Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
File: kYMWq06hPrtUVgwaZwQtR-lm2CM.mft (raw, json)
Hash identifier: LskSvf+nFbbTEu7gEHQ7D3AXtzeeRoCyFXvac6BSUfI=
Subject key identifier: BE:35:60:7D:F9:CE:2F:2F:3B:A0:C7:45:37:F2:A5:DE:32:6C:FD:8F
Authority key identifier: 91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
Certificate issuer: /CN=918316ab4ea13ebb54560c1a67042d47e966d823
Certificate serial: 0196CB04FF7F63B00E407BC90DA41FEF1FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
Manifest number: 153E
Signing time: Tue 13 May 2025 19:00:24 +0000
Manifest this update: Tue 13 May 2025 19:00:24 +0000
Manifest next update: Wed 14 May 2025 19:00:24 +0000
Files and hashes: 1: 1pItkF34I0T0XrYWSJRD7pj_ja0.roa (hash: xX/gcWJfZ1minzry/xWMxIOizMCvErT51ZVCYZljegM=)
2: kYMWq06hPrtUVgwaZwQtR-lm2CM.crl (hash: KH3P6pQ7rvMvaJsQnqzSQgIfnQxC4qaX1c7ffEp4QoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 May 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:cb:04:ff:7f:63:b0:0e:40:7b:c9:0d:a4:1f:ef:1f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=918316ab4ea13ebb54560c1a67042d47e966d823
Validity
Not Before: May 13 19:00:24 2025 GMT
Not After : May 14 19:00:24 2025 GMT
Subject: CN=be35607df9ce2f2f3ba0c74537f2a5de326cfd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cc:41:cf:19:d7:60:bf:e9:3a:e1:2f:8a:05:
4e:5a:70:b9:d1:55:49:67:28:34:8b:a3:aa:2f:09:
b7:22:5c:2b:6c:4e:1a:6f:08:9b:27:45:8b:fc:79:
e6:36:f2:0c:b0:9e:dc:b1:4d:42:70:05:f9:c0:df:
65:0c:a7:c6:0a:1b:6a:ee:20:08:28:f6:56:db:b1:
36:39:7f:ce:6f:34:46:d9:7c:5c:9f:01:68:c5:a4:
e9:90:70:b7:77:bc:d3:93:4e:1b:c7:f5:43:6a:15:
a5:5f:87:98:82:f4:ac:47:28:e7:86:8c:07:67:4e:
20:a5:58:c8:74:69:88:92:0e:34:a7:d4:88:39:d9:
5a:52:bb:f8:1a:b1:7e:25:59:5f:61:44:ee:12:82:
63:8e:71:9c:2c:3b:56:4d:9d:c7:a3:c4:8c:e7:7d:
1b:00:d1:8e:6e:ed:98:0f:9d:bd:6d:8b:7f:b6:12:
d1:10:d3:62:9a:3d:ff:11:1c:fe:ed:b7:bf:3c:22:
d9:23:bd:2f:1a:df:95:86:d8:16:8e:4a:9b:7e:f2:
62:49:13:75:14:24:5c:fc:4c:70:3d:5b:57:16:e0:
47:01:dc:00:93:73:11:19:a0:55:c5:61:03:9e:79:
d8:42:38:28:85:65:94:7a:84:0c:78:fd:2b:7b:c3:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:35:60:7D:F9:CE:2F:2F:3B:A0:C7:45:37:F2:A5:DE:32:6C:FD:8F
X509v3 Authority Key Identifier:
keyid:91:83:16:AB:4E:A1:3E:BB:54:56:0C:1A:67:04:2D:47:E9:66:D8:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kYMWq06hPrtUVgwaZwQtR-lm2CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/89fb99-9049-482f-95dc-9e3cd0d9d77a/1/kYMWq06hPrtUVgwaZwQtR-lm2CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:67:da:fe:7a:b3:af:05:b4:e0:a7:93:e9:a4:17:63:48:45:
4f:fc:63:ff:0a:ef:75:3e:d9:55:3b:8a:0f:70:ce:3a:a5:73:
7e:57:73:19:df:e3:26:e4:8d:1f:a6:a2:f8:75:c2:38:38:a3:
5e:75:c9:35:ac:b5:ec:5d:3f:aa:5b:a0:45:a9:c5:cc:07:91:
e6:42:2f:03:39:73:78:e3:b7:71:65:29:5c:ae:4e:e9:b6:ee:
74:99:9c:5a:9a:af:e8:9f:ae:ad:9a:3c:9b:3e:bd:b7:cc:13:
d5:15:4e:10:84:6c:ed:9b:64:81:c0:58:fa:5b:cf:a6:0a:90:
41:30:bf:64:ef:51:f5:4e:0e:34:32:ca:3d:6a:15:ad:c6:b1:
74:e8:7f:07:ea:e6:24:54:96:ee:18:8d:61:c3:2d:16:30:9a:
9c:b0:94:7d:4f:0f:6d:30:a9:e6:1d:46:04:46:d5:1b:73:65:
26:25:82:d6:e1:6f:44:e8:72:19:ca:6b:42:40:06:b9:bb:b1:
92:71:66:47:e2:a1:05:f9:8e:fd:ab:b0:72:e1:e3:9b:df:07:
06:9b:b2:53:51:18:fa:0e:1a:13:63:fc:70:bf:2d:87:65:59:
5f:d5:94:3a:91:97:8f:ea:ad:b1:d1:6d:8c:66:c6:5c:7a:8f:
be:7f:cc:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbLBP9/Y7AOQHvJDaQf7x+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxODMxNmFiNGVhMTNlYmI1NDU2MGMxYTY3MDQyZDQ3ZTk2
NmQ4MjMwHhcNMjUwNTEzMTkwMDI0WhcNMjUwNTE0MTkwMDI0WjAzMTEwLwYDVQQD
EyhiZTM1NjA3ZGY5Y2UyZjJmM2JhMGM3NDUzN2YyYTVkZTMyNmNmZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosxBzxnXYL/pOuEvigVOWnC50VVJ
Zyg0i6OqLwm3IlwrbE4abwibJ0WL/HnmNvIMsJ7csU1CcAX5wN9lDKfGChtq7iAI
KPZW27E2OX/ObzRG2XxcnwFoxaTpkHC3d7zTk04bx/VDahWlX4eYgvSsRyjnhowH
Z04gpVjIdGmIkg40p9SIOdlaUrv4GrF+JVlfYUTuEoJjjnGcLDtWTZ3Ho8SM530b
ANGObu2YD529bYt/thLRENNimj3/ERz+7be/PCLZI70vGt+VhtgWjkqbfvJiSRN1
FCRc/ExwPVtXFuBHAdwAk3MRGaBVxWEDnnnYQjgohWWUeoQMeP0re8ND8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL41YH35zi8vO6DHRTfypd4ybP2PMB8GA1UdIwQY
MBaAFJGDFqtOoT67VFYMGmcELUfpZtgjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMt
OWUzY2QwZDlkNzdhLzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi84OWZiOTktOTA0OS00ODJmLTk1ZGMtOWUzY2QwZDlkNzdh
LzEva1lNV3EwNmhQcnRVVmd3YVp3UXRSLWxtMkNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmfa/nqz
rwW04KeT6aQXY0hFT/xj/wrvdT7ZVTuKD3DOOqVzfldzGd/jJuSNH6ai+HXCODij
XnXJNay17F0/qlugRanFzAeR5kIvAzlzeOO3cWUpXK5O6bbudJmcWpqv6J+urZo8
mz69t8wT1RVOEIRs7ZtkgcBY+lvPpgqQQTC/ZO9R9U4ONDLKPWoVrcaxdOh/B+rm
JFSW7hiNYcMtFjCanLCUfU8PbTCp5h1GBEbVG3NlJiWC1uFvROhyGcprQkAGubux
knFmR+KhBfmO/auwcuHjm98HBpuyU1EY+g4aE2P8cL8th2VZX9WUOpGXj+qtsdFt
jGbGXHqPvn/MjA==
-----END CERTIFICATE-----
Generated at Wed May 14 03:09:00 2025 by rpki-client