeYqstaDk.roa (hash: DPL9WcMNI+TsTDagJsEchXMuxd7Nz1dhpWlTxjl+984=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:81:5b:d2:95:62:b5:49:5a:72:e2:4b:f2:10:70:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9241ad0e7fc22bfbab567be89f63d9805e5eb9aa
Validity
Not Before: May 11 18:00:25 2025 GMT
Not After : May 12 18:00:25 2025 GMT
Subject: CN=7634f07b3eead0a21f8e5bc175f4afe14b390bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d9:7b:50:25:c8:73:dd:be:93:d8:80:ff:18:
92:dc:61:5b:79:d8:df:69:d7:b8:79:ad:86:2f:e4:
e9:e5:9b:06:3f:54:c2:62:68:b5:f6:f2:43:e7:3f:
d7:08:e4:60:bf:3c:e0:99:84:a9:7c:8f:ee:78:31:
4b:59:60:db:a4:e5:d6:ac:1c:72:bb:28:17:d5:e7:
71:3e:d8:65:31:dd:3d:73:f3:dd:4d:cc:b4:fa:ef:
48:90:04:60:e2:58:19:da:c9:d1:be:0f:d7:73:51:
ef:d4:bd:d4:af:49:7f:21:ab:b3:10:f8:81:67:6b:
17:49:7e:c2:0c:18:15:d6:83:93:74:bd:f7:ea:97:
d6:b5:4f:d9:fd:00:f3:88:56:03:c7:87:0c:d2:f4:
aa:37:6b:10:75:60:e4:98:02:b8:2f:e5:1c:54:ad:
e2:0a:4f:ca:5e:0f:70:52:ab:73:8a:66:29:ef:93:
d2:38:2a:35:b6:f7:3a:f8:d8:e7:e1:d9:8d:0a:6a:
43:f2:5d:af:ff:af:20:77:8e:af:47:bb:10:3a:22:
45:62:2b:68:d6:93:ec:1f:32:8c:a5:86:3b:e0:e0:
42:97:e0:68:81:1f:3e:73:f6:13:0e:83:be:e0:d0:
5b:7f:1c:e2:5c:23:73:d7:7a:f0:72:98:bc:ba:c7:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:F0:7B:3E:EA:D0:A2:1F:8E:5B:C1:75:F4:AF:E1:4B:39:0B:DA
X509v3 Authority Key Identifier:
keyid:92:41:AD:0E:7F:C2:2B:FB:AB:56:7B:E8:9F:63:D9:80:5E:5E:B9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kkGtDn_CK_urVnvon2PZgF5euao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/fb1a6d-4138-4c4f-aed9-4544c6109729/1/kkGtDn_CK_urVnvon2PZgF5euao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:56:27:ec:07:66:ea:d2:d8:67:91:e3:a2:09:fd:82:98:0c:
72:cd:85:65:4c:f6:cf:e9:cd:5e:55:9c:a6:06:3b:de:85:b4:
ce:8c:c5:53:64:70:85:e2:f2:88:b0:63:36:f8:89:f3:c7:80:
13:bb:b2:d0:a8:8f:d3:58:12:b6:ee:41:38:6d:63:05:79:be:
b9:a7:81:f6:cd:d1:8b:77:7c:66:c2:47:7e:f7:2b:8f:d5:5b:
0e:3c:d1:da:fb:71:c6:8d:95:20:e6:23:28:1a:e9:cd:9c:19:
ac:43:3a:c0:ac:15:25:0b:d3:5f:a2:1e:9b:89:2d:b1:21:63:
8f:a1:95:b2:9a:3f:0e:e9:52:fb:40:88:ac:58:19:35:66:84:
48:d0:ad:03:2a:d3:6f:00:c9:05:66:ce:c9:cf:d2:15:8d:25:
4c:31:99:25:3e:8b:a0:ed:ac:5b:27:79:54:19:c1:68:24:30:
3b:5a:65:0d:ee:b3:0c:3b:5e:34:c4:a1:3a:04:94:56:af:13:
30:6a:d3:cf:71:c9:85:75:3b:7c:9b:ab:28:b9:de:fb:b9:3a:
da:1a:2d:0e:bb:06:68:42:b4:7b:27:e2:06:5b:a7:85:7d:d6:
5e:00:19:1d:cb:3a:91:85:f0:d1:a1:db:d1:27:49:e2:2a:1e:
e5:91:f0:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbAgVvSlWK1SVpy4kvyEHBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNDFhZDBlN2ZjMjJiZmJhYjU2N2JlODlmNjNkOTgwNWU1
ZWI5YWEwHhcNMjUwNTExMTgwMDI1WhcNMjUwNTEyMTgwMDI1WjAzMTEwLwYDVQQD
Eyg3NjM0ZjA3YjNlZWFkMGEyMWY4ZTViYzE3NWY0YWZlMTRiMzkwYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Nl7UCXIc92+k9iA/xiS3GFbedjf
ade4ea2GL+Tp5ZsGP1TCYmi19vJD5z/XCORgvzzgmYSpfI/ueDFLWWDbpOXWrBxy
uygX1edxPthlMd09c/PdTcy0+u9IkARg4lgZ2snRvg/Xc1Hv1L3Ur0l/IauzEPiB
Z2sXSX7CDBgV1oOTdL336pfWtU/Z/QDziFYDx4cM0vSqN2sQdWDkmAK4L+UcVK3i
Ck/KXg9wUqtzimYp75PSOCo1tvc6+Njn4dmNCmpD8l2v/68gd46vR7sQOiJFYito
1pPsHzKMpYY74OBCl+BogR8+c/YTDoO+4NBbfxziXCNz13rwcpi8usdBSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY08Hs+6tCiH45bwXX0r+FLOQvaMB8GA1UdIwQY
MBaAFJJBrQ5/wiv7q1Z76J9j2YBeXrmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDkt
NDU0NGM2MTA5NzI5LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9mYjFhNmQtNDEzOC00YzRmLWFlZDktNDU0NGM2MTA5NzI5
LzEva2tHdERuX0NLX3VyVm52b24yUFpnRjVldWFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmVYn7Adm
6tLYZ5Hjogn9gpgMcs2FZUz2z+nNXlWcpgY73oW0zozFU2RwheLyiLBjNviJ88eA
E7uy0KiP01gStu5BOG1jBXm+uaeB9s3Ri3d8ZsJHfvcrj9VbDjzR2vtxxo2VIOYj
KBrpzZwZrEM6wKwVJQvTX6Iem4ktsSFjj6GVspo/DulS+0CIrFgZNWaESNCtAyrT
bwDJBWbOyc/SFY0lTDGZJT6LoO2sWyd5VBnBaCQwO1plDe6zDDteNMShOgSUVq8T
MGrTz3HJhXU7fJurKLne+7k62hotDrsGaEK0eyfiBlunhX3WXgAZHcs6kYXw0aHb
0SdJ4ioe5ZHwkw==
-----END CERTIFICATE-----
Generated at Sun May 11 22:48:04 2025 by rpki-client